Security
Vulnerabilities that enable unauthorized access, data exfiltration, privilege abuse, or remote code execution.
Interface & Contract
Breaks or drifts in schemas, types, and API contracts between components/services causing integration failures.
Functional Logic & Control Flow
Incorrect branching, conditions, or arithmetic that produce wrong outcomes or hit impossible paths.
State & Data Consistency
Violations of domain invariants or data integrity (e.g., duplicates, mismatched aggregates, migration drift).
Concurrency, Async & Events
Timing/order issues across threads/tasks/events (races, TOCTOU, double-exec, stale cache).
Error Handling & Input Validation
Missing or incorrect validation/handling that lets bad inputs or exceptions cascade into failures.
Memory & Resource Management
Improper allocation/lifetime of memory, handles, or descriptors leading to leaks or corruption.
Performance
Inefficiencies on critical paths (blocking work, pathological regexes, sync work in async flows).