# Common Bugs Checklist

- null / undefined handling
- off-by-one and empty-input behavior
- race conditions or double-submit paths
- missing authorization checks
- silent error swallowing
- expensive loops or repeated queries
- test gaps on unhappy paths
