Cloud Function backed

New record

Create records through createRecord so role checks, schema validation, and audit logging happen server-side.

Production saves must call createRecord or updateRecord so validation, role checks, and audit writes remain server-owned.