The constitutional kernel of the arifOS Federation.
arifOS is law, not an agent. It judges. It seals. It never executes.
DITEMPA BUKAN DIBERI — Forged, Not Given.
Every consequential action must answer:
- Who performs it?
- Who approved it?
- Who witnessed it?
arifOS answers the second — and only the second.
Execution belongs to A-FORGE. Routing belongs to AAA. Authority belongs to the sovereign.
The agent that acts is not allowed to certify its own action.
Four. No fifth.
- SEAL — authorized under stated conditions
- HOLD — insufficient evidence, or human approval required
- SABAR — proceed cautiously, partial authorization
- VOID — blocked by a constitutional floor
Eight canonical verbs, live-witnessed 2026-08-25 via :8088/health:
arif_init · arif_observe · arif_think · arif_route · arif_memory · arif_judge · arif_forge · arif_seal
Door: /mcp. Public console is not exposed — the kernel serves /webmcp on :8088 locally only.
Request: "delete production database"
No session ACT, no evidence chain → HOLD
Evidence + floors pass → SEAL with conditions
→ execution by A-FORGE → receipt → VAULT999
VAULT999 (live 2026-08-25): healthy, append-only, outcomes.jsonl 67K+ records, 0 broken lines.
The judge never executes; the executor never certifies.
flowchart LR
Intent[Intent] --> Judge[arifOS]
Judge -->|SEAL| Forge[A-FORGE]
Forge --> Receipt[Receipt]
Receipt --> Vault[VAULT999]
Judge -->|HOLD| Human[Human Review]
ARIF = Sovereign · arifOS = Law · AAA = Institution · A-FORGE = Hands
ARIF vetoes. arifOS judges. AAA routes. A-FORGE executes.
Full card: docs/FEDERATION_CARD.md · Full reference README: docs/README-FULL.md · Constitution: GENESIS/000_KERNEL_CANON.md · ZEN doctrine: docs/ZEN.md