docs: v0.127.0 REPORT (Scenario F LIVE both boxes: stale warn fired at first ACK, drill blob repaired + flag cleared on the 17:23Z ACK, state never flipped; red-proofs 4/5; NOT-live-validated: full browser wizard leg — customer-owned password) + CONTEXT

CONTEXT.md

@@ -7,7 +7,22 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-13 (v0.126.2 — UI uniformity bundle LIVE drill+demo)
+Last updated: 2026-07-13 eve (v0.127.0 — escrow ceremony wizard LIVE drill+demo)
+
+> **2026-07-13 eve — v0.127.0: CUSTOMER-FACING ESCROW CEREMONY WIZARD (/backup/escrow) +
+> Scenario-F stale-blob re-check. MinAgent 0.88.0 (wizard only). LIVE on demo 9201 + drill guest
+> (both healthy).** The friend-alpha missing piece: preflight → warnings → password re-auth
+> (login rate limiter) → **re-stage-first** (abort on failure — the UI can never mint a hash-less
+> blob) → agent job (poll 2 s) → ONE-SHOT R reveal (no-store; R only in the claim XHR + page JS;
+> 10-min TTL → void) → typed-back (two random words) → finish. Ruling F1: R over the CF tunnel
+> once = accepted (threat model in felhom.eu RUNBOOK-escrow-ceremony.md). Scenario F: an ESCROWED
+> box re-checks the ACK hash — mismatch/hash-less ⇒ stale flag (card warning + CTA) + one WARN
+> per hash; never flips, never blocks; **fired LIVE on both boxes' hash-less blobs at first ACK**
+> (drill = the spike's superseded blob, since REPAIRED via a real ceremony —
+> `restic_pw_sha256` now covers; demo = its legacy blob, warning stays until a wizard run).
+> Manual-confirm BUTTON removed (endpoint stays, deprecated). **OPEN: one supervised full-browser
+> wizard pass with Viktor's login (re-auth needs the customer-owned password — CC validated
+> everything beneath it endpoint-exact); demo wizard run to clear its stale warning.**
 
 > **2026-07-13 — v0.126.0: UI UNIFORMITY BUNDLE (shared app-list rows + infra identity +
 > restore-form polish + mojibake gate + honest stale line). Presentation-layer only — NO