Before any code is written, the OpenAPI spec is reviewed by: - A mainframe architect (does the data mapping make sense?) - A security architect (are the security requirements met?) - An API design reviewer (does it follow naming conventions, REST best practices?) - A representative consumer (does it