1. Confirm that the add function is tested
2. Logging of key business logic
3. No unhandled exception will cause the process to crash
4. Eliminate simple errors such as null references, index out of bounds, etc.
5. All inputs are security filtered and length limited
6. With anti-brush mechanism and overload protection
7. Have maintenance documentation
8. Code is reviewed
9. Clear monitoring requirements