Before I submit

Progress stays in this browser. Review each item against the case study.

Requirements

Did I implement every stated requirement?Did I identify assumptions?Did I handle ambiguous requirements?Did I avoid unnecessary features?

Architecture

Is responsibility separated clearly?Is business logic separated from HTTP handling?Is database access sensible?Is the design understandable?

Security

Input validatedAuthorization checkedSQL injection preventedAuthentication handled correctlySensitive information not leakedErrors handled safelyAudit logging considered

Database

Correct primary keysCorrect foreign keysAppropriate constraintsAppropriate indexesTransactions where requiredNo obvious integrity problems

Reliability

Failure cases consideredDuplicate operations consideredPartial updates preventedConcurrency considered where relevant

Testing

Happy pathInvalid inputBoundary casesUnauthorized accessDuplicate requestDatabase failureImportant business rules