[R1] Qualify the internal MVP with an authorized real job and recovery evidence

[jjangg96]

Goal

Qualify the single-host internal MVP with an explicitly authorized real private-repository job, safe cleanup and demonstrated ACK, acquisition and JIT recovery or quarantine behavior.

Dependencies

#1, #68

Scope

R1 qualification subset of #16, preserving its full two-organization R3 qualification. One Mac, one org/private repository, first reviewed execution backend and maximum one active worker. A passing happy-path job is not evidence for lost ACK/acquisition/JIT recovery.

Acceptance

• Exact reviewed commit, pinned SDK/runner/build identity, private runner-group/repository policy and bounded concrete maintainer authorization recorded before dispatch.
• Real hosted control-plane/private canary workflow executes one owned worker and finishes with independently observed terminal/absence evidence.
• Cover [G01] Prove Scale Set delivery, acquisition and drain contracts #1 required ACK, acquisition and JIT loss boundaries and idle-assignment/drain race with real evidence; retain unknown state, no exactly-once claim or unsafe automatic retry.
• Demonstrate no busy-job termination under normal scale-down, no duplicate execution, no non-owned cleanup, no management credentials in workers/public logs.
• Publish sanitized exact commands/results and recovery/rollback decisions; list every skipped case as unresolved.
• Keep R1 qualification open until all required cases pass/reach the specified safe quarantine outcome; no automatic closure of broader parent issues.

Execution and safety

Release R1. Maintainer-approved delivery reorganization #66; preserve the full original parent issue and historical records. Main implementation Grok 4.6 xhigh; independent Luna max review. TDD meaningful failing behavior before minimal implementation; exact commands/results, gaps and rollback. Exact-head clean external Codex review (inline/comments/stale) and CI required before merge. Existing #1 native Goal stays unchanged; no additional native goal during this coordinated run. No live operation is authorized by this issue: reviewed immutable commits and explicit concrete maintainer authorization required. Preserve manually installed runners, existing App/Keychain/launchd/Docker context; no busy cancellation, broad cleanup, workflow replay or credential/raw-log disclosure.