Audit the native Factory runtime and remaining custom code #39

The active Z13 runtime matches upstream, but “no custom code” would be false.

• Upstream runtime/settings: official T3 Code, Codex and Claude Code; native service, Connect, browser, delegation and sandbox configuration.
• Our methods: reviewed Factory 0.1.15 skills/references, with all 48 selected installed files verified. The audit initially checked 0.1.14; the only subsequent change was the reviewed English-default rule. Codex heartbeats carry our prompts; they are not a host maintenance timer.
• Our operational code: operator-command.mjs and related one-shot RPC clients have been used. They are custom code even with temporary sessions. No running client or extra Factory service/timer was observed on Z13.
• Inactive code/helpers: parked Native approvals and worker boundaries: practical setup and remaining gaps #32/Qualify safe native T3 maintenance and stable-channel adoption #34 patches, wrapper/SRT experiments and our package/test/adoption tools. The old Mac factory-software-defence 0.18.4 CLI (21 code files) was inactive but still on PATH; it has now been removed with all three aliases and verified private recovery.

The coordinator is retiring custom RPC-client use in favour of supported T3-MCP/UI; the latest handoff used native UI without the client. Historical helper files remain evidence. Current permission cards have a native UI route. Removing the clients loses direct RPC automation from the external Mac chat. Scoped AgentOps approvals and a complete stale-card replacement remain unsupported/unverified in #32; we will not build another client.

Before: an obsolete CLI remained on PATH. After: native npm uninstall removed only that package and its aliases; other global manifests and T3/Codex/Claude/Bridge paths are unchanged. No runtime restart or credential copy. Bridge/OPD remain separate products; #34 keeps its single native maintenance track.

The English-default rule is delivered in 0.1.15 through independently accepted PR #40, with protected PR/main CI, package/unit/staging checks and guarded adoption. Six existing files were replaced across the two profiles; all 48 selected files match, with prior bytes retained. #32/#34 are now English and their evidence is preserved. No runtime or rights changed.