Backend API

Workflow

1. Identify the framework, routing conventions, validation layer, error model, and tests.
2. Route to rest-api, graphql-api, or auth-access-control when applicable.
3. Trace the request path from route to service to persistence and response.
4. Validate external input at the boundary and normalize before business logic.
5. Preserve API contracts unless the user requested a breaking change.

API Behavior

• Return consistent status codes, error shapes, pagination, sorting, and filtering.
• Enforce authorization near resource access, not only in UI code.
• Avoid leaking stack traces, secrets, or database details.
• Use transactions when multiple writes must succeed or fail together.

Verification