android: the handoff — the pending rounds, the pipeline, and what is unverified

Everything written this session that has not been through the device: rounds 43
to 48 (each patch adversarially verified, 43's transient-notice expectation
fixed), a partial round 49, the pipeline scripts, the Android Auto design and
the icon comparison mock. Also the two harness changes that were never A/B'd —
adaptive waits, which may only shorten a declared wait and never lengthen it,
and a ship that runs the mock walk and the deploy at the same time. The A/B and
its 255-step baseline are in handoff/tools; main stays at what the phone has
actually walked.

handoff/rounds/ins-r32-phone-expect.txt

@@ -0,0 +1,10 @@
+    /* the phone's own launch, held wider on purpose: a real one signs in,
+       restores a session and may walk the follows, none of which the mock
+       does, and its library reads are real SQLite rather than an object in
+       memory. What is asserted here is the shape — a census that counted
+       something, sealed, still went out in one round, and did not drag the
+       art prewarm back to boot. The milliseconds are printed rather than
+       policed: every step's JSON carries bootMs and bootLibMs, so the
+       device's real figures land in the report the first time this walk
+       runs. */
+    home: (i) => i.bootCalls >= 14 && i.bootCalls <= 90 && i.bootSync >= 20 && i.bootMs >= 0 && !/library_art_prewarm/.test(i.bootCmds),