Ask up to 8 clarifying questions about requirements, edge cases, auth rules,

and performance expectations. Do not guess — list every assumption explicitly.