Database access

Database code is a boundary where application correctness and data integrity meet. Migrations should be versioned and reversible when practical.

• Use parameterized queries.
• Define indexes based on measured access patterns.
• Use transactions for multi-step invariants.
• Keep database credentials outside source control.