We need a dev voucher system. Persist it across projects and time. Belonging to a vouching chain with a rogue dev down the chain loses you points the closer you are to it. Anything else is just too unreliable imo.
If anyone remembers advogato.org it was a web of trust of open source devs.
and what do points win?
PGP web of trust?