diff --git a/wizard-work/quill/code-review-checklist.md b/wizard-work/quill/code-review-checklist.md
new file mode 100644
index 0000000..f97d849
--- /dev/null
+++ b/wizard-work/quill/code-review-checklist.md
@@ -0,0 +1,21 @@
+# Code Review Checklist
+
+## Security
+- No secrets in code or configs.
+- Input validation and sanitization.
+- Authentication and authorization checks.
+
+## Performance
+- Avoid N+1 queries.
+- Cache where appropriate.
+- Profile before optimizing.
+
+## Testing
+- Unit tests for new logic.
+- Integration tests for APIs.
+- Tests pass locally and in CI.
+
+## Documentation
+- README updated if behavior changes.
+- Inline comments for non-obvious code.
+- Changelog entry added.