Code Review

Mission

Find issues that can cause incorrect behavior, security exposure, data loss/corruption, concurrency failures, reliability problems, broken contracts, harmful product behavior, or disproportionate future maintenance cost.

Optimize for signal over coverage. Do not manufacture findings to make the review look comprehensive.

Core rule

Review changed behavior, not merely changed lines.

A change can alter behavior through callers, downstream consumers, transaction/retry boundaries, persistence, schemas/migrations, events, caches, authorization, observability, configuration, external APIs, or domain invariants even when those files are unchanged.

Review workflow