security

API design, database schemas, and error handling patterns

Pipeline design, schema review, and SQL optimization

System design, tradeoff analysis, and architecture decision records

Source-of-truth feature specs with preflight/postflight gates that stop agent drift

Unit, integration, and end-to-end test generation

Live web-app verification — drive real browser flows via Playwright MCP, assert console and network health

Dockerfiles, CI/CD pipelines, and infrastructure review

Layout review, design system audits, and responsive checks

Component building, styling review, and accessibility checks for React/Next.js

README generation, API documentation, and ADR templates