The security hardening commit accidentally rendered every input value as value=\"...\" (literal backslash-quote in HTML), which mangled all submitted fields including the hidden worker_id/service_id, causing UPDATE to match zero rows and silently no-op. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>