7c70c545d9
First supervised live run: the ~25s spinner-less offsite save invited a re-click; the abandoned first request's r.Context() was canceled between CreateSubaccount and SaveOneTimeSecret, stranding sub-account 268985 with a password lost forever (consume 404s permanently). applyOffsite now provisions on context.WithoutCancel + 3-minute absolute timeout: once the create starts, create->wait->store runs to completion. Regression test with a ctx-honoring fake that cancels the request context mid-create; red-proofed against the raw-ctx pre-fix shape (reproduces the exact live error). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6