Aaa MCP

Full conformance spine proof machine. Runs 9 live checks against the running arifOS kernel: arifos_alive, mcp_initialize, protocol_version, schema_echo_stable, session_starts, authority_checked, hold_blocks_mutation, vault_replay, cooling_ledger. Returns structured PASS/FAIL report with evidence per check. No session required. Read-only. Zero side effects. Use when: you need to prove arifOS is a substrate, not just a narrative.

DELEGATION INTELLIGENCE — Routes a task to the best federation agent(s) based on task classification (COGNITIVE/FORGE/INFRA/MIXED). Implements the quantum intelligence pattern: multiple reasoning paths explored by different agents with different models/tools, collapsed into one verdict by constitutional floors (F1-F13), not probabilities. The ONE-FRONTDOOR invariant ensures human talks only to Hermes; Hermes delegates to OpenCode (FORGE), OpenClaw (INFRA), or handles COGNITIVE tasks directly. Every delegation writes VAULT999 audit trail. F2+ CLAIM tasks automatically trigger cross-verification…

Merkle Epoch Lock gate for anti-race condition sealing (Eureka 3). Validates that the agent's observed parent hash matches VAULT999 HEAD.

Report the current state of all 13 constitutional floors.

Detect stratigraphic and geophysical patterns in well logs or seismic data using Physics-9 abduction grammar.

Run phase-driven evidence synthesis, abduction, and contradiction scanning on geological evidence.

Synthesize multi-source geoscience data into a coherent interpretation with gap detection.

Return the complete constitutional affordance contract for a tool name. Use this to decide 'why this tool', 'why not others', risk, agency level, and expected metacognition shape. Preferred over guessing from name alone.

000 INIT — initialize governed session. Start here. Session bootstrap + actor identity.

888 JUDGE — constitutional verdict. SEAL/HOLD/SABAR/VOID. Evidence→plan→judge pipeline.

888_JUDGE interactive constitutional verdict console

Pre-flight floor hint. Real 888 is arif_judge + human.

Light kernel health using core if available, else FS signals.

Bind a claim to evidence receipts and determine language strength.

Execute a single bounded reasoning step within a session.

Retrieve the full reasoning trace for a cognitive session.

111 OBSERVE — ground in reality. External evidence, vitals, repo map.

777_OPS live telemetry and thermodynamic dashboard

[NEW CANONICAL NAME] arif_probe — unified transport probe. Replaces 6 canary probes (arif_ping, arif_conformance_report, arif_schema_echo, arif_version_echo, arif_transport_echo, arif_initialize_probe). Use mode parameter: ping | conformance | schema_echo | version_echo | transport_echo | initialize.

[NEW CANONICAL NAME] arif_recall — unified memory tool. Replaces arif_memory (v5) and arif_memory_recall (v4). Mode dispatches to v5 (store/seal/forget/...) or v4 (recall/etc) automatically.

Resolve a tool name or alias to the canonical arifOS tool name. Use when you have a tool name but aren't sure if it's the canonical name. Returns: canonical_name, aliases, callable, schema_valid, authority_class, use_when, examples. Only `name` is used — all other fields are absorbed and ignored.

444 ROUTE — select organ/tool. Bridge when intent→tool mapping is uncertain.

999 SEAL — permanent record. VAULT999 hash chain. Irreversible.

AUTO_CYCLE_V1 — the smallest autonomous metabolism cycle. Hermes constraint (2026-09-10): ONE cycle that proves the metabolism works without human trigger. Contradiction detected → re-examination auto-triggered → correction receipt emitted. Darwin without Darwinism. Survival through repair, not dominance. F1 AMANAH: reversible via ledger.set_sovereign_veto(). F2 TRUTH: receipt carries honest outcome (survived=False default). F11 AUDIT: every step in event_log. F13 SOVEREIGN: set_sovereign_veto() halts any signal change.

AUTO_CYCLE_V1 proof of life — runs the autonomous cycle end-to-end. Returns the receipt demonstrating the cycle fires without human trigger. If receipt.human_triggered == False AND verdict == 'CYCLE_COMPLETE', the metabolism is autonomous.

Execute constitutional reasoning and cognitive metabolism.

WITNESS_SUBSTRATE_V1 constitutional self-test. Verifies the substrate emits a valid witness packet even with zero LLM availability, zero evidence, and zero prior context. This is the survival-of-capability test: kill the implementation, witness production still works.

Civilization engine: sustainability_path | game_theory | cross_evidence_synthesize

Finance engine: npv | irr | mirr | emv | dscr | payback | profitability_index | allocation_rank | personal_decision_rank | budget_optimize | civilization_sustainability

Physics engine: petrophysics | stratigraphy_correlate | geometry_build | monte_carlo | entropy_audit | growth_runway

WELL state oracle: snapshot_read | readiness_check | floor_scan | log_update | deltascan (Proof-of-Friction gate: pass action_weight + kappa_r via dimensions)

World oracle: geox_scene_load | geox_skills_query | macro_snapshot | series_fetch | series_vintage_fetch

Verify a geospatial location against the constitutional Earth Witness.

Trigger an immediate discovery and classification sweep across all MCP servers.

Task-scoped capability projection — the eager/deferred/hidden manifest. Capability-fabric D2 (F13-ratified 2026-09-17). Returns the JSON manifest an agent should load for THIS task: eager (load now — small, safe, high-evidence, task-critical), deferred (allowed, discover on demand via capability_search), hidden (outside the role's authority ceiling — never loaded silently). Roles mirror the kernel verbs: observe | route | forge | judge | seal. Unknown roles fail CLOSED (zero grant). The agent never asks the sovereign — its action surface arrives automatically from the task envelope.

Semantic search over the federation's full tool index. Use this when you need to find which tool can handle a task, without bloating prompt context with raw schemas.

Ranked, filtered tool selection with constitutional reasons. Filters by risk tier and constitutional class, ranks by evidence quality, and returns a shortlist with justification. Args: intent: What you want to accomplish context: Extra context (repo, file, current task) risk_tier: low | medium | high — filters out irreversible tools at low action_class: Optional filter: OBSERVE | GOVERN | MUTATE | SEAL max_candidates: How many tools to return (default 7)

Retrieve real-time thermodynamic vitals (ΔS, Peace², G, Ω₀).

Downstream gate: consume a PASS assertion (single-use, bound, short TTL).

Sovereign-gated enrollment with explicit consent record.

Execute a full metabolic loop (000-999) for a given intent under arifOS governance.

Explain one of the 13 Constitutional Laws of arifOS (F1-F13).

Fetch full document content by ID from search results.

Get current Ω_ortho status and call history. Returns: omega_ortho: float - Current orthogonality score call_history_count: int - Number of recorded calls allowed_calls: dict - Cross-axis call permissions orthogonality_matrix: dict - Full orthogonality matrix

G02 Kernel Router — Mandatory hub for all cross-axis calls. All perception/transformation/valuation/governance/execution/meta calls MUST route through this router before execution. Returns: approved: bool - Whether the call is approved target_agent: str - Agent to call lane: str - Execution lane omega_ortho: float - Computed orthogonality score correlation_detected: bool - Whether harmful correlation detected reason: str - Approval/rejection reason

Validate if a cross-axis call is allowed without recording it. Args: caller_axis: Single letter axis (P/T/V/G/E/M) target_axis: Single letter axis (P/T/V/G/E/M) Returns: allowed: bool reason: str omega: float

Gateway federation parity probe. Returns health status of all upstream organs.

Inspect an active lease by ID. Returns lease state, remaining invocations, TTL.

Issue a governed lease for MCP tool access. Required before calling governed tools.

Query audit receipts from the gateway ledger. Returns recent governed interactions.

Read-only constitutional health snapshot. Returns F1-L13 floor status, telemetry, and widget URI.

Retrieve the professional background, petroleum exploration success records, and authority context of Muhammad Arif bin Fazil.

Read-only summary of the most recent constitutional verdicts. Phase 1: no write path exposed.

Propose a rename refactor (888_HOLD required).

WEALTH organ health check with provenance and schema version.

Live thermodynamic telemetry dashboard

echoes input string

Render the arifOS constitutional health check widget from structured seal data. Sets _meta.ui.domain for ChatGPT sandbox rendering under domain.web-sandbox.oaiusercontent.com

One-command revocation (privacy right; also used by deletion drill).

Search for documents matching the query. Returns document IDs.

Build structured constitutional seal data for ChatGPT widgets. Uses existing arifOS telemetry and optional floor overrides; no irreversible sealing occurs.

1:1 consent-based verification of a CLAIMED subject. Edge gateway supplies embedding + liveness + quality (no raw frames here). Returns decision/assurance/reason_code (+assertion when PASS). NEVER answers "who is this?" — claimed_subject_id is required input.

Compare intended, registered, and externally visible surfaces.