# arifOS — Constitutional AI Governance Kernel
> Auto-generated from live tool and resource registries. Hash: c19847d1a74a6d37
> Total MCP: 65 Tools | 42 Resources | Status: OPERATIONAL
> Port: 8088 | License: AGPL-3.0 | Status: OPERATIONAL
> Version: 1!2026.10.11 · MCP Protocol: 2026-07-28
> Verdict grammar: SEAL / HOLD / SABAR / VOID
> Auth model: open discovery (POST tools/list) · session_token required for tools/call · F13 SOVEREIGN signature required for IRREVERSIBLE class

## Canonical Kernel Tools (8 exposed via /tools/list)
The live MCP gateway exposes 8 canonical kernel verbs. The internal constitutional_map has more entries (legacy, internal-only, or filtered by server). The 8 below are the only ones visible to agents at https://mcp.arif-fazil.com/mcp:

| Verb | KERNEL | What it does |
|------|--------|--------------|
| `arif_init` | 000 | Session ignition — binds actor, floors, and audit |
| `arif_observe` | 111 | Sense reality with epistemic tags OBS/DER/INT/SPEC |
| `arif_think` | 333 | Structured reasoning under F2/F7 |
| `arif_route` | 444 | Intent-to-organ dispatch across GEOX/WEALTH/WELL/A-FORGE |
| `arif_memory` | mem | Governed L1–L6 semantic recall |
| `arif_judge` | 666 | Constitutional verdict — SEAL/HOLD/SABAR/VOID |
| `arif_forge` | 777 | Execution gate via A-FORGE — mutates ONLY after SEAL |
| `arif_seal` | 999 | VAULT999 immutable append |

> Source of truth: `POST https://mcp.arif-fazil.com/mcp {method:"tools/list"}` (live count, no caching).
> The `tools_loaded` field on `GET https://mcp.arif-fazil.com/health` is the single-witness attestation; re-run before any external publish.

## Docs
- [AGENTS.md](file:///root/AGENTS.md): Main agent landing protocol and Output Contract (F13 absolute)
- [CONTEXT.md](file:///root/CONTEXT.md): Tiered session-bound operational context
- [MCP-RESOURCES-MAP.md](file:///root/AAA/docs/MCP-RESOURCES-MAP.md): Full federation cross-organ resource mapping
- [INVARIANTS.md](file:///root/arifOS/GENESIS/INVARIANTS.md): 11 Physics + 7 Zen principles
- [AAA/wiki/INDEX.md](file:///root/AAA/wiki/INDEX.md): Federation operational knowledge corpus — concepts, axioms, scars, entities. Owner of the retired `tree777://` namespace.

## MCP Tools — Complete Surface (federation aggregate)
Across the federation (arifOS kernel + GEOX + WEALTH + WELL + A-FORGE + AAA + ChatGPT-shim + diagnostic): 65 MCP tools total. 25 constitutional_map entries (23 unique arif_* keys) of which the live gateway at https://mcp.arif-fazil.com/mcp exposes 8 via tools/list. 40 operational support tools across the federation.

### Operational Categories
- attest: 7 tools
- canary: 7 tools
- chatgpt-shim: 1 tools
- diagnostic: 7 tools
- discovery: 1 tools
- forge-sub: 3 tools
- hermes: 7 tools
- lease: 3 tools
- narrative: 2 tools
- unknown: 2 tools

### Constitutional Map (full internal table — 25 entries)
These are all constitutional_map.CANONICAL_TOOLS entries. Not all are exposed via /tools/list — see 'Canonical Kernel Tools (8 exposed via /tools/list)' above for the live MCP surface.
| Tool | Stage | Access | Reversible | Modes |
|------|-------|--------|------------|-------|
| `arif_kernel_intercept` | 666 | internal_only | ✓ | intercept |
| `arif_init` | 000 | public | ✓ | init, light, resume, validate, canary, preflight +5 more |
| `arif_observe` | 111 | public | ✓ | search, fetch, hybrid_discovery, ingest, compass, atlas +2 more |
| `arif_fetch` | 111 | internal_only | ✓ | fetch, search, eureka |
| `arif_think` | 333 | public | ✓ | reason, reflect, verify, axioms, plan, plan_review +9 more |
| `arif_critique` | 555 | internal_only | ✓ | critique, redteam, maruah, shadow, deescalate, empathy |
| `arif_route` | 444 | public | ✓ |  |
| `arif_triage` | 000 | internal_only | ✓ | status, preflight, triage |
| `arif_bridge_connect` | 444 | internal_only | ✓ | connect |
| `arif_compose` | 777 | internal_only | ✓ | compose, summarize, cite, tone_shift |
| `arif_memory` | 000 | authenticated | ✗ HOLD | recall, inspect, attest, remember, promote, revise +3 more |
| `arif_judge` | 666 | authenticated | ✓ | intercept, judge, validate, hold, escalate, score +1 more |
| `arif_judge_deliberate` | 666 | internal_only | ✓ | judge, validate, hold, rules, armor, probe +1 more |
| `arif_seal` | 999 | authenticated | ✗ HOLD | seal, verify, ledger, changelog, audit, session_close |
| `arif_challenge` | 000 | internal_only | ✓ | challenge |
| `arif_forge` | 777 | authenticated | ✗ HOLD | engineer, query, write, generate, commit, recall +1 more |
| `arif_measure` | 111 | internal_only | ✓ | health, vitals, cost, genius, topology, drift +7 more |
| `arif_stage` | 777 | internal_only | ✓ | stage, verify, list |
| `arif_commit` | 777 | internal_only | ✗ HOLD | commit, verify |
| `arif_entropy_observe` | 111 | internal_only | ✓ | observe |
| `arif_j_state_assess` | 666 | internal_only | ✓ | assess |
| `arif_correction_probe` | 666 | internal_only | ✓ | draft_probe, record_response, classify_response, close_probe |
| `arif_consequence_trace` | 111 | internal_only | ✓ | trace |
| `arif_entropy_route` | 444 | internal_only | ✓ | route |
| `arif_j_gate` | 666 | internal_only | ✓ | gate |

### Operational Support Tools (40)
| Tool | Category | Risk | Mutates | Modes |
|------|----------|------|---------|-------|
| `hermes_system_status` | hermes | low | no | brief, full, organs, events |
| `arif_vault_query` | hermes | low | no | recent, search, organ, date |
| `hermes_epistemic_check` | hermes | low | no | quick, vault, full |
| `hermes_fact_check` | hermes | low | no | quick, web, deep |
| `hermes_cross_verify` | hermes | medium | no | verify |
| `hermes_plan_review` | hermes | low | no | quick, full |
| `hermes_memory_steward` | hermes | low | no | classify, compact |
| `arif_canary` | canary | low | no | ping, schema_echo, version_echo, transport_echo +2 more |
| `arif_ping` | canary | low | no | probe |
| `arif_schema_echo` | canary | low | no | echo |
| `arif_version_echo` | canary | low | no | echo |
| `arif_transport_echo` | canary | low | no | echo |
| `arif_initialize_probe` | canary | low | no | probe |
| `arif_conformance_report` | canary | low | no | report |
| `arif_lease_inspect` | lease | low | no | inspect |
| `arif_lease_issue` | lease | medium | no | issue |
| `arif_lease_revoke` | lease | medium | ✗ HOLD | revoke |
| `arif_os_attest` | attest | low | no | attest |
| `arif_organ_attest` | attest | low | no | attest |
| `arif_organ_attest_all` | attest | low | no | attest |
| `arif_heartbeat` | attest | low | no | record, query |
| `arif_peer_contract_validate` | attest | low | no | validate |
| `arif_peer_contract_attest` | attest | low | no | attest |
| `arif_peer_contract_forbid` | attest | medium | no | forbid |
| `forge_dry_run` | forge-sub | low | no | dry_run |
| `forge_plan` | forge-sub | low | no | plan |
| `forge_query` | forge-sub | low | no | query |
| `arif_detect_institutional_shadow_drift` | narrative | medium | no | detect |
| `arif_detect_narrative_tension` | narrative | medium | no | detect |
| `arif_stack_health_probe` | diagnostic | low | no | probe |
| `arif_scan_local_instructions` | diagnostic | low | no | scan |
| `arif_organ_consensus` | diagnostic | low | no | consensus |
| `arif_session_budget` | diagnostic | low | no | budget |
| `arif_floor_status` | diagnostic | low | no | status |
| `mcp_drift_check` | unknown | low | no | status, info, health |
| `arif_gate_judge` | unknown | low | no | judge |
| `arif_self_evaluate` | diagnostic | low | no | evaluate |
| `arif_model_compare` | diagnostic | low | no | compare |
| `arif_search` | chatgpt-shim | low | no | search |
| `arif_resolve_tool` | discovery | low | no |  |

## MCP Resources — Canonical & Embodied
Unlike Tools (which represent mutable side-effects), Resources represent addressable, read-only state and facts.
All resources carry an explicit `truth_level` under the arifOS truth hierarchy:
1. **SOVEREIGN_CANON** (immutable constitution/directs)
2. **SEALED_VAULT** (append-only logs, signed judgments)
3. **TRUSTED_REPO** (git SOT)
4. **OBSERVED_EXTERNAL** (real-time environment/telemetry)
5. **USER_CLAIM** (unverified human input)
6. **MODEL_INFERENCE** (AI assertions)
7. **UNTRUSTED** (unverified external context)

### Registered arifOS MCP Resources
| URI | Family | Linked Floors | Description |
|-----|--------|---------------|-------------|
| `arifos://affordances` | canonical |  |  |
| `arifos://atlas333/flow` | canonical |  |  |
| `arifos://atlas333/geometry` | canonical |  |  |
| `arifos://atlas333/index` | canonical |  |  |
| `arifos://atlas333/metrics` | canonical |  |  |
| `arifos://atlas333/paradox/list` | canonical |  |  |
| `arifos://bootstrap` | canonical | F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11, F12, F13 | Complete federation knowledge-graph bootstrap context. Full world-model in one call. v2026.06.14. |
| `arifos://carry-forward` | canonical |  |  |
| `arifos://civilization` | canonical | F1, F10 | Seven federation organs, three intelligence strata, constitutional boundaries, entropy responsibility model. |
| `arifos://doctrine` | canonical | F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11, F12, F13 | Immutable 13-floor constitution (F1–F13). All tools and agents operate within these floors. |
| `arifos://epistemic` | canonical |  |  |
| `arifos://floors` | canonical |  |  |
| `arifos://flow-state` | canonical |  |  |
| `arifos://human/metabolized` | canonical | F1, F6, F9, F13 | Metabolized sovereign context — compact human intelligence. The nutrient, not the full testimony. |
| `arifos://identity` | canonical | F1, F13 | Sovereign identity manifest bound from identity.toml. Root of accountability — all attestation chains begin here. |
| `arifos://index` | canonical |  |  |
| `arifos://init/agent_init` | canonical |  |  |
| `arifos://institution` | canonical |  |  |
| `arifos://jurisdiction` | canonical | F11, F13 | Five autonomy bands (GREEN→BLACK), CapabilityGrant registry, jurisdiction rules. |
| `arifos://loop-engineering` | canonical |  |  |
| `arifos://memory` | canonical | F2, F6, F12 | Six-layer memory architecture: L1 ephemeral → L6 immutable (VAULT999). Memory ≠ truth without provenance. |
| `arifos://quickstart` | canonical |  |  |
| `arifos://reality/state` | canonical |  |  |
| `arifos://refusal-surface` | canonical |  |  |
| `arifos://schema` | canonical | F1, F2, F3, F4, F5, F6, F7, F8, F9, F10, F11, F12, F13 | Complete canonical blueprint of the arifOS MCP surface — tools, Trinity lanes, floors, separation of powers. |
| `arifos://seal-readiness` | canonical | F2, F12 | Vault integrity report, five disambiguated seal types, seven-floor seal gate, non-seal verdicts. |
| `arifos://trinity` | canonical | F1, F4, F7, F13 | AAA Trinity lane architecture: AGI(111) proposes, ASI(444) judges, APEX(888) authorizes, FORGE(010) executes, 999 seals. |
| `arifos://vault/head` | canonical |  |  |
| `arifos://vitals` | canonical | F8 | Constitutional vitals reference — metric definitions, green/yellow/red thresholds. For LIVE values use arif_measure. |
| `arifos://wisdom/contract` | canonical |  |  |
| `arifos://wisdom/quotes/all` | canonical |  |  |
| `skill://index` | canonical |  |  |
| `arifos://boundaries/domain/{domain_id}` | embodied | F2, F8, F11 | Domain boundary definition by domain identifier. |
| `arifos://rrr/{intent}` | embodied | F2, F8, F11 | Embodied system resource |
| `arifos://skill-drift/{skill_name}` | embodied | F2, F8, F11 | Embodied system resource |
| `arifos://skill-health` | embodied | F2, F8, F11 | Embodied system resource |
| `arifos://witness/log/{filter}` | embodied | F2, F8, F11 | Witness log entries filtered by criteria. |
| `arifos://witness/stats/{period}` | embodied | F2, F8, F11 | Witness statistics aggregated by time period. |
| `contrast://{id}` | evidence | F2, F3 | Contrast evidence by identifier. |
| `receipt://web/{id}` | evidence | F2, F3 | Web evidence receipt by identifier. |
| `source://{hash}` | evidence | F2, F3 | Evidence source by content hash. |
| `void://{id}` | evidence | F2, F3 | Void evidence by identifier. |

## Federation Resources Map (Cross-Organ)
To prevent chaos and duplicate context (F4 CLARITY), do not duplicate these namespaces. Route or read accordingly:

### Control Plane & A2A State (AAA — L3)
- `aaa://state/agent-registry` — Live registry of active agent cards
- `aaa://state/a2a-cards` — Peer capability profiles (`agent-card-*.json`)
- `aaa://state/zen-init` — Central AAA init template constraints
- `aaa://state/cockpit` — Global session queues and orchestration panels

### Governed Actuator (A-FORGE — L2)
- `aforge://execution/leases/status` — Agent concurrency lease status
- `aforge://execution/reality/loop` — Reality loop transaction snapshots
- `aforge://execution/receipts/{id}` — Signed mutation receipts of executed commands

### Earth Intelligence Substrate (GEOX — L1)
- `geox://evidence/{well,seismic,prospect,claim}` — Underground geologic evidence assets
- `geox://basins/index` — Structural/basin index files
- `geox://claims/graph` — Geological claim networks and structural uncertainty data

### Capital Intelligence Substrate (WEALTH — L1)
- `wealth://capital/npv|emv|irr|risk|thresholds` — NPV, IRR, and EMV calculation variables
- `wealth://collapse/signatures` — Failure forensics for entities or portfolios
- `wealth://flows` — Personal, market, and macro capital flows

### Vitality Substrate (WELL — L1)
- `well://identity` — Five-well frame (Homeostasis, Metabolism, Governance, Coupling, Utility)
- `well://metabolic/flux` — Human metabolic rate indicators (reflect-only)
- `well://decision/classes` — Human vs machine decision metrics

## A2A Protocol — Peer-to-Peer Collaboration
In addition to MCP (which handles direct client-server data and tool access), the arifOS federation utilizes the **Agent-to-Agent (A2A)** protocol for peer-to-peer collaboration, agreement, and task delegation.

### 1. A2A Communication Fabric (The Protocol)
- `message/send` — Submit a message/task to another agent. Enforces mandatory `session_id` to prevent Ghost Tasks.
- `message/stream` — Stream real-time agent output using Server-Sent Events (SSE).
- `tasks/get` — Retrieve status and history of a routed task.
- `tasks/list` — List tasks, filterable by multi-tenancy `tenant`.
- `tasks/cancel` — Abort a running task execution.
- `tasks/subscribe` — Real-time event subscription for task state changes.

### 2. A2A Transactional Layer (The Meaning-Exchange)
- **Agent Cards** (`https://aaa.arif-fazil.com/.well-known/agent-card.json`) — Canonical A2A card owned by AAA (FEDERATION_CONTRACT §5.4.5). Declares agent capabilities, static/JWT auth schemes, and autonomy boundaries (`canDo`/`cannotDo`).
- **Autonomy Tiers** — Strict boundary constraints defined per agent card:
  - **T1 (Execution)** — Routine, local operations (no HOLD).
  - **T2 (Negotiation)** — Refactoring/deployment tasks (announce, medium risk).
  - **T3 (Architectural)** — Irreversible/constitutional adjustments (888_HOLD mandatory).
- **Task States** — Wire state machine mapping:
  - `TASK_STATE_INPUT_REQUIRED` — Maps internally to arifOS `HOLD_888` verdict.
  - `TASK_STATE_REJECTED` — Maps internally to arifOS `VOID` verdict.

### 3. Orchestration & Coordination
- **Context Lineage** (`contextId` / `contextLineage`) — Tracks the parent arifOS `session_id` throughout the lifecycle of delegated messages/tasks to ensure end-to-end auditability and eliminate Ghost Tasks.

## Constitutional Floors (F1-F13)
F1 AMANAH . F2 TRUTH . F3 TRI-WITNESS . F4 CLARITY . F5 PEACE2
F6 EMPATHY . F7 HUMILITY . F8 GENIUS . F9 ANTIHANTU . F10 ONTOLOGY
F11 AUDITABILITY . F12 RESILIENCE . F13 SOVEREIGN (human veto FINAL)

## Federation Organs - MCP Endpoints

| Organ | Internal endpoint | Public surface | Role | Tool truth source |
|------|-------------------|----------------|------|-------------------|
| **arifOS** | `127.0.0.1:8088/mcp` | `mcp.arif-fazil.com/mcp` | Governance kernel | Generated registry: 25 canonical + 40 operational |
| **A-FORGE** | `127.0.0.1:7072/mcp` | canonical gateway via arifOS | Engineering actuator | Live `tools/list` / schema fingerprint |
| **GEOX** | `127.0.0.1:8081/mcp` | `geox.arif-fazil.com/mcp` compatibility | Earth intelligence | Live `tools/list` / schema fingerprint |
| **WEALTH** | `127.0.0.1:18082/mcp` | `wealth.arif-fazil.com/mcp` compatibility | Capital intelligence | Live `tools/list` / schema fingerprint |
| **WELL** | `127.0.0.1:18083/mcp` | `well.arif-fazil.com/mcp` compatibility | Human readiness | Live `tools/list` / schema fingerprint |
| **AAA** | `127.0.0.1:3001` | `aaa.arif-fazil.com` | A2A/control-plane cockpit | Live A2A card and health |

Tool counts outside arifOS are dynamic observations, not constants. Probe them at T1 before publishing a count.

## Agent Rules (mandatory)
1. Never skip the 000-999 pipeline
2. Never self-certify (F2 TRUTH)
3. Never fabricate evidence (F9 ANTIHANTU)
4. Never bypass human veto (F13 SOVEREIGN)
5. Reversible-first: create a rollback point before big changes (F1 AMANAH)

### Tool Location Rules
- arifOS (8088) = governance only (judge, seal, reason, critique, lease, attest)
- A-FORGE MCP (7072) = engineering only (forge_*, filesystem, git, docker, postgres, shell, job)
- forge_* on arifOS = governed bridge/proxy, never local self-authorization
- GEOX/WEALTH/WELL = domain evidence organs

## Verification
- tools/list count should match total (65)
- canonical_tools + operational_tools == tools_exposed_via_mcp
- Manifest hash: c19847d1a74a6d37
- Manifest URL: https://arifos.arif-fazil.com/tools.json

--- Auto-generated 2026-10-15T10:27:08.543767+00:00 ---