Two Tools, One Rule: Why Dev Tooling Goes Through the Service Layer (Except When It Doesn't)

A raw-SDK cleanup script once deleted zero records it should have deleted, because it reimplemented entity shape independently of the real write path. The fix: dev tooling now calls the same service functions production does — with one deliberate, structurally-separate exception for state the service layer can't reach