Devin: peer-support qualification and public scorecard

[jeffhuber]

Part of #901.

Problem

Peer-level support needs end-to-end evidence across lifecycle, context, builder delivery, review, recovery, and cost instead of transport-only claims.

Scope

Run bounded public/synthetic and private canary cases, document limitations, update the epic scorecard, and complete cold-install/package qualification. Include five delivery samples plus reviewer controls without treating small samples as broad productivity proof.

Dependencies

• Devin: hosted builder work-order delivery and verified PR binding #907
• Context: authorize and deliver private packets to Devin roles #908
• Devin: local and hosted exact-head reviewer parity and calibration #909
• Devin: optional setup, host guidance, and lifecycle doctor #910

Acceptance criteria

• Five bounded builder deliveries record outcome, intervention, elapsed time, ACU/cost when returned, review rounds, and PR result.
• Clean/blocked reviewer controls and context/recovery cases are adjudicated.
• Privacy, fresh install, package matrix, full tests, Board, and metadata upload pass.
• Remaining limitations are explicit.

Code Mower delivery

Produce exactly one independently reviewable PR for this issue. Record the named builder, keep one writer on the branch, run focused tests and applicable full checks, obtain an independent Code Mower review against the exact current head, resolve every P0/P1/P2 finding, and pass normal CI plus code-mower/gate. Update the parent epic with PR/head, review, validation, outcome, and safe metadata-only upload evidence. Do not put credentials, source, diffs, prompts, transcripts, private context, task/message prose, or raw provider output in cloud data.

[jeffhuber]

Qualification is complete. The configured gate auto-merged PR #958 before the
trusted-orchestrator Board/cloud steps finished; those steps completed
immediately afterward and are recorded here.

• Named builder: hosted Devin work order, one session, 6 ACU cap, 0.0 observed
  ACU, two same-session follow-up rounds, one verified collection, and no
  duplicate paid create.
• Exact PR head: 0a1c25adaf59ee6c1c1cab5bfbc826be07801a16.
• Merge commit: 76299932db79a9f2007268e79e47fef4d0dee2bd.
• Exact-head Code Mower reviews: Codex PASS
  (Add Devin peer-support qualification scorecard #958 (comment))
  and Claude PASS
  (Add Devin peer-support qualification scorecard #958 (comment)).
• GitHub CI, Python 3.12/3.13/3.14 matrices, Linux/macOS graph containment,
  package checks, privacy checks, and code-mower/gate passed.
• Trusted live Coworker canary: authenticated retrieval/authorization/replay
  PASS; bounded to two read requests and one page; three documents normalized;
  no private content emitted and zero provider mutations. The current saved
  connection does not authorize devin:builder, so live Coworker-to-Devin
  delivery remains explicitly unqualified pending an owner-visible reconnect.
• Exact-main Board doctor: local paths redacted, zero gate alerts, 500 valid
  local events, zero malformed events; the only warning was the two-item owner
  queue.
• Inspected cloud dry run: one board_snapshot event, zero reports; source,
  diffs, transcripts, stdout/stderr, auth output, and secrets excluded.
• CodeMower.com upload: HTTP 200, stored=true, one event, zero reports,
  reportTextStored=false, upload
  7f9c93ad-b1ae-4433-b0af-06a55ceeac9b.

The independent preaudit found that the merged qualification document
overstates which package checks run on every Python matrix version and that its
PR text should distinguish wheel contents from generated standalone package
materialization. Those documentation-only corrections are explicitly assigned
to release issue #912 and will be reviewed on the v1.4.0 release head.