CXX-238 enforce update/replace bulk semantics

I don't love the assert mesage. How about: "update object must not be empty", here and elsewhere.