Arifos

   █████╗ ██████╗ ██╗███████╗ ██████╗ ███████╗
  ██╔══██╗██╔══██╗██║██╔════╝██╔═══██╗██╔════╝
  ███████║██████╔╝██║█████╗  ██║   ██║███████╗
  ██╔══██║██╔══██╗██║██╔══╝  ██║   ██║╚════██║
  ██║  ██║██║  ██║██║██║     ╚██████╔╝███████║
  ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝╚═╝      ╚═════╝ ╚══════╝

  Constitutional AI Governance Kernel
  ─────────────────────────────────────────
  Not a chatbot. Not a model wrapper. The LAW.

New agents: Read ZEN.md first — it is the minimum viable context.

Unified CI MCP Conformance Kernel ABI Federation ChatGPT Compat Claude Desktop PyPI License

⚠️ PUBLIC REPO NOTICE (2026-07-06): The GitHub repository ariffazil/arifos is a public snapshot and may be archived or significantly behind the live production codebase running on af-forge (72.62.71.199). The live code has active patches for identity verification, schema strictness, CORS hardening, and MCP error handling that are NOT reflected in the public repo. Security audits should target the live deployment, not the public GitHub snapshot. See SECURITY.md for details.

1. What Is arifOS?

arifOS is a constitutional governance kernel that sits between AI agents and their tools, enforcing 13 floors before any irreversible action.

• The law layer — decides what agents must NOT do, so they can be trusted with what they CAN do
• A constitutional kernel with adapters — 8 stable semantic capabilities, projected through profile-specific MCP bindings. The generated public_agent profile exposes 6 governed tools; executor and sovereign profiles add action and finality without changing capability meaning. See docs/KERNEL_CAPABILITY_ABI.md.
• A federation hub — 6 live organs (arifOS, A-FORGE, AAA, GEOX, WEALTH, WELL) plus the VAULT999 immutable ledger under one contract
• An immutable ledger — VAULT999: append-only, hash-chained. Every decision sealed forever
• Built for one sovereign — Muhammad Arif bin Fazil. F13 veto is absolute

What it is NOT: an AI model, a chatbot, a startup, LangChain/CrewAI/AutoGen, or a replacement for human judgment.

APEX STACK Bridge

APEX is the admissibility framework for decisions under uncertainty (ΔΩΨ). arifOS compiles those dynamics into a constitutional orchestration substrate. AAA renders federation-state and coordination (display layer — not ASI-civilisation claims). A-FORGE gives the system governed hands. GEOX, WEALTH, and WELL anchor those hands to earth, capital, and human reality. VAULT999 preserves consequence. Arif/F13 remains the sovereign witness and final veto.

arifOS must never: replace human judgment, self-authorize a SEAL, skip 888_JUDGE, or issue verdicts without a constitutional chain.

Trinity Orthogonal Role (SATU PERMUKAAN)

arifOS = LAW / JUDGMENT

• Primary question: "Can this be allowed?"
• Owns: F1–F13 floors, verdicts (SEAL/HOLD/VOID), boundary enforcement, evidence standards.
• Must not: execute, display state to operator, route tasks.
• See also: AAA (STATE/ROUTING/VISIBILITY), A-FORGE (EXECUTION/MUTATION)
• One-line: arifOS is the judge; AAA is the cockpit; A-FORGE is the hand.

Full doctrine: GENESIS/040_APEX_STACK.md

Orthogonal CANON: ariffazil/CANON.md — this repo owns ART + KERNEL + VAULT999 write. A-FORGE owns APA + ACT. AAA owns doctrine + TREE777. Product space: ART × KERNEL × APA × ACT → VAULT999.

2. Quick Start

Human Operators

You don't install arifOS. You interact through:

• AAA Cockpit: https://aaa.arif-fazil.com
• Hermes Telegram: @ASI_arifos_bot
• Health check: https://arifos.arif-fazil.com/health

AI Agents (MCP Clients)

{
  "mcpServers": {
    "arifOS": {
      "url": "https://mcp.arif-fazil.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Developers

pip install arifos                          # from PyPI
# or
git clone [email protected]:ariffazil/arifos.git && cd arifOS
uv sync --all-extras
python -m arifosmcp.runtime.server           # starts on :8088
curl http://127.0.0.1:8088/health            # verify
python -m pytest tests/ -q --tb=short

3. The 8 Canonical Public Tools (2026-07-15)

All tools use arif_<verb> naming. Internal aliases are absorbed as modes on canonical tools. The surface is exactly 8 tools on the wire — diagnostic tools, aliases, and the entropy mesh are filtered from tools/list by default.

000 → 111 → 333 → 444 → 555 → 888 → 777 → 999
init  observe think  route memory judge forge seal

Internal aliases (absorbed into canonical modes):

Iron rules:

• No action skips judge. No organ self-authorizes.
• Pass session_id / session_token every hop.
• After SEAL → arif_forge.
• arif_forge requires seal_verdict_id from prior arif_judge SEAL.

Source of truth: server.py → tools/list (runtime) beats any static manifest. mcp.json and fastmcp.json are documentation mirrors.

4. The 13 Constitutional Floors

Every tool call passes through these. Hard floors block. Soft floors warn.

HARD violation → VOID. Action blocked. SOFT tension → CAUTION/HOLD. Human review. DERIVED → informational only.

Full spec: static/arifos/theory/000/000_CONSTITUTION.md

5. Federation Architecture

arifOS is the kernel. Six organs serve under it. Two edge agents interface with the world.

                         ┌──────────────────────┐
                         │  Arif (F13 SOVEREIGN) │
                         └──────────┬───────────┘
                                    │
       ┌────────────────────────────┼────────────────────────────┐
       │                            │                            │
  ┌────▼─────┐              ┌───────▼───────┐            ┌───────▼───────┐
  │  Hermes  │              │      AAA      │            │   OpenClaw    │
  │  🧠 :8644│              │  🖥️  :3001    │            │   🤖 :18789   │
  │ Telegram │              │   Cockpit     │            │  Transport    │
  └──────────┘              └───────────────┘            └───────────────┘
                                    │
                         ┌──────────▼──────────┐
                         │    arifOS (Ω)        │
                         │    Kernel :8088      │
                         │    F1-F13 · 888 JUDGE│
                         └──┬───┬───┬───┬──────┘
                            │   │   │   │
          ┌─────────────────┼───┼───┼───┼─────────────────┐
          │                 │   │   │   │                 │
    ┌─────▼────┐   ┌───────▼┐ ┌▼─────┐ ┌▼────────┐  ┌────▼─────┐
    │  GEOX    │   │WEALTH  │ │ WELL │ │A-FORGE  │  │ VAULT999 │
    │  🌍 :8081│   │💰:18082│ │🫀:18083│ │⚒️:7071  │  │ 🔒 Seal  │
    │ Evidence │   │Compute │ │Reflect│ │Execute  │  │ Immutable│
    └──────────┘   └────────┘ └──────┘ └─────────┘  └──────────┘

Authority chain: Arif → AAA/Hermes → arifOS kernel → Domain organs → A-FORGE → VAULT999

6. Build, Test, Deploy

# Development
uv sync --all-extras
uv run python -m arifosmcp.runtime.server
python -m pytest tests/ -q --tb=short
ruff check . && ruff format .

# Deploy to VPS
make deploy-local                             # rsync + systemd restart
systemctl status arifos

# Docker
docker build -t ghcr.io/ariffazil/arifos:latest .

7. MCP Connection Guide

Public Endpoint

https://mcp.arif-fazil.com/mcp

Transport: streamable-http. Initialize session first, then call tools.

Internal Organs

Rule: arifOS judges → A-FORGE executes → VAULT999 records. Never skip the chain.

Federation Context (read all 3 for full picture)

🔌 MCP Connection

Connect to arifOS via the Model Context Protocol. Two transports are supported:

Streamable HTTP (Public)

STDIO (Local)

npx -y arifos-mcp

Claude Code / Cursor

{
  "mcpServers": {
    "arifos": {
      "url": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Connecting from ChatGPT

arifOS exposes arif_search and arif_fetch for ChatGPT MCP discovery (always on — set by ARIFOS_CHATGPT_COMPAT=true). ChatGPT clients will auto-discover search + fetch capabilities.

Connecting from Claude Desktop

Copy the config from claude_desktop_config.json in this repo, or use stdio:

{
  "mcpServers": {
    "arifOS": {
      "command": "npx",
      "args": ["-y", "arifos-mcp"],
      "autoApprove": ["arif_init", "arif_observe", "arif_think", "arif_route", "arif_memory", "arif_canary"]
    }
  }
}

Direct Usage

curl -X POST https://mcp.arif-fazil.com/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{"jsonrpc":"2.0","method":"tools/list","id":1}'

Discovery

• MCP Server Card: .well-known/mcp/server.json — MCP Inspector / Smithery discovery
• Agent Card: https://aaa.arif-fazil.com/.well-known/agent-card.json (AAA owns the canonical A2A card)
• MCP Manifest: https://arifos.arif-fazil.com/.well-known/mcp.json

8. License & Sovereignty

AGPL-3.0. The constitution must remain open. The kernel must remain inspectable.

Muhammad Arif bin Fazil is F13 SOVEREIGN. His veto is absolute. No algorithm overrides. No agent bypasses. No institution supersedes.

arifOS · Port 8088 · 8 canonical tools · 13 floors · 6 live organs
AGPL-3.0 · Sovereign: Arif Fazil · Federation: ALIVE
ChatGPT ✓ · Claude Desktop ✓ · Streamable HTTP + STDIO
DITEMPA BUKAN DIBERI — 999 SEAL ALIVE