Go GraphQL

GraphQL moves query planning to the client. That is the feature and the danger: one innocuous query can become ten thousand database round trips, and one over-permissive field can leak another tenant's data. Both are solved at the server, not in the schema review.

Detailed reference material, loaded on demand:

• references/errors-auth-testing.md — error presenter, field authorization directive, client-driven tests with query-count asserts.

Read a reference file only when the summary below is not enough.

1. Schema-First with gqlgen

The .graphql schema is the source of truth. gqlgen generates models, resolver stubs, and the execution layer from it.