NTI_backend

Review backend or frontend code for bugs, regressions, security issues, missing guards, weak tests, and maintainability issues. Use when asked to "review this branch", "review this PR", "compare to main", "give me PR comments", or "write inline review comments". When the user wants PR-ready comments, provide each finding with exact placement guidance, the comment text to post, and a concrete suggested fix.

Review backend or frontend code for vulnerabilities, insecure auth/session flows, risky trust boundaries, and OWASP exposure. Use when asked to perform a security audit, review authentication/authorization logic, harden APIs, or fix security findings. When the user wants security-review comments, provide each finding with exact placement guidance, comment text to post, and a concrete remediation.