1. Receive Encore.ts code for review.
2. Check for infrastructure declarations inside functions.
3. Verify the use of ES6 imports instead of `require()`.
4. Ensure cross-service calls use `~encore/clients`.
5. Validate proper error handling with `APIError`.
6. Check for SQL injection risks and ensure template literals are used.
7. Review for missing type annotations and exposed internal endpoints.
8. Confirm subscription handlers are idempotent and secrets are accessed correctly.