Pull request review checklist for the team.
Python code style, typing, and project conventions.
Project-wide security rules for handling untrusted input, secrets, and database access.
Database safety rules for the data-access layer.
Testing conventions for the project — pytest, fixtures, integration vs unit.