# Implementation checklist

- Keep your current API key unchanged in `companies.api_key` and copy that same value into the client site `client-config.json`. Do not place it in the PHP API files.
- Confirm the `companies` table has `notification_email` and `is_active`.
- Confirm the `reviews` table has the columns already discovered: `public_id`, `customer_name`, `customer_email`, `title`, `review_text`, `rating`, `status`, moderation token fields and timestamps.
- Set `debug => true` only during testing; return it to `false` for production.
- Ensure `reviews@innovahere.com` exists, or change the sender address.
- Add both www and non-www versions of every authorized client domain to `allowed_origins`.
- After approval, refresh the client page; approved reviews are cached for up to 60 seconds.

- Email buttons first open a confirmation page; the status changes only after the owner presses the confirmation button.