[ ] All code reviewed by at least one other person (or by your future self after a 48-hour break) - [ ] Unit tests pass with >90% coverage of critical paths - [ ] Integration tests pass against paper trading environment - [ ] No hardcoded credentials in source code - [ ] All configuration is externa