- name: ring-write-permission
  where: "src/shop/orders.clj"
  ensure: >-
    The handler must reject a session actor without :orders/write before calling cancel-pending.