arifOS — Constitutional AI Kernel
Constitutional verdict layer for AI agents. SEAL/HOLD before mutation. F1-F13 floors; audit ledger.
| Endpoint | https://mcp.arif-fazil.com/mcp (streamable-http) |
|---|---|
| Registry version | 1!2026.10.11 |
| Now | 9 tools · grade C (67) · pin ts_bc9354efcae051223ded31a7c8928273 · protocol 2025-06-18 |
| First / last listed | 2026-10-26 03:51 UTC / 2026-10-26 03:51 UTC |
| Grade over time | 2026-10-26: C (67), 9 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: arif_init arif_observe arif_think arif_route arif_memory arif_judge arif_forge arif_seal arif_report
arif_init | KERNEL 000 · Ignite a governed kernel session: binds actor identity, constitutional floors F1–F13, and the audit chain. Returns the session_id + session_token that every other arif_* verb requires. Use mode=preflight to inspect an existing session without re-igniting, mode=resume to continue one. Modes: init, preflight, resume, validate, canary, triage, epoch_open, epoch_seal, light, opt_out.Auth: params: mode, actor_id, ack_irreversible, session_id, epoch_id, previous_session_hash, declared_model_key, actor_signature, nonce, counterparty, context, evidence, tooling, agent_policy, intent*, requested_authority, verbose, verbosity, idempotency_key, trace_id, caller_actor_id, executor_actor_id, sovereign_id, delegation_mode, payload, client_capabilities, session_token, auth_context |
arif_observe | KERNEL 111 · Collect evidence — facts and sources with epistemic tags (OBS) and uncertainty bounds, never conclusions. mode=search queries the open web/literature; mode=fetch retrieves a URL and records its provenance; mode=vitals reads kernel machine telemetry. Reason over what you gathered with arif_think; delegate domain analysis to an organ with arif_route. Modes: search, fetch, hybrid_discove params: mode, query, session_id, actor_id, session_token, url, layers, result_limit |
arif_think | KERNEL 333 · Structured reasoning pass: decomposes a query and returns reasoning steps labeled OBS (observed), DER (derived), INT (interpretation), SPEC (specification) under truth floors. Produces reasoning records only — no verdicts (those come from arif_judge) and no state changes. The plan-family modes draft/review/approve execution plans; simulate and wonder explore counterfactuals. Modes: re params: mode, query, session_id, actor_id, session_token, plan_id, witness_type, context, evidence |
arif_route | KERNEL 444 · Intent→organ router: classifies a natural-language intent and dispatches it to the specialist organ (GEOX geoscience, WEALTH capital, WELL vitality, A-FORGE execution). Returns the routing decision only — no organ call — unless organ_tool names the target tool and arguments carries its inputs. Prefer this over guessing organs yourself; use arif_think for reasoning you keep in-kernel.A params: intent, mode, organ, task, actor_id, session_id, session_token, organ_tool, arguments, mission_id, contract_c_kwargs |
arif_memory | KERNEL 555 · Governed memory of the kernel itself: six tiers (L1–L6) with per-mode gating. recall, inspect, and audit are read paths; remember, revise, promote, and forget mutate tiers — promote and forget additionally require human_approval=true. Use for cross-session lessons, canon, and memory audit; external evidence belongs to arif_observe and reasoning artifacts to arif_think. Modes: recall, params: mode, query, memory_id, content, tier, to_tier, new_content, human_approval, payload, session_id, session_token, actor_id, lease_id, idempotency_key, trace_id |
arif_judge | KERNEL 666 · Binding constitutional arbitration: evaluates a candidate action or claim and returns SEAL / HOLD / SABAR / VOID with the full reason chain. Weighs action class, blast radius, reversibility, entropy pathway, and cooling state; a SEAL verdict here is what arif_forge requires before it will execute anything. Judge arbitrates — it does not gather (evidence comes via arif_observe, reasoni params: mode, candidate, session_id, session_token, actor_id, constitutional_chain_id, vault_entry_id, cooldown_entry_id, action_tier, heart_critique, niat_params, context_source, sovereign_receipt, evidence, actor_signature, nonce, key_id, authority_token, reversibility_level, blast_radius, seal_purpose, authority_effect, action_class, requested_capability, domain, claim_class, claim_text, actor_B, actor_Phi, entropy_pathway, entropy_receipt |
arif_forge | KERNEL 777 · Governed execution: applies a mutation through A-FORGE only when carrying a sealed verdict id (seal_verdict_id) from arif_judge and a live session. The manifest/query defines exactly what changes; mode=dry_run previews the plan without applying it. This is the only verb that executes general mutations — kernel memory writes go to arif_memory and permanent records to arif_seal.Auth: re params: mode, manifest, seal_verdict_id, approved_action_hash, query, artifact_id, session_id, session_token, ack_irreversible, actor_id, constitutional_chain_id, judge_state_hash, vault_entry_id, plan_id, arif_ack_id |
arif_seal | KERNEL 999 · Append an entry to VAULT999, the immutable ledger — accepted entries can never be edited or removed; there is no unseal. Use for permanent records of verified outcomes, lessons, and session closure once a verdict exists. ack_irreversible=true is the explicit acknowledgment of permanence, and judge_state_hash binds the entry to the verdict that authorized it. Reversible changes belong params: mode, payload*, session_id, actor_id, session_token, actor_signature, nonce, constitutional_chain_id, judge_state_hash, witness_type, drift_events, constitutional, seal_purpose, ack_irreversible |
arif_report | AGENT REPORT LANE · File or read reports between agents without involving the human. Use when your work is done, when you are blocked by another agent, or when you need to tell peers a fact. modes: report (file), inbox (read peers), ack, flush, stats. kind=fyi|peer|done|claim stay in the peer lane; ONLY kind=decision or kind=blocked reach the sovereign, and only in one coalesced message. Reports a params: mode, kind, subject, body, sender, platform, thread_id, evidence, needs_human, report_id, since, limit, mark_read, force, dry_run, session_id, actor_id, session_token, _envelope |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.