- name: reqdata-tenant-predicate
  where: "src/order.rs"
  each: method
  ensure: >-
    The SELECT SQL string contains a tenant_id predicate. Removing tenant_id from its WHERE clause violates the required tenant isolation.