ufw is part of Omarchy's default package set, so the presence check was guarding a machine that cannot exist -- and if it somehow did, skipping the firewall would produce an unreachable install, which is exactly what this phase fails loudly to prevent. The user.rules assertion already raises in that case. With the check gone, the helper is small enough to live inline in the phase. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>