# Code Review Checklist

## Security
- No secrets in code or configs.
- Input validation and sanitization.
- Authentication and authorization checks.

## Performance
- Avoid N+1 queries.
- Cache where appropriate.
- Profile before optimizing.

## Testing
- Unit tests for new logic.
- Integration tests for APIs.
- Tests pass locally and in CI.

## Documentation
- README updated if behavior changes.
- Inline comments for non-obvious code.
- Changelog entry added.