workflow-livraison

Run the five-dimension checklist: confirm the feature handles golden path and edge cases, review the full git diff for regressions, check security gates on every route, justify complexity, and look for N+1 queries. Report each dimension explicitly in the restitution format.

Identify all callers of the modified code by grepping the Nuxt services and pages directories for the endpoint or component name. Review the complete git diff of every touched file and confirm legacy fallbacks and existing response formats remain intact.

Verify IDOR protection on every client-supplied id, never derive school_id from payloads, avoid adding technical fields to fillable arrays, require auth middleware on mutating routes, use generic client error messages, and ensure every catch block logs the error.

Invoke it systematically at the end of every implementation, before responding to the user. It is designed as a mandatory gate for the Toollab project, not an optional review, and anything not verified must be declared as untested.

A checklist cannot execute tests itself; it relies on actually running curl requests, Playwright checks, or test suites for evidence. Cases that cannot be exercised due to environment limits must be explicitly declared as untested rather than assumed correct.