# Code Quality

Quick reminders (detailed checks in `.claude/skills/ship-review/references/review-categories.md`):

- No N+1 queries, missing indexes, or unbounded queries
- No race conditions in async code
- No memory leaks (uncleaned listeners, intervals, subscriptions)
- Validate error handling on all external calls (APIs, DB, file I/O)
- Consistent API response format across endpoints
- No nested loops over large datasets without justification
- Use caching on repeated expensive operations
- Validate input at system boundaries
- Use idempotency keys on payment operations
- Validate webhook signatures on incoming webhooks
- Use circuit breakers and timeouts on third-party API calls