What Code Review Can't See (And Bad Data Always Finds)

Code review is good at inspecting intent. It's structurally blind to a specific class of bugs - the ones where valid-looking data exposes wrong assumptions across layers. Here's why, and what complements review for input boundaries.