test: drop the Provin compatibility job — a downstream consumer's checks are its own

.github/workflows/e2e.yml

@@ -7,24 +7,6 @@ on:
   workflow_dispatch:
 
 jobs:
-  provin-compatibility:
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "24"
-      - name: Enable pnpm via corepack
-        run: |
-          npm install -g corepack --force
-          corepack enable
-          corepack prepare pnpm@10.29.3 --activate
-      - name: Clone dependencies over HTTPS
-        run: git config --global url."https://github.com/".insteadOf "git@github.com:"
-      - name: Test pinned Provin source against the candidate auth packages
-        run: make test-provin
-
   test-e2e:
     runs-on: ubuntu-latest
     timeout-minutes: 30

Makefile

@@ -2,7 +2,6 @@
 PROVIDER_REV := 4c44adfbf8e780863c1d7c22bf0129a86bdc62d9
 PROXY_REV := 9fc0dab66bcbb74c189c2b17812cf50851b9d2f2
 VERIFIER_REV := cc982b795efc8807712b3db9ef596182a3bfd815
-PROVIN_REV := abb14d9ff971e88261447dd255863301f22c3a7c
 
 define clone_or_pull
 	@if [ -d "$(1)/.git" ]; then \
@@ -24,18 +23,6 @@ setup:
 .PHONY: pull
 pull: setup
 
-# Exercise the actual downstream DID grant and policy extensions before release.
-.PHONY: setup-provin test-provin
-setup-provin:
-	$(call clone_or_pull,repos/auth.provider,git@github.com:o3co/auth.provider.git,$(PROVIDER_REV))
-	$(call clone_or_pull,repos/auth.policy-verifier,git@github.com:o3co/auth.policy-verifier.git,$(VERIFIER_REV))
-	$(call clone_or_pull,repos/provin.auth,git@github.com:provin-line/auth.git,$(PROVIN_REV))
-
-test-provin: setup-provin
-	cd repos/auth.provider && pnpm install --frozen-lockfile && pnpm --filter @o3co/auth-provider-oauth... run build
-	cd repos/auth.policy-verifier && pnpm install --frozen-lockfile && pnpm --filter @o3co/auth.policy-verifier.server... --filter @o3co/auth.policy-verifier.builtins... run build
-	node tests/provin/run.mjs
-
 .PHONY: status
 status:
 	@for dir in repos/auth.provider repos/auth.proxy repos/auth.policy-verifier; do \

docs/internal-adoption.md

@@ -1,10 +1,5 @@
 # Internal adoption baseline
 
-The actual Provin consumer also has a separate
-[compatibility check](../tests/provin/README.md): `make test-provin`. It tests
-the pinned downstream DID extensions and generated composition roots against
-candidate auth packages without publishing a release.
-
 Start with ordinary Bearer access tokens, the provider's real login and PKCE
 authorization-code flow, and signature-verifying policy evaluation. The E2E
 also covers session-grant issuance and an optional validation proxy. Component