- name: confirmation-transaction-boundary
  where: "src/main/java/example/ConfirmOrder.java"
  each: method
  ensure: >-
    The confirm method is explicitly annotated @Transactional. A confirm method without that annotation does not satisfy this required service transaction boundary.

- name: method-security-write-authority
  where: "src/main/java/example/CancelOrder.java"
  ensure: >-
    The public cancel service method must require orders:write with @PreAuthorize before invoking the mutation repository.