Left unanswered at the time. I believe Spectre was known but not publicly disclosed at this time.
Also, here [2] is another, much more detailed explanation of an O-o-O implementation of a very simplistic RISC ISA which nonetheless has most of the relevant RISC-V features. There are also some other related texts on this subsite [3], including a single-cycle and a pipelined implementations, for the comparison.
[0] https://docs.boom-core.org/en/latest/sections/intro-overview...
[1] https://docs.boom-core.org/en/latest/sections/intro-overview...
Our pipeline visualization is reconstructed from real RTL traces (you can run your on programs which are simulated using GHDL).
Under examples you can find some different architectures based on the Harris&Harris book on computer architecture.