Full-Stack

Design API contracts (DTOs, errors)

Auth flow end-to-end

File uploads: limits & security

Pagination/filtering alignment

Versioning and backward compatibility

CORS and cookies strategy

CSRF strategy (if sessions)

Client caching & invalidation

Handling partial failures

Observability across FE+BE

API tests + UI tests baseline

Linting & formatting

CI: build/test/lint

Security checklist (overview)

Performance budgets (overview)

Migrations + rollback strategy

Blue/green overview

Secrets management basics

Monitoring and alerting

Backups and restore drills

Build CRUD app with auth + roles

Add payments/integrations (mocked)

Add admin panel + audit logs

Add CI/CD deploy

Write documentation + runbook