Code review checklist — security, simplicity, edge cases. Use when the user asks to review code, a diff, or a pull request.