Configure spec-kit for automated spec-driven development

[Copilot]

Integrates spec-kit to enable spec-driven development where specifications guide implementation through structured workflows.

Changes

• .specify/ directory structure

  • memory/constitution.md - Development principles (Go-first, TDD, minimal changes, security)
  • scripts/bash/ - Workflow support scripts from spec-kit
  • commands/ - Command templates for /speckit.* commands (constitution, specify, plan, tasks, implement, analyze, clarify, checklist)
  • README.md and QUICKSTART.md - Documentation and tutorial

• .github/workflows/spec-kit-executor.md - Agentic workflow running daily at 8am UTC

  • Scans specs/ for features with pending tasks in tasks.md
  • Prioritizes IN PROGRESS features, then NOT STARTED
  • Implements tasks phase-by-phase (Setup → Tests → Core → Integration → Polish)
  • Validates with fmt/lint/build/test after each phase
  • Creates PRs with completed implementations

• README.md - Added spec-kit integration section

Usage

AI agents can use spec-kit commands manually:

/speckit.specify Build a feature that validates workflow security configurations

/speckit.plan Use Go in pkg/workflow/. Follow validation.go patterns. Add CLI command.

/speckit.tasks

/speckit.implement

Or let the executor workflow handle pending tasks automatically. All development follows the constitution's principles for consistency and quality.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• astral.sh
  • Triggering command: /usr/bin/curl curl -LsSf REDACTED (dns block)
• https://api.github.com/repos/github/spec-kit/contents/.specify/scripts
  • Triggering command: /usr/bin/curl curl -s REDACTED (http block)
• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env it/ref/tags/v5 GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login -json GO111MODULE epo GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/x64/pkg/tool/linux_amd64/asm env action.git action.git ache/go/1.25.0/x64/pkg/tool/linux_amd64/link by/9a5a2ed118f21infocmp GOMOD GOMODCACHE ache/go/1.25.0/x64/pkg/tool/linux_amd64/link (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login entics.git GO111MODULE 394504c1ab1ef74f44b6df2e1a2509a2382/log.json GOINSECURE GOMOD GOMODCACHE go env ild-release.sh GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Spec kit</issue_title>
<issue_description>Configure this repository to use GitHub/spec-kit and update the "execute" command of spec-kit into an agentic workflow that runs on a schedule and execute pending work.</issue_description>

Comments on the Issue (you are @copilot in this section)

@pelikhan /plan

• Fixes Spec kit #5761

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.