You're deployed at a customer who loves the pilot agent and wants to go live next week. The prototype has no input validation, no error handling or timeouts, no logging, secret keys hardcoded, and no usage limits. Do a production-readiness pass: identify the gaps, then implement the critical ones (input validation, error handling and timeouts, structured logging, config from environment rather than hardcoded, basic rate limiting). Prioritize and state assumptions. AI tools are allowed. Then get exec sign-off on a go-live plan.