Everything I deliver passes a fixed quality check before release: security, privacy (GDPR), accessibility and performance, plus eighteen more areas. Not a checklist I read through when I remember to, but a system I built myself and run on every single change.
I use AI tools actively in development. That is why I can deliver faster than an agency at a lower price, and it is exactly why the check exists. The speed is only safe because every change has to pass the gate before it reaches you.
What gets checked
22 areas, each with its own detailed checklist. Roughly grouped:
Security and privacy
Security
Privacy (GDPR)
Secrets and configuration
Supply chain
Dependencies
User experience
Accessibility (WCAG)
Forms and input
Performance
Search visibility
Multilingual support
Code and operations
Error handling
Type safety
Concurrency
API contracts
Data model and migrations
Test coverage
Logging and observability
Code quality
Framework practice
3 further areas
For developers
The system is a self-built audit suite: each area is a prescriptive checklist used both as build-time rules while developing and as the basis for a full audit before delivery. Findings are independently verified before they are reported: the default stance is to refute, not confirm. The suite learns from every project and is version-controlled across my machines, together with the rest of the toolchain.
Parts of the suite are on their way out as open source. Until then, my code lives on GitHub.