cc-defensive-programming

| No executable code in assertions | Code disappears in production builds | | No empty catch blocks | Silently swallows bugs that compound | | External input validated | Security vulnerabilities, data corruption |

Why triage works: These 5 items catch 80% of defensive programming bugs. Full checklist (21 items) is for non-emergency review.

Cutting corners in a crisis creates the NEXT crisis. The "quick fix" empty catch block you add today becomes tomorrow's 3 AM page.

使用 24 项清单检查错误处理、输入验证和异常模式。在审计防御代码、设计路障、选择断言与错误处理或决定正确性与稳健性策略时使用。触发条件：空的 catch 块、缺少输入验证、具有副作用的断言、错误的异常抽象级别、垃圾进垃圾出心态、跳过验证的最后期限压力、可信源合理化。生成状态表，其中包含每个项目的违规/警告/通过，或路障/错误处理设计建议。 来源：ryanthedev/code-foundations。