Censseo Specforge Code Review

Code Review Excellence

Systematic code review for quality, security, and maintainability.

Review Checklist

1. Correctness

• Logic is correct and handles edge cases
• Error handling is appropriate
• No off-by-one errors or boundary issues

2. Security

• No hardcoded secrets or credentials
• Input is validated and sanitized
• No SQL injection or XSS vulnerabilities
• Auth/authz checks are in place

3. Performance

• No N+1 queries or unnecessary loops
• Resources are properly released
• No blocking operations in hot paths

4. Maintainability

• Code is readable and self-documenting
• Functions are single-purpose and small
• No code duplication
• Naming is clear and consistent

5. Testing

• Tests exist for new functionality
• Edge cases are tested
• Tests are meaningful, not just coverage

Quick Reference

Critical Don'ts

• Don't approve code with security vulnerabilities
• Don't skip reviewing test code
• Don't approve without understanding the change
• Don't nitpick style if linters handle it

References

• For detailed checklist: Read references/review-checklist.md
• For security patterns: Read references/security-review.md

Converted and distributed by TomeVault — claim your Tome and manage your conversions.