createBlock has both validation guards (displayName length + personId null). updateBlock had only the displayName test. Add the symmetric null-personId case so a future @Valid drop from updateBlock's @RequestBody would be caught. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>