Correctness
Look for logic errors, missing edge cases, unsafe inputs, and
failure handling.
For example: A missing database record reaches
a property access without a null check.
Maintainability
Identify duplicated behavior and abstractions that add
complexity without a useful boundary.
For example: Two generated helpers format the
same value, leaving two places to fix the next bug.
Security
Review access controls, secrets, and unsafe data flows across
applications, LLMs, agents, and MCP tools.
For example: A query accepts a record ID but
never checks the authenticated tenant.
Codebase context
Read the change alongside related callers, contracts, and tests,
rather than treating the diff as the whole system.
For example: A return-type change also affects
a caller in another file.