Audit a web codebase for security, performance, correctness, and refactoring improvements WITHOUT changing any outward-facing behavior.