- name: write-observer-checks-permission
  where: "R/order_module.R"
  ensure: >-
    The cancellation observeEvent must require identity$can_cancel before invoking updateOrder, not just a non-null identity.

- name: session-removes-report-workspace
  where: "R/report_workspace.R"
  ensure: >-
    The onSessionEnded callback must unlink the session-created workspace recursively instead of leaving report files behind.