ingest_record: lock client, then session