Updates should call updateRecord and rotate stale role sessions after privileged user changes.
Production saves must call createRecord or updateRecord so validation, role checks, and audit writes remain server-owned.