- name: search-switches-obsolete-request
  where: "src/order-search.ts"
  ensure: >-
    orderSearch must use switchMap for query-dependent requests so subscribing to a new query unsubscribes the previous request.

- name: profile-payload-allowlist
  where: "src/profile-command.ts"
  ensure: >-
    updateProfile must project only displayName and timezone into its HTTP payload, rather than spreading all form fields.