Write specs, not code.
Let machines do the rest.

spec: create_user_endpoint
version: 1.2.0

intent: |
  HTTP POST endpoint that creates a new user account.
  Validates input, hashes the password, stores in database,
  and returns the created user without the password field.

interface:
  input:
    type: HTTPRequest
    method: POST
    path: /api/users
    body:
      email: string (valid email format)
      password: string (min 8 chars, at least one number)
      name: string (non-empty, max 100 chars)
  output:
    success:
      status: 201
      body:
        id: string (UUID v4)
        email: string (matches input.email)
        name: string (matches input.name)
        created_at: string (ISO 8601 timestamp)

invariants:
  - "output.body never contains a 'password' field"
  - "password is stored as a bcrypt hash, never plaintext"
  - "response time < 500ms at p99 under 100 concurrent requests"