In particular, the instance model has instance belonging to update, but the column should be not nullable and have a foreign key constraint.  All the models need to be audited to make sure constraints are in place and are appropriately nullable or not nullable.