Skip to main content

Bundles/database-design-operations

Database Design & Operations Audit

database-design-operations · v1.1.0 · paid

Evaluates database schema design, query patterns, migration safety, access control, backup strategy, and operational monitoring for SQL databases.

Schema Design

schema-design · weight 0.25

Every table has an explicit primary key
ab-000897
critical
Foreign keys enforce referential integrity between related tables
ab-000898
critical
Indexes exist on columns used in WHERE, JOIN, and ORDER BY clauses
ab-000899
high
NOT NULL constraints on required fields
ab-000900
high
Appropriate data types for each column (no stringly-typed data)
ab-000901
medium
Consistent naming convention across tables and columns
ab-000902
low

Query Patterns

query-patterns · weight 0.25

No N+1 query patterns
ab-000903
critical
All user-facing queries use parameterized inputs (no string interpolation)
ab-000904
critical
Connection pooling configured (not new connection per request)
ab-000905
high
Transactions used for multi-step mutations
ab-000906
high
Queries select specific columns instead of SELECT *
ab-000907
low

Migration & Versioning

migration-versioning · weight 0.15

A migration tool or framework is in use
ab-000908
high
Migrations are non-destructive (no data loss without explicit intent)
ab-000909
high
Migrations have rollback capability (down migrations or revert scripts)
ab-000910
medium
All migration files are committed to version control
ab-000911
medium
At least 1 seed data script exists for development and testing
ab-000912
low

Security & Access Control

security-access · weight 0.2

No hardcoded database credentials in source code
ab-000913
critical
Row-Level Security (RLS) or equivalent access control on multi-tenant tables
ab-000914
high
Database user follows least privilege (not using superuser for application)
ab-000915
medium
Sensitive data columns use encryption (at-rest encryption beyond platform defaults)
ab-000916
medium
Database connections use SSL/TLS
ab-000917
high

Backup & Recovery

backup-recovery · weight 0.1

Backup strategy is documented
ab-000918
high
Point-in-time recovery (PITR) is available
ab-000919
medium
Restore procedure has been tested at least 1 time with documented results.
ab-000920
medium
Database credentials are rotated on a defined schedule
ab-000921
low

Monitoring & Operations

monitoring-ops · weight 0.05

Health check endpoint includes database connectivity test
ab-000922
medium
Slow query logging or monitoring is configured
ab-000923
low
Connection pool metrics are monitored
ab-000924
info