Factory backend: models named factory:<id> run as one locked-down droid exec call (empty cwd, only TodoWrite, tool calls returned as JSON and mapped to the OpenAI shape), traced as neatlogs LLM spans; PAPERCI_MODEL_ALL routes every role (concierge included) to one model; models are part of the evolution referee; Factory keys covered by secret scan and Entire redaction