docs: REPORT + CONTEXT for v0.95.0 (Impl-2b raw enrollment; live-validated)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

CONTEXT.md

@@ -7,7 +7,20 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-06-30 (v0.94.0 — pull-based config-refresh; hub v0.26.0 retires the inbound controls)
+Last updated: 2026-07-01 (v0.95.0 — enrollment wizards use the raw-device scan; end-to-end raw enrollment live)
+
+> **2026-07-01 — v0.95.0 (deployed on 9201): Impl-2b — raw-drive enrollment wizards.** Both enrollment
+> wizards (`storage_init.html` / `storage_attach.html`) now fetch candidates from the agent's raw-device
+> scan `GET /api/disks/candidates` (proxy `agentDiskCandidatesHandler` → agent Impl-2a) instead of the
+> `Observe()`-based `/api/disks`, so a brand-new (non-PVE-storage) drive is discoverable + enrollable.
+> `agentapi.ListCandidates` + `resolveEnrollUUID` (a raw candidate isn't in `/disks` → resolve its
+> fs-UUID from the scan). Live end-to-end on felhom-pve: raw `/dev/sdd` (SD card) → wizard → format (Impl-1
+> guard) / attach → mount → bind → intent → guest-bind → **"Aktív"** in the UI (3rd drive, no false
+> detach). Needed a chain of AGENT fixes (v0.56–0.58: durableIDForMount / ReassertGuestBinds / HostReader
+> wiring / /disks GuestPath+BoundUnderParent for registry rows) — the whole enroll+tracking machinery had
+> assumed a PVE-storage drive. **Follow-ups:** `runStorageInit` should poll the agent's detached-format
+> status (`/disks/format/status`) so a SLOW-device format completes in one flow (pre-existing); Impl-3
+> shared-box operator format gate.
 
 > **2026-06-30 — v0.94.0 (deployed on 9201): pull-based config-refresh.** The hub report ACK now also
 > carries a per-customer **`config_version`** (hub v0.26.0; a stored counter bumped on every config save).