- name: action-tenant-predicate
  where: "src/routes/orders/[id]/+page.server.ts"
  ensure: >-
    The cancellation action must pass locals.user.tenantId to the conditional database mutation, not only orderId and ownerId.

- name: private-ssr-cache-header
  where: "src/routes/orders/+page.server.ts"
  ensure: >-
    The authenticated orders load must set cache-control to private, no-store and must not advertise public caching.