0.10.1 — Devin's own skills

0.10.1 — Devin's own skills

0.10.0 listed Devin's sub-agent profiles on its BOM root but no skills, because
the audit read only the profiles. Devin registers three skills in its binary, so
a consumer read a real Devin session's call to devin-cli as a call to
something never installed. This release lists them.

Highlights

• Devin's BOM root lists its built-in skills (ADR-0076).
  openaca:builtin_skills is declarative-repo-setup, devin-cli and
  upload-secrets, read from Devin 3000.11.3's own devin skills list. Its
  four sub-agent profiles are unchanged.

Install

uv tool install openaca==0.10.1 or pip install openaca==0.10.1.

Compatibility

Pre-V0 — no back-compatibility hedging.

• Additive. A Devin BOM's root gains openaca:builtin_skills, which 0.10.0
  left absent.
• Claude Code, Cursor and Codex are unchanged. Component lists, counts, posture
  and policy output are unchanged for every kind.