- name: audit-uses-transaction-database
  where: "Sources/App/confirm.swift"
  ensure: >-
    Both order.update and audit.create inside the transaction must use the database passed into the closure, not request.db for the audit.

- name: processing-observes-task-cancellation
  where: "Sources/App/process.swift"
  ensure: >-
    processOrders must call Task.checkCancellation before starting each next order operation.
