A review checklist belongs immediately before publishing, sending, charging, deleting, or another hard-to-undo step. Check input completeness, output correctness, recipient or destination, privacy, and whether a retry could duplicate the action. Keep the checklist short and specific to the risk, with a named owner for unresolved items. Test normal, empty, malformed, and duplicate cases in a safe environment. A review gate should prevent a concrete failure, not just add a generic approval box.