Keep Actix order reads scoped by ReqData identity: Perch rule pack

1 saved requirement for Actix Web. Inspect the selectors and adapt the example paths to your repository.

- name: reqdata-tenant-predicate
  where: "src/order.rs"
  each: method
  ensure: >-
    The SELECT SQL string contains a tenant_id predicate. Removing tenant_id from its WHERE clause violates the required tenant isolation.

Download the rule pack ZIP · Download YAML · Agent repair task · Implementation, integration requirements and captured checks

Install the rule without replacing your configuration

npm install -g @lakeday/perch
perch login
curl -fL 'https://reporules.fyi/actix-web/request-scoped-identity/rule-pack.zip' -o 'perch-guide-actix-web-request-scoped-identity.zip'
unzip -n 'perch-guide-actix-web-request-scoped-identity.zip'

Keep your existing perch.yaml. Extraction preserves existing files and adds .perch/rules/perch-guide-actix-web-request-scoped-identity.yaml. Review each where selector before running a check on your application.

Configure your coding agent

perch setup claude-code
perch setup codex
perch setup cursor
perch setup pi

Choose the setup command for the agent you use.

Check the edit, fix the finding, check again

perch check src/order.rs::order --rules reqdata-tenant-predicate --json

Run the check after an agent edit. Read the finding and affected code, repair the implementation, and repeat the identical command. Keep the application regression tests as separate gates.

Exit 3 means a finding. Exit 1 or 2 means the check did not complete. A pass does not prove application correctness. Fresh judgments can vary; unchanged requests reuse cached answers. Relevant source is sent to the configured model service.

Pack manifest and SHA-256 hash · Pack README