- name: order-voter-before-mutation
  where: "src/Controller/CancelOrderController.php"
  ensure: >-
    CancelOrderController must call denyAccessUnlessGranted with ORDER_CANCEL and the loaded order before changing or flushing its status.

- name: failed-reservation-prevents-order
  where: "src/Service/ReserveOrder.php"
  ensure: >-
    When the conditional inventory UPDATE changes no row, reserve must throw before inserting an order.