# Expected Results

- `emma` sees only her own record.
- `marvin` sees his record plus direct reports, with direct-report SSN as `NULL`.
- `victoria` sees all employees and sensitive columns through HR role.
- Employee phone update succeeds only for the user's own row.