chore(repo): retire Spec Kit workflow and historical specs

[kevkantes]

Important

Needs discussion before merge.

Description

Retire the broken Spec Kit workflow and remove historical implementation plans from the live/public documentation set. This keeps current architecture and supported operations discoverable without requiring generated planning trees for ordinary contributions.

Coordinates with #2430 and #2432. This PR does not depend on draft #2425 and deliberately does not edit AGENTS.md, so it does not contradict that pending navigation work.

What changes

• Remove .specify/, tracked Spec Kit command/skill adapters, the stale generated Cursor rule, and the Makefile command generator.
• Remove docs/docs/specs/ and the Spec-Driven Development page from source, sidebar navigation, generated version snapshots, and search output.
• Rewrite every inbound reference found in live source, current docs, tests, workflows, and configuration to a canonical current doc, schema, or short invariant.
• Replace the public contribution workflow with a lightweight path:
  • ordinary fixes and focused features: GitHub Issue + focused PR;
  • cross-cutting architecture/product changes: discussion plus a short ADR/current design doc.
• Preserve release posts, supported upgrade guides, current RBAC architecture docs, DCO/test-data rules, GitHub Releases, and repository history.

Durable artifacts promoted

• tests/rbac/contracts/audit-event.schema.json
• tests/rbac/contracts/rbac-matrix.schema.json
• tests/rbac/contracts/realm-config-extras.schema.json
• docs/docs/security/rbac/canonical-team-membership-migration.md

All schema validators, tests, workflow guidance, realm-config-extras.json, and RBAC callers now use those live paths. Other still-live decisions are stated in the existing component/RBAC documentation or directly as short invariants; this PR does not recreate the retired plan corpus.

Historical rollout scripts

This also removes two unreferenced one-off Spec 102 rollout generators originally introduced by @sriaradhyula:

• scripts/generate-rbac-matrix-us1.py: --check fails against clean main because its hard-coded route inventory is stale.
• scripts/append-pending-rbac-entries.py: its generated matrix rows are all migrated, and the live guard reports no remaining requireAdmin/requireAdminView route callers.

The live validate-rbac-matrix.py, validate-realm-config.py, RBAC docs validator, and check-no-new-requireAdmin.sh guard remain.

Size and retention

• 672 files changed: 274 additions, 89,961 deletions.
• 608 files deleted, containing 89,485 lines and 4,704,087 bytes (4.49 MiB) of Git blobs.
• Four live artifacts are detected as promoted renames and are not counted as deleted files.
• Retired plans remain recoverable from Git tags and repository history; release notes, upgrade guides, and GitHub Releases remain published.

Merge coordination

docs/scripts/generate-versioned-docs.js is also being changed by the separate docs-snapshot retention PR. Recommended order: merge that focused snapshot-policy PR first, then rebase this PR and retain both its approved version allowlist/labels and this PR's narrowly scoped pruning of specs/ and development/spec-driven-development. Do not resolve the conflict by dropping either policy.

Follow-up audit

A broader audit still finds legacy numeric traceability comments such as Spec 102/103/104 and T/FR/SC identifiers across compose configuration, charts, tests, and current RBAC docs. Some still encode useful test intent, while others are orphaned wording. They need a separate owner-reviewed cleanup; this PR removes the stale scaffolding only from the validators, guard, workflow, and contract files it makes canonical.

Type of Change

• Bugfix
• New Feature
• Breaking Change
• Refactor
• Documentation
• Other: repository/tooling retirement

Checks

• git diff main...HEAD --check
• Live-source/current-doc reference audit: no references to removed paths (only retirement guards and the regression assertion that AGENTS.specify stays absent)
• Generated-version audit: no specs/ directories, sidebar entries, or search URLs
• npm run build in docs/ (passes; reports existing frozen-version anchor/image warnings)
• python scripts/validate_rbac_docs.py --base main --head HEAD
• python scripts/validate-rbac-matrix.py
• python scripts/validate-realm-config.py
• bash scripts/check-no-new-requireAdmin.sh
• pytest tests/test_validate_rbac_docs.py tests/rbac/unit/py/test_audit.py -q (29 passed)
• JSON schemas/config, GitHub Actions YAML, generator JavaScript, and Makefile smoke syntax checks

Checklist

• I have read the contributing guidelines
• Existing issues have been referenced
• Functionality and the replacement contribution path are documented
• Relevant automated tests pass
• Draft PR against main
• Commit carries the explicitly provided DCO sign-off: kevkantes <kkantesa@cisco.com>

[github-actions]

✅ No proprietary content detected. This PR is clear for review!

[github-actions]

🧪 CAIPE UI Test Results

✅ All tests passed

🟡 Overall Coverage: 62%

📊 Detailed Coverage

Metric	Covered	Total	Percentage
Lines	41111	60798	67.61%
Statements	43886	67071	65.43%
Functions	7676	12633	60.76%
Branches	27982	50631	55.26%

✅ Test Suites

• ✅ auth-guard.test.tsx - Route protection & authorization
• ✅ token-expiry-guard.test.tsx - Token expiry handling
• ✅ dynamic-agent-client.test.ts - Dynamic Agents streaming client
• ✅ auth-utils.test.ts - Authentication utilities (100% coverage)
• ✅ auth-config.test.ts - OIDC configuration

📈 Coverage Thresholds

Threshold	Target	Current	Status
Minimum	40%	62%	✅ Pass
Good	60%	62%	✅ Pass
Excellent	80%	62%	⚠️ Below target

⚠️ Areas Needing Tests

High Priority:

• lib/streaming/* - Core stream event handling
• store/chat-store.ts - Chat state management
• store/agent-skills-store.ts - Agent skills
• lib/api-client.ts - API communication
• lib/storage-mode.ts - MongoDB/localStorage switching

Medium Priority:

• components/chat/ChatPanel.tsx - Main chat interface
• components/agent-builder/* - Agent builder UI
• lib/mongodb.ts - MongoDB integration

---

💡 Run locally: make caipe-ui-tests
📦 Full report: Check workflow artifacts

[caipe-ci-release]

Prebuild Artifacts for `4582a94` (archived)

Prebuild Artifacts for 4582a94

Branch: prebuild/chore/retire-spec-kit
Commit: 4582a94

Docker Images

Artifact	Image	Tag	Status	CI
caipe-ui	ghcr.io/cnoe-io/prebuild/caipe-ui	chore-retire-spec-kit-2	Published	CI

Docker pull commands

docker pull ghcr.io/cnoe-io/prebuild/caipe-ui:chore-retire-spec-kit-2

These prebuild artifacts will be automatically cleaned up when the PR is closed or merged.

[caipe-ci-release]

Prebuild Artifacts for `9393fdd` (archived)

Prebuild Artifacts for 9393fdd

Branch: prebuild/chore/retire-spec-kit
Commit: 9393fdd

Docker Images

Artifact	Image	Tag	Status	CI
caipe-ui	ghcr.io/cnoe-io/prebuild/caipe-ui	chore-retire-spec-kit-3	Published	CI

Docker pull commands

docker pull ghcr.io/cnoe-io/prebuild/caipe-ui:chore-retire-spec-kit-3

Helm Charts

Chart	Registry	Version	Status	CI
ai-platform-engineering	ghcr.io/cnoe-io/prebuild-helm-charts	0.6.0-chore-retire-spec-kit-2	Published	CI

Helm install commands

helm upgrade --install ai-platform oci://ghcr.io/cnoe-io/prebuild-helm-charts/ai-platform-engineering --version 0.6.0-chore-retire-spec-kit-2

These prebuild artifacts will be automatically cleaned up when the PR is closed or merged.

[caipe-ci-release]

Prebuild Artifacts for `9d3247c` (archived)

Prebuild Artifacts for 9d3247c

Branch: prebuild/chore/retire-spec-kit
Commit: 9d3247c

Docker Images

Artifact	Image	Tag	Status	CI
caipe-ui	-	-	Failed	CI

These prebuild artifacts will be automatically cleaned up when the PR is closed or merged.

[caipe-ci-release]

Prebuild Artifacts for acd4916

Branch: prebuild/chore/retire-spec-kit
Commit: acd4916

Docker Images

Artifact	Image	Tag	Status	CI
caipe-ui	ghcr.io/cnoe-io/prebuild/caipe-ui	chore-retire-spec-kit-3	Published	CI

Docker pull commands

docker pull ghcr.io/cnoe-io/prebuild/caipe-ui:chore-retire-spec-kit-3

Helm Charts

Chart	Registry	Version	Status	CI
ai-platform-engineering	ghcr.io/cnoe-io/prebuild-helm-charts	0.6.0-chore-retire-spec-kit-2	Published	CI

Helm install commands

helm upgrade --install ai-platform oci://ghcr.io/cnoe-io/prebuild-helm-charts/ai-platform-engineering --version 0.6.0-chore-retire-spec-kit-2

These prebuild artifacts will be automatically cleaned up when the PR is closed or merged.