Code Review

Workflow

Preflight: establish scope (PR intent), risk profile, and how to run/verify changes.
High-level pass: identify release blockers (security, correctness, data loss, operational hazards).
Detailed pass: review correctness, security, performance, maintainability, and consistency with the codebase.
Validation pass: check tests, migrations, docs, config changes, and rollout/rollback.
Write up findings by severity with file/line references and concrete fix suggestions.

What is the change trying to accomplish (requirements, user story, bug)?
What parts of the system are touched (API, DB, auth, infra)?
What is the risk: data migration, auth changes, backwards compatibility, perf regressions?
How can we validate locally: commands, test target, feature flags, environments?