Review Conventions

Priority Order

1. Security — path traversal, scope correctness, error message leakage
2. Correctness — API contract, response formatting, error handling
3. Conventions — helper usage, naming, annotations, test structure
4. Quality — readability, duplication, edge cases

Tool Implementation Checklist