[JaeTierce31]

Scope

Adds a bounded cost-validation protocol and disabled-by-default telemetry for the first free-tier pilot.

• Defines fully loaded cost per free monthly active IDE user as the < $0.020/month gate, separates marginal cost, and lists required invoice and license evidence.
• Adds authenticated editor-session telemetry with only durations, npm install outcome, a month-scoped HMAC account key, and app revision. It does not log source code, project IDs, file paths, emails, raw account IDs, or error text.
• Keeps the event endpoint disabled unless both pilot flags are enabled.
• Requires the WebContainer commercial API key before WebContainer.boot in production, using configureAPIKey first.
• Records official StackBlitz license constraints and the quote questions still unresolved.

Verification and rollout

This PR is intentionally draft. Run the repository CI; do not enable the pilot or deploy until WebContainers license terms and API key are in place, Vercel project access is restored, Supabase RLS policy and application-path isolation checks pass, the exposed legacy key is rotated, the 95% telemetry capture denominator is proven, and migration smoke tests pass.

Verified 2026-09-25: the Supabase migration enabling RLS on the three public application tables is recorded and verified. The RLS policy and end-to-end application-path checks remain open; do not treat RLS activation alone as proof that the production database role is constrained. The connected Vercel account returns no teams, so the project, deployment environment, and runtime logs cannot be inspected or configured here. The Cloudflare connector is available but its read-only API calls fail with authentication error 10000, so no Cloudflare usage or billing evidence was obtained. No live pilot measurement or production cutover is claimed.

See docs/operations/PEREGRINE_FREE_TIER_COST_PILOT_v0.1.0.md.