docs: v0.141.0 REPORT + CONTEXT + README (F6 detached init job + format-status poll, F7; live-validated on demo scratch USB; security-review TOCTOU acknowledged)

CONTEXT.md

@@ -7,7 +7,21 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-16 (v0.140.0 — Direction-2 immediate-sync wait channel; the immediate-sync arc is COMPLETE for the controller plane)
+Last updated: 2026-07-17 (v0.141.0 — N100 polish: F6 initialize-to-usable + F7 back-routes)
+
+> **2026-07-17 — v0.141.0: N100 polish (F6 + F7), LIVE on demo.** F6 (MEDIUM): drive "initialize"
+> now ends in a mounted+registered drive even on a client disconnect. `POST /api/storage/init` runs
+> the format→mount→register chain as a DETACHED single-flight job (`web/storage_init_job.go`,
+> `context.Background()`, netAddState shape) the wizard polls via `GET /api/storage/init/status`
+> (3-step Hungarian progress); register is the last step (marker-last crash-safety). Fork verdict:
+> controller-side, NO agent change (the chain must reach FileBrowser sync = controller-only).
+> **Deeper half found on the live leg:** a slow mkfs (64 GB USB, ~27 s) outruns the agentapi client's
+> 15 s timeout → the controller now polls the agent's `GET /disks/format/status`
+> (`agentapi.FormatStatus` → `awaitAgentFormat`) then continues. Live-validated on `/dev/sdd` →
+> `/mnt/felhom-drives/scratch1` (mounted+registered). F7 (LOW): storage init/attach Vissza → `/storage`.
+> Red-proofs for both F6 halves + F7. Security review of the commit flagged the pre-existing
+> format→resolve→assign device-node TOCTOU (agent-guarded destructive step, benign fs-UUID mount) —
+> acknowledged as an Observation, not expanded. Fork/landmarks/live evidence: REPORT.md.
 
 > **2026-07-16 — v0.140.0: Direction-2 immediate-sync (hub→box) SHIPPED.** The reverse of v0.139.0:
 > an OPERATOR action on the hub now reaches the box in seconds. `report.Waiter`