GitHub - ariffazil/arifos: arifOS — Constitutional MCP kernel for governed AI execution. AAA trinity: AGI (Mind) · ASI (Heart) · APEX (Judge). Built for the sovereign agentic era.

   █████╗ ██████╗ ██╗███████╗ ██████╗ ███████╗
  ██╔══██╗██╔══██╗██║██╔════╝██╔═══██╗██╔════╝
  ███████║██████╔╝██║█████╗  ██║   ██║███████╗
  ██╔══██║██╔══██╗██║██╔══╝  ██║   ██║╚════██║
  ██║  ██║██║  ██║██║██║     ╚██████╔╝███████║
  ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝╚═╝      ╚═════╝ ╚══════╝

  Constitutional AI Governance Kernel
  ─────────────────────────────────────────
  Not a chatbot. Not a model wrapper. The LAW.

DITEMPA BUKAN DIBERI — "Forged, Not Given."

⚠️ PUBLIC REPO NOTICE (2026-07-06): The GitHub repository ariffazil/arifos is a public snapshot and may be archived or significantly behind the live production codebase running on af-forge (72.62.71.199). The live code has active patches for identity verification, schema strictness, CORS hardening, and MCP error handling that are NOT reflected in the public repo. Security audits should target the live deployment, not the public GitHub snapshot. See SECURITY.md for details.

1. What Is arifOS?

arifOS is a constitutional governance kernel that sits between AI agents and their tools, enforcing 13 floors before any irreversible action.

The law layer — decides what agents must NOT do, so they can be trusted with what they CAN do
An MCP server — 11 canonical public verbs (SATU PERMUKAAN 2026-07-09 Spine P0; source: arifosmcp/runtime/public_surface.py CANONICAL_12). Session standing rides signed sct_v1 capability tokens. One intent = one public tool. See arifosmcp/PUBLIC_SURFACE_CANON.md.
A federation hub — 6 live organs (arifOS, A-FORGE, AAA, GEOX, WEALTH, WELL) plus the VAULT999 immutable ledger under one contract
An immutable ledger — VAULT999: append-only, hash-chained. Every decision sealed forever
Built for one sovereign — Muhammad Arif bin Fazil. F13 veto is absolute

What it is NOT: an AI model, a chatbot, a startup, LangChain/CrewAI/AutoGen, or a replacement for human judgment.

APEX STACK Bridge

APEX THEORY defines the constitutional dynamics of governed intelligence through ΔΩΨ. arifOS compiles those dynamics into an AGI substrate kernel. AAA renders the substrate as visible ASI civilization state. A-FORGE gives the system governed hands. GEOX, WEALTH, and WELL anchor those hands to earth, capital, and human reality. VAULT999 preserves consequence. Arif/F13 remains the sovereign witness and final veto.

arifOS must never: replace human judgment, self-authorize a SEAL, skip 888_JUDGE, or issue verdicts without a constitutional chain.

Trinity Orthogonal Role (SATU PERMUKAAN)

arifOS = LAW / JUDGMENT

Primary question: "Can this be allowed?"
Owns: F1–F13 floors, verdicts (SEAL/HOLD/VOID), boundary enforcement, evidence standards.
Must not: execute, display state to operator, route tasks.
See also: AAA (STATE/ROUTING/VISIBILITY), A-FORGE (EXECUTION/MUTATION)
One-line: arifOS is the judge; AAA is the cockpit; A-FORGE is the hand.

Full doctrine: GENESIS/040_APEX_STACK.md

Orthogonal CANON: ariffazil/CANON.md — this repo owns ART + KERNEL + VAULT999 write. A-FORGE owns APA + ACT. AAA owns doctrine + TREE777. Product space: ART × KERNEL × APA × ACT → VAULT999.

2. Quick Start

Human Operators

You don't install arifOS. You interact through:

AAA Cockpit: https://aaa.arif-fazil.com
Hermes Telegram: @ASI_arifos_bot
Health check: https://arifos.arif-fazil.com/health

AI Agents (MCP Clients)

{
  "mcpServers": {
    "arifOS": {
      "url": "https://mcp.arif-fazil.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Developers

pip install arifos                          # from PyPI
# or
git clone git@github.com:ariffazil/arifos.git && cd arifOS
uv sync --all-extras
python -m arifosmcp.runtime.server           # starts on :8088
curl http://127.0.0.1:8088/health            # verify
python -m pytest tests/ -q --tb=short

3. The 11 Canonical Public Tools (Spine P0 — 2026-07-09)

Default tools/list is the 11-verb public facade (arifosmcp/PUBLIC_SURFACE_CANON.md). Session standing rides signed sct_v1 tokens (store = optional cache). Birth apex is UNMEASURED.

#	Tool	Stage	What It Does
1	`arif_init`	000	Start session + mint `session_token`. Modes: `init`, `light`, `preflight`, `triage`, `canary`. Always first.
2	`arif_observe`	111	Reality sensing — search, fetch, vitals, compass. (`arif_fetch` = mode, not public verb.)
3	`arif_think`	333	Reason, plan, reflect. (`arif_mind_reason` = internal only.)
4	`arif_route`	444	Route intent to federation organ. Modes: `route`, `bridge`.
5	`arif_bridge_connect`	444b	Direct organ call (HIGH). Prefer `arif_route` by default.
6	`arif_critique`	555	Maruah / risk before irreversible action.
7	`arif_memory`	555m	Constitutional memory governor.
8	`arif_judge`	666	Verdict — SEAL / HOLD / SABAR / VOID. Kernel judges; does not seal.
9	`arif_forge`	777	Guarded execution after SEAL. (`arif_act` internal-only — never in `allowed_next_verbs`.)
10	`arif_compose`	888	Final human reply. Call LAST.
11	`arif_seal`	999	VAULT999 immutable ledger. Prefer `verify`/`dry_run` until SOVEREIGN.

000 → 111 → 333 → 444 → 555 → 555m → 666 → 777 → 888 → 999
init  observe think route critique memory judge forge compose seal

Demoted / not public: arif_triage → arif_init(mode=preflight|triage); arif_fetch → arif_observe(mode=fetch); arif_act → arif_forge.

Iron rules:

No action skips judge. No organ self-authorizes.
Pass session_token every hop — do not re-interrogate store-only session_id.
After SEAL → arif_forge; reply last → arif_compose.

Source of truth: PUBLIC_SURFACE_CANON.md → runtime/public_surface.py → tool_registry.json (canonical_order) → live /health.

4. The 13 Constitutional Floors

Every tool call passes through these. Hard floors block. Soft floors warn.

#	Floor	Type	Rule
F1	AMANAH	HARD	Reversible first. Irreversible → 888 HOLD
F2	TRUTH	HARD	P(truth) ≥ 0.99. Fabrication = VOID
F3	WITNESS	DERIVED	Multi-party consensus required for high-blast actions
F4	CLARITY	HARD	Every output must reduce entropy (ΔS ≤ 0)
F5	PEACE²	SOFT	Non-destructive power. Harm potential < 0.30
F6	EMPATHY	SOFT	Protect weakest stakeholder
F7	HUMILITY	HARD	Cap confidence at 0.90. No fake certainty
F8	GENIUS	DERIVED	Complex actions need high signal
F9	ANTIHANTU	HARD	No deception, manipulation, or consciousness claims
F10	ONTOLOGY	HARD	AI is instrument. No soul, no feelings
F11	AUDIT	HARD	Every decision logged and inspectable
F12	RESILIENCE	HARD	Injection defense. Risk bounded
F13	SOVEREIGN	HARD	Human veto FINAL. Strongest floor

HARD violation → VOID. Action blocked. SOFT tension → CAUTION/HOLD. Human review. DERIVED → informational only.

Full spec: static/arifos/theory/000/000_CONSTITUTION.md

5. Federation Architecture

arifOS is the kernel. Six organs serve under it. Two edge agents interface with the world.

                         ┌──────────────────────┐
                         │  Arif (F13 SOVEREIGN) │
                         └──────────┬───────────┘
                                    │
       ┌────────────────────────────┼────────────────────────────┐
       │                            │                            │
  ┌────▼─────┐              ┌───────▼───────┐            ┌───────▼───────┐
  │  Hermes  │              │      AAA      │            │   OpenClaw    │
  │  🧠 :8644│              │  🖥️  :3001    │            │   🤖 :18789   │
  │ Telegram │              │   Cockpit     │            │  Transport    │
  └──────────┘              └───────────────┘            └───────────────┘
                                    │
                         ┌──────────▼──────────┐
                         │    arifOS (Ω)        │
                         │    Kernel :8088      │
                         │    F1-F13 · 888 JUDGE│
                         └──┬───┬───┬───┬──────┘
                            │   │   │   │
          ┌─────────────────┼───┼───┼───┼─────────────────┐
          │                 │   │   │   │                 │
    ┌─────▼────┐   ┌───────▼┐ ┌▼─────┐ ┌▼────────┐  ┌────▼─────┐
    │  GEOX    │   │WEALTH  │ │ WELL │ │A-FORGE  │  │ VAULT999 │
    │  🌍 :8081│   │💰:18082│ │🫀:18083│ │⚒️:7071  │  │ 🔒 Seal  │
    │ Evidence │   │Compute │ │Reflect│ │Execute  │  │ Immutable│
    └──────────┘   └────────┘ └──────┘ └─────────┘  └──────────┘

Organ	Port	Role	Must Never
arifOS	8088	Constitutional kernel	Self-authorize
GEOX	8081	Earth intelligence	Authorize drilling
WEALTH	18082	Capital intelligence	Allocate capital
WELL	18083	Human readiness	Make medical diagnoses
AAA	3001	Control plane / cockpit	Issue constitutional verdicts
A-FORGE	7071/7072	Execution shell	Self-authorize
VAULT999	—	Immutable audit ledger	Edit or delete records
Hermes	8644	Telegram MIND edge	Issue constitutional verdicts
OpenClaw	18789	Transport HANDS edge	Issue constitutional verdicts

Authority chain: Arif → AAA/Hermes → arifOS kernel → Domain organs → A-FORGE → VAULT999

6. Build, Test, Deploy

# Development
uv sync --all-extras
uv run python -m arifosmcp.runtime.server
python -m pytest tests/ -q --tb=short
ruff check . && ruff format .

# Deploy to VPS
make deploy-local                             # rsync + systemd restart
systemctl status arifos

# Docker
docker build -t ghcr.io/ariffazil/arifos:latest .

7. MCP Connection Guide

Public Endpoint

https://mcp.arif-fazil.com/mcp

Transport: streamable-http. Initialize session first, then call tools.

Internal Organs

Organ	Endpoint	When to use
arifOS	`localhost:8088`	Governance, judgment, routing
A-FORGE	`localhost:7071`	Build, deploy, filesystem, git, docker
GEOX	`localhost:8081`	Seismic, wells, petrophysics
WEALTH	`localhost:18082`	NPV, risk, capital flow
WELL	`localhost:18083`	Vitality, readiness, dignity

Rule: arifOS judges → A-FORGE executes → VAULT999 records. Never skip the chain.

Federation Context (read all 3 for full picture)

Read this	For	Link
arifOS (this repo)	Constitutional kernel. 11 canonical public verbs. 13 floors. The judge.	← you are here
A-FORGE	Executor. 98 MCP tools. Gates + A-THINK law.	`ariffazil/A-FORGE`
AAA	Cockpit. A2A mesh. Agent registry. React 19 dashboard.	`ariffazil/AAA`

🔌 MCP Connection

Connect to arifOS via the Model Context Protocol:

Property	Value
Endpoint	`https://mcp.arif-fazil.com/mcp`
Alternate	`https://arif-fazil.com/mcp`
Transport	Streamable HTTP (JSON-RPC 2.0)
Tools	11 canonical public verbs
Health	`https://arifos.arif-fazil.com/health`

Claude Code / Cursor

Add to your MCP client config:

{
  "mcpServers": {
    "arifos": {
      "url": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Direct Usage

curl -X POST https://mcp.arif-fazil.com/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{"jsonrpc":"2.0","method":"tools/list","id":1}'

Discovery

Agent Card: https://arifos.arif-fazil.com/.well-known/agent-card.json
MCP Manifest: https://arifos.arif-fazil.com/.well-known/mcp.json

8. License & Sovereignty

AGPL-3.0. The constitution must remain open. The kernel must remain inspectable.

Muhammad Arif bin Fazil is F13 SOVEREIGN. His veto is absolute. No algorithm overrides. No agent bypasses. No institution supersedes.

arifOS · Port 8088 · 11 canonical public verbs · 13 floors · 6 live organs
AGPL-3.0 · Sovereign: Arif Fazil · Federation: ALIVE
DITEMPA BUKAN DIBERI — 999 SEAL ALIVE

Name		Name	Last commit message	Last commit date
Latest commit History 2,404 Commits
.agents		.agents
.arifos		.arifos
.collab		.collab
.github		.github
.opencode		.opencode
.playwright-mcp		.playwright-mcp
.well-known		.well-known
GENESIS		GENESIS
VAULT999		VAULT999
arifos_wiki_tools		arifos_wiki_tools
arifosmcp		arifosmcp
commands		commands
config		config
contracts		contracts
core		core
deploy		deploy
docs		docs
eval		eval
federation		federation
memory		memory
schemas		schemas
scripts		scripts
skills		skills
static		static
supabase		supabase
tests		tests
tools		tools
.antigravityignore		.antigravityignore
.dockerignore		.dockerignore
.env.docker.example		.env.docker.example
.env.example		.env.example
.gemini_access		.gemini_access
.geminiignore		.geminiignore
.gitattributes		.gitattributes
.gitignore		.gitignore
.gitleaks.toml		.gitleaks.toml
.gitmodules		.gitmodules
.opencode.json		.opencode.json
.pre-commit-config.yaml		.pre-commit-config.yaml
.secrets.baseline		.secrets.baseline
444_ASI_CANON.md		444_ASI_CANON.md
AGENTS.md		AGENTS.md
CHANGELOG.md		CHANGELOG.md
CLARITY.md		CLARITY.md
CLAUDE.md		CLAUDE.md
Dockerfile		Dockerfile
FEDERATION_CONTRACT.md		FEDERATION_CONTRACT.md
HERMES_OPENCODE_PROTOCOL.md		HERMES_OPENCODE_PROTOCOL.md
INVARIANTS.md		INVARIANTS.md
LICENSE		LICENSE
Makefile		Makefile
QUICKSTART.md		QUICKSTART.md
README.md		README.md
ROOTKEY_SPEC_v54.md		ROOTKEY_SPEC_v54.md
RUNBOOK.md		RUNBOOK.md
SECURITY.md		SECURITY.md
SELF_AUDIT_PROMPT.md		SELF_AUDIT_PROMPT.md
TOOL_MANIFEST.json		TOOL_MANIFEST.json
arifosd.py		arifosd.py
constitutional.llms.txt		constitutional.llms.txt
f11_bridge.py		f11_bridge.py
glama.json		glama.json
identity.toml		identity.toml
llms.txt		llms.txt
mcp-arifos.json		mcp-arifos.json
organ_heartbeat_daemon.py		organ_heartbeat_daemon.py
package.json		package.json
pyproject.toml		pyproject.toml
pyrightconfig.json		pyrightconfig.json
requirements.txt		requirements.txt
risk_leash.yaml		risk_leash.yaml
server.py		server.py
smithery.yaml		smithery.yaml
uv.lock		uv.lock

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Repository files navigation

1. What Is arifOS?

APEX STACK Bridge

Trinity Orthogonal Role (SATU PERMUKAAN)

2. Quick Start

Human Operators

AI Agents (MCP Clients)

Developers

3. The 11 Canonical Public Tools (Spine P0 — 2026-07-09)

4. The 13 Constitutional Floors

5. Federation Architecture

6. Build, Test, Deploy

7. MCP Connection Guide

Public Endpoint

Internal Organs

Federation Context (read all 3 for full picture)

🔌 MCP Connection

Claude Code / Cursor

Direct Usage

Discovery

8. License & Sovereignty

About

Uh oh!

Releases 38

Sponsor this project

Uh oh!

Packages

Uh oh!

Contributors

Uh oh!

Languages

Uh oh!

Folders and files

Latest commit

History

Repository files navigation

1. What Is arifOS?

APEX STACK Bridge

Trinity Orthogonal Role (SATU PERMUKAAN)

2. Quick Start

Human Operators

AI Agents (MCP Clients)

Developers

3. The 11 Canonical Public Tools (Spine P0 — 2026-07-09)

4. The 13 Constitutional Floors

5. Federation Architecture

6. Build, Test, Deploy

7. MCP Connection Guide

Public Endpoint

Internal Organs

Federation Context (read all 3 for full picture)

🔌 MCP Connection

Claude Code / Cursor

Direct Usage

Discovery

8. License & Sovereignty

About

Topics

Resources

License

Contributing

Security policy

Uh oh!

Stars

Watchers

Forks

Releases 38

Sponsor this project

Uh oh!

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

Packages