Mirrors Step 3b's discipline. Previously, if save_setup failed or addDevice threw, state.verifiedHandle (the WASM session from Step 3b) would remain in linear memory until tab close. Now lock+null on every exit path. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>