NOTE comment on lastUnlockFailureReason — flag worker-context fragility (Phase 3 ambiguity #1 followup)

@@ -70,6 +70,11 @@7070 // decrypted but failed schema validation. Consumed and cleared by7171 // consumeLastUnlockFailureReason() so messages.ts can surface vault_corrupted7272 // distinctly from wrong-password (M7/COR-007).73+//74+// NOTE: module-level state — if vault.ts is ever moved to a worker context,75+// this must be replaced with a structured return value from unlock() or a76+// postMessage channel. The signal is invisible across module-instance77+// boundaries.7378 let lastUnlockFailureReason: string | null = null;7479 7580 export function consumeLastUnlockFailureReason(): string | null {