[GPLaider]

USB preparation could be interrupted by Activity recreation, and Refresh could re-enable operation controls while a write was active. This prepares Ventoid 0.4.1 (versionCode 17) with service-owned USB operations and support tools.

• Reserve one operation through permission, capacity preflight, erase confirmation, and session closure. Reject duplicate/stale starts and lock drive/layout controls.
• Retain progress across screen recreation and app switching in a connected-device foreground service. A lost connection blocks subsequent I/O; killed processes never replay requests.
• Confirm the actual device capacity, partition scheme, and reserved space before destructive preparation. Keep data-preserving Update/Repair separate.
• Refresh hotplug state, invalidate stale analysis, and add reviewed diagnostic preview/save/share with a bounded log and a private report-only FileProvider.
• Add Korean UI and offline ISO/first-boot/MOK help; translate new controls in Chinese. Include the already-merged adaptive icon changes in this release.
• Run UI/lifecycle/export tests in a new Android 35 CI job. Keep Ventoy 1.1.18 and all published signing/tag identities unchanged.

Validation: release lint and debug/release APK, AAB, and test APK builds passed. Unit tests: 126 passed, 4 QEMU image-output fixture tests skipped. Android 16 emulator: 6 instrumentation tests passed, covering rotation/control locking, confirmation restoration/cancel, Korean strings/help, diagnostic share/save/provider scope, and failed/stale service starts. Automation checks passed; new test dependency hashes were independently checked against Google Maven/Maven Central.

The emulator uses a synthetic USB target and does not write a physical drive. Firmware payloads are unchanged from the QEMU-verified 0.4.0 release. F-Droid metadata is appended in a separate commit referencing the immutable release source commit.