Coincidentally, today I happened to read two very different (age and content) but complementary articles on Code Audits:

• The Human Side of a Code Audit by Ruti Wajnberg at thoughtbot
• Checklist for a Rails Application Code Audit by Mikel Lindsaar at reInteractive