# Factory k3s acceptance

For developers:

- Factory agent work runs in restricted k3s Jobs.
- The trusted laptop controller validates and applies the results.
- Jobs receive repository-scoped, read-only GitHub deploy keys and no Git write credentials.
- A k3s failure never silently falls back to laptop execution.
- `/factory` is the owner-facing trace.