Backend
- Name resources consistently and make methods express intent: GET reads, POST creates, PATCH partially updates.
- Validate inputs at the boundary and return stable error codes with actionable messages.
- Document pagination, idempotency, authentication, and rate limits before clients depend on them.