How do you find the balance between too much and too little in code and process reviews?