- name: method-security-write-authority
  where: "src/main/java/example/CancelOrder.java"
  ensure: >-
    The public cancel service method must require orders:write with @PreAuthorize before invoking the mutation repository.