What reviewing real codebases taught me about code review

I published a 900-check code review runbook. Then I used it on real engagements. The checklist worked, but the real lessons were about the process — starting wi