Your POC impressed everyone. List what has to change before it can go to production.

Strong answer

Authentication via the customer's SSO and real authorisation; production data pipelines instead of a one-off export, with refresh and ACL sync; an evaluation set and regression tests that run on every change; observability (traces, latency, cost per request, failure rates) and alerting; rate limits, fallbacks and timeouts; prompt-injection and data-leak testing; a cost model at expected volume; a security review and data-processing agreement; runbooks and an on-call owner; a support path for users; and a named business owner who decides on changes. Usually the POC code is a reference, not the foundation.

Weak-answer indicators

• "Just scale the POC"
• No evaluation or observability
• No ownership after handover