29 lines
1.1 KiB
Markdown
29 lines
1.1 KiB
Markdown
# Routing And Runtime Checklist
|
|
|
|
## Inspect First
|
|
|
|
- Entry HTML, boot scripts, lazy chunks, hydration data, runtime config
|
|
- Browser storage, service workers, cached responses, transient globals
|
|
- Proxy headers, host headers, path prefixes, and base-URL derivation
|
|
|
|
## High-Value Web Targets
|
|
|
|
- Hidden routes, debug pages, preview modes, experiment toggles
|
|
- Auth minting, refresh logic, cookie scope, header injection, role derivation
|
|
- Upload, import, export, archive, template, and deserialization boundaries
|
|
- Queue producers, background workers, cron tasks, and downstream state mutations
|
|
|
|
## Evidence To Keep
|
|
|
|
- Exact request order and the one request that changes the conclusion
|
|
- Decisive request and response snippets instead of full trace dumps
|
|
- Storage keys, feature flags, queue names, and worker identifiers
|
|
- Route names, handler names, and proxy rules tied to runtime behavior
|
|
|
|
## Common Pitfalls
|
|
|
|
- Trusting visible UI over backend enforcement
|
|
- Trusting checked-in source over actively served assets
|
|
- Ignoring proxy or routing inputs that alter behavior
|
|
- Expanding sideways before one minimal flow is reproduced
|