What I do, even as a developer:
- Read the file list first, not the lines.
git diff --stat. Does every file make sense for "recurring bookings"? A change inauth/ormiddleware.tsis a question to ask. - Read migrations and anything with delete/permissions fully. That's where mistakes cost money. UI code you can mostly judge by clicking.
- Ask a fresh session to review it. New session, prompt: "Review the diff of the last commit against main. List risks, anything not needed for recurring bookings, and anything that could delete or leak data." A fresh context doesn't defend its own work.
- Test the edges, not the happy path. Booking that repeats past the end of the month, cancel one occurrence, timezone change.
Next time: "Plan this in 4 steps, each step small enough to commit and test separately." Then review 4 x 200 lines.