Back-end code audit

[thibaudcolas]

Extracted from #28.

[thibaudcolas]

I will close this now because I think there have been enough recent contributions for us to be more aware of the implementation.