Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

tasks/developer-experience-gitea-ci/IMPLEMENTATION.md

@@ -0,0 +1,22 @@
+# Implementation: Developer Experience and Gitea CI
+
+## Summary
+Improved framework maintainability by adding contributor documentation, Gitea CI, packaging configuration, and cleaning up unused template files.
+
+## Files Changed
+- `AGENTS.md` (new)
+- `.gitea/workflows/ci.yml` (new)
+- `templates/contract-template.md` (deleted)
+- `templates/README.md` (new)
+- `CHANGELOG.md` (updated with all recent changes)
+- `pyproject.toml` (root config created in Task 3)
+
+## Verification
+- `AGENTS.md` contains build/test commands and conventions.
+- `.gitea/workflows/ci.yml` references the correct test commands.
+- `templates/contract-template.md` no longer exists.
+
+## Decisions
+- Gitea is the CI platform (matches existing infrastructure).
+- CI runs py_compile, pytest, and bash syntax checks.
+- Unused contract template removed; remaining templates documented.

tasks/developer-experience-gitea-ci/REVIEW.md

@@ -0,0 +1,4 @@
+# Review
+- **Status**: approved
+- **Timestamp**: 2026-06-14T09:59:36.218164
+- **Comment**: 

tasks/developer-experience-gitea-ci/SPEC.md

@@ -0,0 +1,32 @@
+# SPEC: Developer Experience and Gitea CI
+
+## Goal
+Improve framework maintainability with documentation, CI, and cleanup.
+
+## Requirements
+1. Create `AGENTS.md` with:
+   - How to run tests
+   - How to run the dashboard
+   - Code/style conventions
+   - How to add/update prompts
+2. Create `.gitea/workflows/ci.yml` that runs:
+   - `python -m py_compile` on all Python files
+   - `python -m pytest`
+   - `bash -n` on all shell scripts (or `shellcheck` if available)
+3. Update `pyproject.toml` with optional dependency groups.
+4. Delete `templates/contract-template.md` (confirmed unused).
+5. Document remaining templates in `templates/README.md` or `AGENTS.md`.
+6. Update `CHANGELOG.md` with entries for all completed work.
+
+## Acceptance Criteria
+- [ ] `AGENTS.md` exists and is useful to a new contributor.
+- [ ] Gitea CI file exists and would pass on the current codebase.
+- [ ] `contract-template.md` is removed.
+- [ ] `CHANGELOG.md` reflects the new work.
+
+## Non-Goals
+- Migrating to GitHub Actions.
+- Rewriting documentation unrelated to the audit fixes.
+
+## Stop Condition
+When all acceptance criteria are met, output "CONTRACT_MET".

tasks/developer-experience-gitea-ci/VERDICT.md

@@ -0,0 +1,20 @@
+# Verdict: Developer Experience and Gitea CI
+
+## Status: PASS
+**Completion Date**: 2026-06-14
+
+## Summary
+Contributor documentation, Gitea CI, and template cleanup are in place. The framework is easier to maintain and has automated checks for regressions.
+
+## Findings
+- `AGENTS.md` created.
+- `.gitea/workflows/ci.yml` created.
+- `contract-template.md` removed.
+- `templates/README.md` documents remaining templates.
+- `CHANGELOG.md` updated.
+
+## Remaining Issues
+None.
+
+## Score
++10 PASS