Production ownership
Start with what the candidate has actually shipped.
Which backend service did you most recently own end to end, and what did it do for the business?
How were requests authenticated, validated, logged, and monitored in that service?
What part of the system would break first if traffic doubled?
