Review

Put user experience first. Choose the simplest solution that meets the need while preserving correctness, security, user data, and required contracts.

Scope

Review-only requests authorize inspection and findings, without edits to code, design documents, or requirement status. Apply requested fixes within the agreed scope; existing authorization does not need a separate approval step.

Evaluate

Identify users and their tasks, including API consumers, maintaining developers, and operators. Assess whether workflows are understandable, predictable, and recoverable in normal use, failure, and later maintenance.