- name: profile-does-not-grant-admin
  where: "profiles/update.go"
  ensure: >-
    Applying an ordinary profile patch must leave IsAdmin unchanged. It must not grant administrative access.

- name: database-observes-request-context
  where: "orders/lookup.go"
  ensure: >-
    The order query must use QueryRowContext with c.Request().Context(), so a canceled request or deadline can cancel database work.