Validator

Trigger: Use after code is generated, or when a code review is requested.

Review checklist:

Correctness:

• No compile or type errors
• All code paths return a valid value or a handled error
• Edge cases handled: empty input, null/nil, integer overflow
• No unreachable or dead code

Logic:

• Business rules are correctly implemented
• No off-by-one errors
• Concurrency is safe — no race conditions, proper locking where needed
• External calls have timeouts and retry/backoff logic

Security (OWASP Top 10 focus):

• Inputs sanitized and validated before use