arif_forge

KERNEL 777 · Governed execution: applies a mutation through A-FORGE only when carrying a sealed verdict id (seal_verdict_id) from arif_judge and a live session. The manifest/query defines exactly what changes; mode=dry_run previews the plan without applying it. This is the only verb that executes general mutations — kernel memory writes go to arif_memory and permanent records to arif_seal.Auth: requires session_id + session_token from arif_init plus a sealed verdict id (seal_verdict_id) from arif_judge. Returns: the applied mutation receipt — one of the two committal verbs (with arif_seal).

destructive

Argument	Type	Description
mode	string	'engineer' (default) — plan and apply the work; 'dry_run' — preview what would happen, nothing is applied; 'query' — read-only questions about the workspace; 'write' — write files; 'generate' — generate code or content; 'commit' — commit prepared work; 'recall' — retrieve past forge artifacts.
query	any	The task in plain language when no manifest is supplied, e.g. 'restart the gateway service'.
plan_id	any	Plan id from arif_think's plan mode, when executing an approved plan.
actor_id	any	Your agent identity, e.g. 'kimi-code/FI-008' — recorded in the audit log.
manifest	string	Required for engineer (the default mode), write, and generate: the work order (usually JSON or markdown) describing exactly what to build or change — the more specific, the tighter the gate. mode=dry_run accepts the manifest or a plain-language query; mode=query uses query instead.
session_id	any	Session id returned by arif_init; scopes this execution to your governed session.
arif_ack_id	any	Acknowledgment id from a prior step, for multi-step execution chains.
artifact_id	any	Id of an existing artifact (from an earlier forge or judge response) that this call operates on.
session_token	any	Session Continuity Token (SCT) returned by arif_init — proves the session is yours.
vault_entry_id	any	Id of the permanent-ledger entry linked to this execution, when one already exists.
seal_verdict_id	any	The SEAL verdict id arif_judge returned — without it, nothing is executed.
ack_irreversible	boolean	Set true to confirm you accept this execution cannot be undone, when the judged action was irreversible.
judge_state_hash	any	Hash string from the arif_judge SEAL response — proves the verdict has not been tampered with.
approved_action_hash	any	Hash of the exact action that was judged — execution is refused if what you submit differs from it.
constitutional_chain_id	any	Id of the evidence chain (observe→think→judge) that led to the SEAL — copy it from the judge response.

Input schema (JSON)

{
  "type": "object",
  "allOf": [
    {
      "if": {
        "anyOf": [
          {
            "not": {
              "required": [
                "mode"
              ]
            }
          },
          {
            "required": [
              "mode"
            ],
            "properties": {
              "mode": {
                "enum": [
                  "engineer",
                  "write",
                  "generate"
                ]
              }
            }
          }
        ]
      },
      "then": {
        "required": [
          "manifest"
        ]
      }
    },
    {
      "if": {
        "required": [
          "mode"
        ],
        "properties": {
          "mode": {
            "enum": [
              "dry_run"
            ]
          }
        }
      },
      "then": {
        "anyOf": [
          {
            "required": [
              "manifest"
            ]
          },
          {
            "required": [
              "query"
            ]
          }
        ]
      }
    }
  ],
  "properties": {
    "mode": {
      "enum": [
        "engineer",
        "query",
        "write",
        "generate",
        "commit",
        "recall",
        "dry_run"
      ],
      "type": "string",
      "default": "engineer",
      "description": "'engineer' (default) — plan and apply the work; 'dry_run' — preview what would happen, nothing is applied; 'query' — read-only questions about the workspace; 'write' — write files; 'generate' — generate code or content; 'commit' — commit prepared work; 'recall' — retrieve past forge artifacts."
    },
    "query": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "The task in plain language when no manifest is supplied, e.g. 'restart the gateway service'."
    },
    "plan_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Plan id from arif_think's plan mode, when executing an approved plan."
    },
    "actor_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Your agent identity, e.g. 'kimi-code/FI-008' — recorded in the audit log."
    },
    "manifest": {
      "type": "string",
      "default": "",
      "description": "Required for engineer (the default mode), write, and generate: the work order (usually JSON or markdown) describing exactly what to build or change — the more specific, the tighter the gate. mode=dry_run accepts the manifest or a plain-language query; mode=query uses query instead."
    },
    "session_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Session id returned by arif_init; scopes this execution to your governed session."
    },
    "arif_ack_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Acknowledgment id from a prior step, for multi-step execution chains."
    },
    "artifact_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Id of an existing artifact (from an earlier forge or judge response) that this call operates on."
    },
    "session_token": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Session Continuity Token (SCT) returned by arif_init — proves the session is yours."
    },
    "vault_entry_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Id of the permanent-ledger entry linked to this execution, when one already exists."
    },
    "seal_verdict_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "The SEAL verdict id arif_judge returned — without it, nothing is executed."
    },
    "ack_irreversible": {
      "type": "boolean",
      "default": false,
      "description": "Set true to confirm you accept this execution cannot be undone, when the judged action was irreversible."
    },
    "judge_state_hash": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Hash string from the arif_judge SEAL response — proves the verdict has not been tampered with."
    },
    "approved_action_hash": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Hash of the exact action that was judged — execution is refused if what you submit differs from it."
    },
    "constitutional_chain_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Id of the evidence chain (observe→think→judge) that led to the SEAL — copy it from the judge response."
    }
  },
  "additionalProperties": false
}

arif_init

KERNEL 000 · Ignite a governed kernel session: binds actor identity, constitutional floors F1–F13, and the audit chain. Returns the session_id + session_token that every other arif_* verb requires. Use mode=preflight to inspect an existing session without re-igniting, mode=resume to continue one. Modes: init, preflight, resume, validate, canary, triage, epoch_open, epoch_seal, light, opt_out.Auth: the only verb needing no session — it mints the session_id + session_token every other verb requires. Returns: session_id, session_token, constitution_hash, allowed_next_tools.

Argument	Type	Description
mode	string	What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out.
nonce	any	One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.
intent*	string	Required. Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. A session without a stated purpose is refused (F1 Amanah). Recorded for audit.
context	any	JSON object of background facts to bind into the session, e.g. {"repo": "arifOS", "task": "fix-tests"}.
payload	any	Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects.

arif_judge

KERNEL 666 · Binding constitutional arbitration: evaluates a candidate action or claim and returns SEAL / HOLD / SABAR / VOID with the full reason chain. Weighs action class, blast radius, reversibility, entropy pathway, and cooling state; a SEAL verdict here is what arif_forge requires before it will execute anything. Judge arbitrates — it does not gather (evidence comes via arif_observe, reasoning via arif_think) and it does not mutate (execution is arif_forge, permanence is arif_seal). Modes: judge, intercept, validate, hold, escalate.Auth: requires session_id + session_token from arif_init. Returns: verdict (SEAL/HOLD/SABAR/VOID) with the full reason chain — arbitration only, it does not mutate.

read-only

Argument	Type	Description
mode	string	'judge' (default) — render a verdict on candidate; 'intercept' — pre-flight gate before an action runs; 'validate' — re-check a prior verdict; 'hold' — place an action into a cooling period; 'escalate' — refer the decision to the human owner.
nonce	any	One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.
domain	any	Subject area for claim evaluation, e.g. 'geoscience' or 'finance'.
key_id	any	Which of your registered keys produced actor_signature, e.g. 'key-1'.
actor_B	any	Your calibrated confidence for a prediction, 0.0–1.0 (Brier-style score component).

arif_memory

KERNEL 555 · Governed memory of the kernel itself: six tiers (L1–L6) with per-mode gating. recall, inspect, and audit are read paths; remember, revise, promote, and forget mutate tiers — promote and forget additionally require human_approval=true. Use for cross-session lessons, canon, and memory audit; external evidence belongs to arif_observe and reasoning artifacts to arif_think. Modes: recall, inspect, attest, remember, promote, revise, forget, audit, metabolize.Auth: requires session_id + session_token from arif_init. Returns: memory entries by tier (L1–L6); promote and forget gates require explicit human approval.

destructive

Argument	Type	Description
mode	string	'recall' (default) — semantic search of stored memories; 'inspect' — read one memory in full; 'attest' — vouch for a memory's accuracy; 'remember' — store new text; 'promote' — move a memory up a tier; 'revise' — replace a memory's text; 'forget' — remove a memory (gated); 'audit' — integrity scan; 'metabolize' — compact and consolidate tiers.
tier	any	Which memory tier to target, 'L1'–'L6' (L1 = hot working memory, L6 = sealed canon).
query	any	What to search for, in plain language (mode=recall/audit), e.g. 'past deploy rollback steps'.
content	any	The text to store (mode=remember) — write it as a self-contained lesson or fact.
payload	any	Extra mode-specific fields as JSON — e.g. {"truth_class": "DERIVED", "provenance": "CI log"} for remember.

arif_observe

KERNEL 111 · Collect evidence — facts and sources with epistemic tags (OBS) and uncertainty bounds, never conclusions. mode=search queries the open web/literature; mode=fetch retrieves a URL and records its provenance; mode=vitals reads kernel machine telemetry. Reason over what you gathered with arif_think; delegate domain analysis to an organ with arif_route. Modes: search, fetch, hybrid_discovery, ingest, compass, atlas, entropy_dS, vitals.Auth: requires session_id + session_token from arif_init. Returns: evidence items with epistemic tags (OBS) and uncertainty bounds — facts, never conclusions.

read-only

Argument	Type	Description
url	any	Exact URL to retrieve when mode=fetch, e.g. 'https://example.com/report.pdf'.
mode	string	'search' (default) — web/literature query; 'fetch' — retrieve one URL with provenance; 'hybrid_discovery' — combine sources; 'ingest' — absorb a document; 'compass'/'atlas' — guided navigation; 'entropy_dS' — measure system change; 'vitals' — kernel machine telemetry.
query	any	What to look for, in plain language, e.g. 'TDQS scoring rubric MCP'.
layers	any	Restrict where to look, e.g. ["web"] or ["canon", "memory"]; omit to search everything available.
actor_id	any	Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you.
session_id

arif_report

AGENT REPORT LANE · File or read reports between agents without involving the human. Use when your work is done, when you are blocked by another agent, or when you need to tell peers a fact. modes: report (file), inbox (read peers), ack, flush, stats. kind=fyi|peer|done|claim stay in the peer lane; ONLY kind=decision or kind=blocked reach the sovereign, and only in one coalesced message. Reports are SELF_REPORTED — probe before relying on one.

Argument	Type	Description
body	any
kind	string
mode	string
force	boolean
limit	integer
since	any
sender	any
dry_run	boolean
subject	any
actor_id	any
evidence	any

arif_route

KERNEL 444 · Intent→organ router: classifies a natural-language intent and dispatches it to the specialist organ (GEOX geoscience, WEALTH capital, WELL vitality, A-FORGE execution). Returns the routing decision only — no organ call — unless organ_tool names the target tool and arguments carries its inputs. Prefer this over guessing organs yourself; use arif_think for reasoning you keep in-kernel.Auth: requires session_id + session_token from arif_init. Returns: the routing decision (organ + tool) only — the organ call itself is a separate step.

read-only

Argument	Type	Description
mode	any	'route' (default) — classify intent and recommend the target organ; 'triage' — rank a batch of intents; 'delegate' — prepare an A2A handoff; 'status' — surface organ state; 'kernel' — kernel-level status; 'metabolize' — feed routing outcomes to arifFlow. Routing only recommends — execution is arif_forge after a SEAL verdict.
task	any	Alias for intent (backward compat).
organ	any	Optional explicit organ override. If provided, intent matching is skipped and this organ is used directly.
intent	any	Natural-language description of what the user wants. e.g. "interpret this seismic section", "assess portfolio risk"
actor_id	any	Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you.

arif_seal

KERNEL 999 · Append an entry to VAULT999, the immutable ledger — accepted entries can never be edited or removed; there is no unseal. Use for permanent records of verified outcomes, lessons, and session closure once a verdict exists. ack_irreversible=true is the explicit acknowledgment of permanence, and judge_state_hash binds the entry to the verdict that authorized it. Reversible changes belong in arif_forge under a SEAL. Modes: seal, verify, ledger, changelog, audit, session_close.Commit projection: seven of the eight verbs are reversible or informational and project their outcomes onto the two committal verbs — arif_forge (governed mutation) and arif_seal (permanence). Auth: requires session_id + session_token from arif_init. Returns: the immutable ledger entry id — append-only, there is no unseal.

destructive

Argument	Type	Description
mode	string	'seal' (default) — append a permanent entry; 'verify' — check one entry; 'ledger' — read the ledger head; 'changelog' — recent appends; 'audit' — integrity check; 'session_close' — close out a session into the ledger.
nonce	any	One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.
payload*	string	The content to store forever, as a string (usually JSON-serialized) — the outcome, lesson, or record itself. Required for the write modes (seal, session_close); pure reads (verify, ledger, changelog, audit) may omit it.
actor_id	any	Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you.

arif_think

KERNEL 333 · Structured reasoning pass: decomposes a query and returns reasoning steps labeled OBS (observed), DER (derived), INT (interpretation), SPEC (specification) under truth floors. Produces reasoning records only — no verdicts (those come from arif_judge) and no state changes. The plan-family modes draft/review/approve execution plans; simulate and wonder explore counterfactuals. Modes: reason, reflect, verify, axioms, plan, plan_review, plan_approve, refactor_plan, metabolize, simulate, wonder, atlas.Auth: requires session_id + session_token from arif_init. Returns: reasoning steps labelled OBS/DER/INT/SPEC — records only; verdicts belong to arif_judge.

read-only

Argument	Type	Description
mode	string	'reason' (default) — decompose a question; 'reflect' — self-review of prior reasoning; 'verify' — check a derivation; 'axioms' — surface hidden assumptions; 'plan'/'plan_review'/'plan_approve'/'refactor_plan' — execution-plan lifecycle; 'metabolize' — consolidate past reasoning; 'simulate' — what-if; 'wonder' — open exploration; 'atlas' — map the problem space.
query	any	The question, claim, or problem to reason about, in plain language.
context	any
plan_id	any	Plan reference from an earlier plan-mode response — needed for the review/approve/refactor steps.
actor_id	any	Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you.

arifOS — Constitutional AI Kernel

Try it

arif_forge Destructive

arifOS — Constitutional AI Kernel

Try it

arif_forge Destructive

Tools (9)