# Good / bad commit examples

| ✅ Good | ❌ Bad |
|---|---|
| `fix(db): return 404 instead of 403 on IDOR (prevent entity leak)` | `fix: db issue` |
| `refactor(api): consolidate query handlers into one contract` | `refactor stuff` |
| `feat(session): session-health line + threshold rule` | `feat: added new stuff` |
| `revert: "feat(auth): code TTL"` (sha) | `reverted it` |