Partial update. Immutable fields (oneOnOneId, districtId, employeeId, managerId, pulseCheckId, created, createdBy, active, deleteDate) are stripped server-side. Note-fields enforce role: employees cannot write managerNotes, managers cannot write employeeNotes.