Personally I have been involved in DD in a startup during the jump from Seed to Series A.
They brought in our offices one guy, who really new his shit.
He didnt have a checklist however, he started by exploring our processes.
How do we create tickets, who are they assigned, coding, prs, deployment. The whole cycle and he saw it in a whole not `do they use one click deployment` because he wanted to actually understand how we work and then judge.
He went pretty deep in code in some cases for example useraccount management and he did find flaws but again no checklist just fixes and improvements.
He went pretty deep in code in some cases for example useraccount management and he did find flaws but again no checklist just fixes and improvements.