Can I insert or update VSAM records from CoreIQ, and what blocks writes?

Yes, for VSAM KSDS from View File or the host APIs. Every write runs as the caller’s RACF identity. Writes still fail if the CoreIQ endpoint write flag is off, the dataset-server / Z Gateway write surface is closed, or RACF denies the dataset. This is separate from CDC (including IAM file support).