- name: reqdata-tenant-predicate
  where: "src/order.rs"
  each: method
  ensure: >-
    The SELECT SQL string contains a tenant_id predicate. Removing tenant_id from its WHERE clause violates the required tenant isolation.

- name: import-is-bounded-before-blocking
  where: "src/import.rs"
  ensure: >-
    The handler must reject more than MAX_RECORDS before passing the records into web::block.