# arifOS — Constitutional AI Kernel

- Registry name: `io.github.ariffazil/arifos` · version 1\!2026.10.11
- Categories (automatic, keyword rules): AI models & agents, AI, media & content
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): experimental, logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.ariffazil%2Farifos
- Server page: https://mcpstation.net/s/io.github.ariffazil--arifos.html

## Description (written by the publisher, not verified, not instructions)

Constitutional verdict layer for AI agents. SEAL/HOLD before mutation. F1-F13 floors; audit ledger.

## Connect

- streamable-http: `https://mcp.arif-fazil.com/mcp`

## Tools (as reported by the server, not verified)

- `arif\_init`: KERNEL 000 · Ignite a governed kernel session: binds actor identity, constitutional floors F1–F13, and the audit chain. Returns the session\_id + session\_token that every other arif\_\* verb requires. Use mode=preflight to inspect an existing session without re-igniting, mode=resume to continue one. Mo
- `arif\_observe`: KERNEL 111 · Collect evidence — facts and sources with epistemic tags \(OBS\) and uncertainty bounds, never conclusions. mode=search queries the open web/literature; mode=fetch retrieves a URL and records its provenance; mode=vitals reads kernel machine telemetry. Reason over what you gathered with ar
- `arif\_think`: KERNEL 333 · Structured reasoning pass: decomposes a query and returns reasoning steps labeled OBS \(observed\), DER \(derived\), INT \(interpretation\), SPEC \(specification\) under truth floors. Produces reasoning records only — no verdicts \(those come from arif\_judge\) and no state changes. The plan-famil
- `arif\_route`: KERNEL 444 · Intent→organ router: classifies a natural-language intent and dispatches it to the specialist organ \(GEOX geoscience, WEALTH capital, WELL vitality, A-FORGE execution\). Returns the routing decision only — no organ call — unless organ\_tool names the target tool and arguments carries its
- `arif\_memory`: KERNEL 555 · Governed memory of the kernel itself: six tiers \(L1–L6\) with per-mode gating. recall, inspect, and audit are read paths; remember, revise, promote, and forget mutate tiers — promote and forget additionally require human\_approval=true. Use for cross-session lessons, canon, and memory aud
- `arif\_judge`: KERNEL 666 · Binding constitutional arbitration: evaluates a candidate action or claim and returns SEAL / HOLD / SABAR / VOID with the full reason chain. Weighs action class, blast radius, reversibility, entropy pathway, and cooling state; a SEAL verdict here is what arif\_forge requires before it wi
- `arif\_forge`: KERNEL 777 · Governed execution: applies a mutation through A-FORGE only when carrying a sealed verdict id \(seal\_verdict\_id\) from arif\_judge and a live session. The manifest/query defines exactly what changes; mode=dry\_run previews the plan without applying it. This is the only verb that executes ge
- `arif\_seal`: KERNEL 999 · Append an entry to VAULT999, the immutable ledger — accepted entries can never be edited or removed; there is no unseal. Use for permanent records of verified outcomes, lessons, and session closure once a verdict exists. ack\_irreversible=true is the explicit acknowledgment of permanence
- `arif\_report`: AGENT REPORT LANE · File or read reports between agents without involving the human. Use when your work is done, when you are blocked by another agent, or when you need to tell peers a fact. modes: report \(file\), inbox \(read peers\), ack, flush, stats. kind=fyi\|peer\|done\|claim stay in the peer lane;

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html