First
Name the risk
Before anyone touches the code, I say out loud what can go wrong. Migrations, cryptography, identity, debt — the danger is usually quieter than the ticket. Once the risk has a name, the team stops guessing and starts choosing.
In practice
Moving Jack's Flight Club off WordPress started with a map of what could break, not a new framework.


