- name: write-observer-checks-permission
  where: "R/order_module.R"
  ensure: >-
    The cancellation observeEvent must require identity$can_cancel before invoking updateOrder, not just a non-null identity.