Understand data and access first
Trace input origins, transformations, and readers of results. Check server-side authorization instead of relying on hidden interface buttons.
Create minimal failure cases
Test normal, empty, oversized, and unauthorized inputs. Save reproduction steps after an error, then request a minimal fix.
Review the change
Compare the diff, dependencies, configuration, and error handling. Run relevant tests and check for credentials before committing.
Updated: 2026-10-10 · Verify these methods against actual projects.