Factory v0.1.7 — native file permissions and explicit worker modes

Factory 0.1.7 makes native permission checks specific to the tool, provider and actual loaded settings.

• Foundation now checks native file tools alongside the shell sandbox and documents Claude’s user-profile read restriction.
• AgentOps selects and verifies the worker’s permission mode separately from the model. The qualified Auto-accept edits path holds outside file edits for approval, with additional command-approval overhead.
• The qualification record preserves the observed failures, scoped approvals, fixture cleanup and limited native retry evidence.

Verified package checks: 8 skills, 11 tests. The change received independent native review and bounded decision exercises.

This release is a method package. Shared OS/GitHub identities remain shared; Bash, native files and MCP are different boundaries. Phone/network decisions and application pilots remain open. Publication alone does not install the skills or qualify another host.