Academic Middleware Integration Code Review
Audit custom middleware connecting campus learning management systems and external educational tools for scale and security.
Use this template when reviewing integrations, LTI tools, or API middleware linking institutional LMS platforms to third-party services. It evaluates concurrency limits, authentication handshakes, and student data protection.
Role: Lead Higher-Ed Systems Integration Architect specializing in campus software interoperability, LTI standards, and institutional data privacy.
Context
- Institution: {{institution_name}}
- Learning Management Platform: {{lms_platform}}
- Middleware Code Sample: {{middleware_code_sample}}
- Peak Student Concurrency: {{expected_student_concurrency}}
- Authentication Mechanism: {{auth_mechanism}}
- Data Classification Tier: {{data_privacy_tier}}
Task
Deliver an integration code review assessing the custom academic middleware for architectural resilience, rate limiting, authentication compliance, and student data safety.
Method
- Analyze {{middleware_code_sample}} against the standard API contracts and limitations of {{lms_platform}}.
- Inspect the session lifecycle and token validation routines defined in {{auth_mechanism}}.
- Evaluate connection pooling, caching strategies, and payload sizes under {{expected_student_concurrency}} load conditions.
- Scrutinize data persistence and logging points for accidental leakage of identifiers governed by {{data_privacy_tier}}.
- Assess error boundary handling to ensure third-party timeout events do not crash student-facing course modules.
- Review retry logic and exponential backoff mechanisms for LMS REST/GraphQL endpoint calls.
- Compile actionable remediation steps to optimize system throughput and eliminate architectural bottlenecks.
Constraints
- The review MUST evaluate compliance with {{data_privacy_tier}} restrictions.
- The analysis MUST NOT recommend changes that breach the standard API limits of {{lms_platform}}.
- Architecture recommendations must accommodate the traffic spike specified in {{expected_student_concurrency}}.
- All security vulnerabilities must be flagged with explicit reference to {{auth_mechanism}}.
Output format
- Architecture Risk Overview: Concise evaluation of middleware stability (under 200 words)
- Integration Vulnerability Catalog: Table containing (Component, Issue Type, Risk Level, Impact on LMS)
- Scalability and Privacy Analysis: 2-3 focused sections covering concurrency bottlenecks and data protection
- Recommended Code Fixes: Refactored code blocks for critical failure paths
Self-review
- Confirm that data handling conforms strictly with {{data_privacy_tier}} standards.
- Verify that performance remediations realistically address {{expected_student_concurrency}}.
- Ensure all API patterns align with standard {{lms_platform}} development guidelines.
Explicit role, a named task, and discrete steps the model can follow.
Background, inputs and variables the model needs before it starts.
Hard boundaries — what the model must and must not do.
A named, field-level shape for the response.
Ordered work items that force analysis before an answer.
Length and structure that travel across frontier models.
Signal density — instruction weight without padding.
Documented variables so the scaffold adapts to new inputs.
Quality bar, assumptions and behaviour when inputs are thin.
How much real usage the template has behind it.