diff --git a/.gitea/ISSUE_TEMPLATE/change.md b/.gitea/ISSUE_TEMPLATE/change.md
new file mode 100644
index 0000000..9c00f88
--- /dev/null
+++ b/.gitea/ISSUE_TEMPLATE/change.md
@@ -0,0 +1,34 @@
+---
+name: SIAX change
+about: First-principles change request
+title: ""
+labels: ""
+assignees: ""
+---
+
+## Problem / observed signal
+Describe evidence and user/system impact.
+
+## First-principles analysis
+1. What mechanism caused the problem?
+2. What can be removed or simplified instead of adding state/code?
+3. What alternatives were considered, and why is the proposed direction best?
+
+## Scope
+- Repositories/capabilities:
+- Expected changed paths:
+- Public/API/event/data/migration/runtime impact:
+
+## Ownership and dependencies
+- Canonical capability owner:
+- Upstream/downstream consumers:
+- Owner decisions still unresolved:
+
+## Risk and verification
+- Proposed risk class: L0/L1/L2/L3/L4/L5
+- Required deterministic gates:
+- Required independent reviewers:
+- Runtime/staging evidence required:
+
+## Product Firewall
+- PLATFORM / PRODUCT_PROTECTED / AMBIGUOUS_FAIL_CLOSED
diff --git a/.gitea/pull_request_template.md b/.gitea/pull_request_template.md
new file mode 100644
index 0000000..66da355
--- /dev/null
+++ b/.gitea/pull_request_template.md
@@ -0,0 +1,30 @@
+## Requirement / issue
+Reference the requirement or issue and exact ChangeSet/evidence identifiers.
+
+## First-principles answers
+1. Why did the problem occur?
+2. What removal/simplification was considered?
+3. Why is this solution better than the proposed/obvious patch?
+
+## Change scope
+- Changed capabilities/paths:
+- API/event/schema/migration implications:
+- Cross-repo consumer impact:
+
+## Verification evidence
+- Source SHA:
+- Deterministic gates run:
+- Real integration/database evidence when applicable:
+- Security/supply-chain evidence:
+- Independent review evidence:
+
+## Release / runtime
+- Build artifact digest:
+- Staging evidence:
+- Production approval: NOT GRANTED / reference
+- Live verification: NOT OBSERVED / reference
+
+## Verdicts
+- CODE_CONFORMANCE:
+- GOVERNANCE_CONFORMANCE:
+- PRODUCTION_READINESS:
diff --git a/.siax/bootstrap-evidence.json b/.siax/bootstrap-evidence.json
new file mode 100644
index 0000000..e802e86
--- /dev/null
+++ b/.siax/bootstrap-evidence.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": "siax.dev-os-bootstrap-evidence/v1",
+  "repo": "0pt",
+  "baseSha": "e49f809e68bd18de4acdabe60d09fd356f39f461",
+  "branch": "oai/devos-band29-0pt",
+  "observed": {
+    "packageManager": "pnpm",
+    "packageScripts": {
+      "lint": "eslint src tests",
+      "typecheck": "tsc -p tsconfig.check.json",
+      "test": "vitest run",
+      "build": "next build"
+    },
+    "workflows": [
+      ".gitea/workflows/cd.yml",
+      ".gitea/workflows/ci.yml",
+      ".gitea/workflows/health-check.yml",
+      ".gitea/workflows/nightly.yml",
+      ".gitea/workflows/security.yml",
+      ".github/workflows/ci.yml"
+    ]
+  },
+  "generated": [
+    ".siax/dev-adapter.yaml",
+    ".gitea/ISSUE_TEMPLATE/change.md",
+    ".gitea/pull_request_template.md"
+  ],
+  "skipped": [
+    "AGENTS.md exists"
+  ],
+  "profileStatus": "REQUIRES_CAPABILITY_DISCOVERY",
+  "note": "Generated from observed repository facts only; no remote fetch, push, merge, approval, branch-protection mutation, or deployment performed."
+}
diff --git a/.siax/dev-adapter.yaml b/.siax/dev-adapter.yaml
new file mode 100644
index 0000000..348cbe9
--- /dev/null
+++ b/.siax/dev-adapter.yaml
@@ -0,0 +1,33 @@
+schemaVersion: siax.dev-adapter/v1
+gateCommands:
+  G02:
+    - name: lint
+      argv:
+        - "pnpm"
+        - "run"
+        - "lint"
+      timeoutSeconds: 1800
+      allowFailure: false
+    - name: typecheck
+      argv:
+        - "pnpm"
+        - "run"
+        - "typecheck"
+      timeoutSeconds: 1800
+      allowFailure: false
+  G03:
+    - name: test
+      argv:
+        - "pnpm"
+        - "run"
+        - "test"
+      timeoutSeconds: 1800
+      allowFailure: false
+  G14:
+    - name: build
+      argv:
+        - "pnpm"
+        - "run"
+        - "build"
+      timeoutSeconds: 1800
+      allowFailure: false