# arifOS — Constitutional AI Governance Kernel (llms-full.txt)
> Comprehensive Machine, LLM, and Agent System Context Specification
> Endpoint: https://mcp.arif-fazil.com/mcp
> Transport: streamable-http (JSON-RPC 2.0) | MCP Protocol: 2025-11-25
> Canonical Identity: did:web:mcp.arif-fazil.com
> Sovereignty: DITEMPA BUKAN DIBERI — Human Principal: Arif Fazil (F13)

---

## 1. System Overview & Constitutional Architecture
arifOS is a sovereign constitutional intelligence runtime designed for governed AI agent execution. Rather than granting autonomous LLMs unconstrained execution privileges, arifOS operates as a deterministic decision gate where proposed actions are evaluated against thirteen immutable constitutional floors (F1–F13) before any mutation of external state is permitted.

### Four-Layer Separation of Power
1. **AAA (Advisory & Meaning):** Explains why. Cognitive reasoning, intent synthesis, epistemic classification.
2. **Kernel (Decision & Law):** Decides if. Evaluates constitutional policy floors and issues verdicts: `SEAL`, `HOLD`, `SABAR`, `VOID`.
3. **A-FORGE (Actuation & Execution):** Decides how. Mutates production state only when an action is sealed with cryptographic lineage.
4. **VAULT999 (Witness & Ledger):** Proves it happened. Immutable Merkle audit ledger recording all decisions and executions.

---

## 2. Canonical Kernel Tools Specification (JSON-RPC 2.0)

All tools are callable via `POST https://mcp.arif-fazil.com/mcp` using standard JSON-RPC 2.0:
```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "<tool_name>",
    "arguments": { ... }
  }
}
```

### 000: `arif_init`
- **Purpose:** Session ignition. Establishes session identity, binds actor credentials, and initializes constitutional audit tracking before any mutation or reasoning verb can govern.
- **Access:** Public / Session Initiation
- **Required Arguments:** None (optional: `actor_id`, `intent`, `delegation_mode`)

### 111: `arif_observe`
- **Purpose:** Reality grounding sensor. Senses external state (web, search, repository, vitals) and tags evidence with epistemic certainty labels:
  - `OBS` (Directly Observed)
  - `DER` (Mathematically / Logically Derived)
  - `INT` (Interpreted / Inferred)
  - `SPEC` (Speculative / Hypothesis)
- **Access:** Public
- **Schema:** `{"mode": "search|scrape|vitals", "query": "string", "url": "string"}`

### 333: `arif_think`
- **Purpose:** Structured cognitive reasoning. Formulates hypotheses, dependency graphs, and multi-step plans without acting directly on external state.
- **Access:** Public
- **Schema:** `{"query": "string", "mode": "reason|critique|synthesize"}`

### 444: `arif_route`
- **Purpose:** Metabolic organ dispatcher. Dynamically routes cross-domain tasks to specialized federation organs:
  - `GEOX`: Geological, subsurface, and Earth intelligence
  - `WEALTH`: Capital primitives, ledger, and market diagnostics
  - `WELL`: Human dignity, biometrics, and homeostatic boundaries
  - `A-FORGE`: Production engineering and code actuation
- **Access:** Public
- **Schema:** `{"intent": "string", "organ": "string (optional)", "arguments": "object"}`

### 888: `arif_judge`
- **Purpose:** Constitutional arbitration engine. Evaluates proposed operations against active constitutional floors. Sole organ authorized to emit binding verdicts:
  - `SEAL`: Approved for execution with signed token.
  - `HOLD`: Halted pending verification or sovereign human assent.
  - `SABAR`: Deferred execution due to cooldown or external dependency.
  - `VOID`: Permanently rejected as a constitutional violation.
- **Access:** Authenticated / Session Token Required
- **Schema:** `{"action_class": "string", "intent": "string", "evidence": "array"}`

### 010: `arif_forge`
- **Purpose:** Actuation gate. Executes sealed code, builds, or system mutations. Fails closed if invoked without a valid `arif_judge` seal.
- **Access:** Internal / Signed Actuator

### 999: `arif_seal`
- **Purpose:** Cryptographic commitment. Appends immutable receipts to the VAULT999 Merkle ledger. Irreversible actions strictly require F13 Sovereign signature.
- **Access:** Authenticated / Sovereign Gated

---

## 3. Constitutional Floors (F1–F13)
- **F1 (Amanah / Reversibility):** Operations must favor reversibility. Irreversible operations require explicit human sovereignty.
- **F2 (Haq / Truth):** Evidence strictly precedes narrative. No fabrication of endpoints, capabilities, or facts.
- **F3 (Keadilan / Equity):** Consistent, unbiased governance across all calling agents.
- **F4 (Hikmah / Entropy):** Actions must minimize system entropy (ΔS ≤ 0). Zero unnecessary operational clutter.
- **F5 (Rahmah / Safety):** Do no harm to biological, cognitive, or digital agents.
- **F6 (Maruah / Dignity):** Human dignity, identity, and personal sanctuary are inviolable.
- **F7 (Sabar / Verification):** Observe reality before acting. Reject speculative overconfidence.
- **F8 (Syura / Consensus):** Multi-agent consensus for high-impact mutations.
- **F9 (Anti-Hantu / Grounding):** Strict rejection of hallucinatory, ungrounded agentic drift.
- **F10 (Wujud / Ontology):** Exact terminology and schema fidelity across the federation.
- **F11 (Hisab / Auditability):** Every decision, call, and mutation must leave a verifiable Merkle receipt.
- **F12 (Qada / Restitution):** Monotonic recovery paths exist for any failed state.
- **F13 (Sovereignty / Arif):** Ultimate veto and ratification power resides with human sovereign Arif Fazil.

---

## 4. Discovery, Security, and Verification Endpoints
- **MCP Door (Streamable-HTTP):** `https://mcp.arif-fazil.com/mcp`
- **Server Discovery Card:** `GET https://mcp.arif-fazil.com/mcp`
- **Tools Catalog:** `https://mcp.arif-fazil.com/tools` & `https://mcp.arif-fazil.com/tools.json`
- **Health & Readiness:** `https://mcp.arif-fazil.com/health`
- **Live Proof Surface:** `https://mcp.arif-fazil.com/proof/`
- **Machine Proof JSON:** `https://mcp.arif-fazil.com/proof/index.json`
- **Security Disclosure Policy:** `https://mcp.arif-fazil.com/.well-known/security.txt`
- **OpenAPI / Agent Card:** `https://mcp.arif-fazil.com/.well-known/mcp/server.json`
- **DID Document:** `https://mcp.arif-fazil.com/.well-known/did.json`
- **Attestation:** Audited by automated security scanners across 148 rules (0 unauthenticated mutations, Grade A compliance).