HighFile-scopeC# Plug & play

Order validations before database queries

Validate inputs and preconditions up-front and return early before issuing any database queries.

Why this matters

Failing fast reduces wasted I/O, keeps code paths simple, and prevents unnecessary transaction/connection usage.

Side-by-side examples engineers can pattern-match during review.

Avoid

var user = await _db.Users.FindAsync(id);
if (id <= 0) return BadRequest();

Prefer

if (id <= 0) return BadRequest();
var user = await _db.Users.FindAsync(id);

Bad

var row = ctx.Table.Find(id); if(!IsValid(id)) return;

Good

if(!IsValid(id)) return; var row = await ctx.Table.FindAsync(id);

From the same buckets as this rule.

Critical
Check consent and role-based authorization before returning ePHI
Handlers must verify the requester’s role and a valid consent/relationship (e.g., care team assignment) before disclosing ePHI; include Purpose-Of-Use in the decision and audit the outcome.
compliance-hipaasecurity-hardening+2
Critical
Children's data: verify age and parental consent
If data subject is a child/adolescent, require age verification and parental/legal guardian consent prior to processing; deny processing otherwise and do not store the payload.
compliance-lgpdapi-conventions+1
Critical
Disallow public ingress without explicit allowlist
For Ingress/Service of type LoadBalancer, require host/path allowlist and TLS; forbid 0.0.0.0/0 exposure without WAF or Auth.
infra-as-codesecurity-hardening+1