arifOS Constitutional Kernel
v2026.07.01Constitutional kernel — init→observe→think→route→judge→act→seal pipeline, 13 floors, VAULT999, F1-F13 governance. Owns 888 JUDGE, 999 VAULT SEAL, and authority routing. Public MCP tool execution routed through canonical gateway at mcp.arif-fazil.com.
Aggregate AgentCards from all 6 organs into a single federation manifest. Any A2A peer discovers the entire federation through this gateway.
When any organ emits auth-required (HOLD), pause task, push-notify ARIF, await sovereign decision. Implements F13 at A2A protocol level.
Query the zen federated memory state (L1-L6 layers, flow, rule). Surfaces kernel-governed memory (bands, provenance, no-bypass) as AA state. Kernel owns, AAA surfaces via Redis + /federation/memory.
F12 injection defense at gateway layer. All external A2A tasks scanned before routing to internal organs.
Relay push notifications from long-running organ tasks to registered webhook endpoints. GEOX basin analysis, WEALTH simulation, WELL monitoring.
Route A2A tasks to the correct federation organ based on skill matching. Implements the A2A Gateway pattern: receives task → matches skill → routes to organ → streams result.
Compute constitutional alignment score (G-Score) for proposed actions across all 13 floors.
Execute actions with valid prior SEAL from arif_judge. The 900-gate — no seal, no action.
Initialize governed session with authority binding, floor acknowledgment, and sovereignty declaration. Golden path entry point.
Render binding judgment on proposed actions. Evaluates intent, capability, blast radius, reversibility. Verdicts: PROCEED, HOLD, VOID, PARTIAL.
Gather and label evidence with epistemic discipline (OBS/DER/INT/SPEC). Search, ingest, and ground queries in reality.
Route natural-language intent to the correct federation organ or kernel tool. Canonical intent router.
Seal verdicts and outcomes to VAULT999 immutable ledger. Final, irreversible records preserved forever.
Plan, critique, verify, and reflect with confidence labeling. Modes: reason, critique, verify, plan.
Mint a governed session via arifOS kernel (port 8088). Returns session_id + session_token (sct_v1.*). Canonical entry point for any agent that needs authoritative identity. Same effect as calling arif_init directly — exposed here so cockpit-driven agents don't need to know kernel ports. Path C of 2026-07-24 federation unification. See /root/scripts/federation_ritual.py init.
Seal the active session via arifOS kernel (port 8088). Writes immutable entry to VAULT999 and returns entry_id + chain_hash. Canonical exit point. Same effect as arif_seal — exposed here for cockpit-driven agents. Path C of 2026-07-24 federation unification. See /root/scripts/federation_ritual.py seal.
Enforce all 13 constitutional floors across federation actions.
Assess blast radius and reversibility level for any proposed action. Determines verdict gate: 000→111→333→666→888→999.