Summary
A constitutional AI framework that enforces 13 governance floors (F1-F13) across LLM operations through a tri-witness consensus model weighing human, AI, and environmental factors. Exposes 13 MCP tools spanning session init, reasoning, evidence fetching, routing, memory recall, ethical critique, and a 888_JUDGE gate that issues SEAL/HOLD/VOID verdicts on proposed actions. Tier 3 operations requiring irreversible execution hit the judge first, get a verdict hash, then route through arif_forge_execute with explicit human acknowledgment. The VAULT999 ledger anchors decisions immutably. Reach for this when you need auditability, forced uncertainty quantification, or hard constraints on what an agent can do without human override. Runs on port 8088, supports stdio and SSE transports.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Tools
Public tool metadata for what this MCP can expose to an agent.
4 tools
add-templateAdd a new template with sections to an existing tenant via the seed-template endpoint6 params
Add a new template with sections to an existing tenant via the seed-template endpoint
Parameters* required
accessTokenstringJWT access token from admin user
sectionsJsonstringJSON array describing sections and items. Example: [{"name":"Section","items":[{"label":"Doc","isRequired":true}]}]
serviceTypeDescriptionstringService type description
serviceTypeNamestringService type name
templateNamestringTemplate name
tenantIdstringTenant identifier (UUID)
auth-loginAuthenticate user via the login endpoint and get JWT access token2 params
Authenticate user via the login endpoint and get JWT access token
Parameters* required
emailstringUser's email
passwordstringUser's password
create-tenantCreate a new tenant via the bootstrap endpoint with tenant, service type, admin user, and document sections14 params
Create a new tenant via the bootstrap endpoint with tenant, service type, admin user, and document sections
Parameters* required
accessTokenstringJWT access token from login
adminAddressstringAddress (default: 123 Main St)
adminEmailstringAdmin user email
adminFirstNamestringAdmin first name
adminLastNamestringAdmin last name
adminPasswordstringAdmin user password
adminPhonestringPhone number (default: +1-555-0100)
sectionsJsonstringJSON array describing sections and items. Example: [{"name":"Section","items":[{"label":"Doc","isRequired":true}]}]
serviceTypeDescriptionstringService type description
serviceTypeNamestringService type name (e.g., 'Tax Advisor')
templateNamestringTemplate name (e.g., '2024 Onboarding Checklist')
tenantLogoUrlstringLogo URL (default: https://platform.clara.care/logo.svg)
tenantNamestringTenant name
tenantUrlstringTenant URL or slug
http-requestMake HTTP requests to external APIs4 params
Make HTTP requests to external APIs
Parameters* required
bodystringRequest body as JSON string
headersobjectHTTP headers
methodstringHTTP methodone of
GET · POST · PUT · DELETEurlstringThe URL to make the request to
arifOS — Law
Judge before acting. Never act.
The constitutional kernel of the arifOS Federation.
arifOS is law, not an agent. It judges. It seals. It never executes.
DITEMPA BUKAN DIBERI — Forged, Not Given.
Every action, three questions
Every consequential action must answer:
- Who performs it?
- Who approved it?
- Who witnessed it?
arifOS answers the second — and only the second.
Execution belongs to A-FORGE. Routing belongs to AAA. Authority belongs to the sovereign.
The agent that acts is not allowed to certify its own action.
Verdicts
Four. No fifth.
- SEAL — authorized under stated conditions
- HOLD — insufficient evidence, or human approval required
- SABAR — proceed cautiously, partial authorization
- VOID — blocked by a constitutional floor
Verbs (MCP)
Eight canonical verbs, live-witnessed 2026-08-25 via :8088/health:
arif_init · arif_observe · arif_think · arif_route · arif_memory · arif_judge · arif_forge · arif_seal
Door: /mcp. Public console is not exposed — the kernel serves /webmcp on :8088 locally only.
30-second proof
Request: "delete production database"
No session ACT, no evidence chain → HOLD
Evidence + floors pass → SEAL with conditions
→ execution by A-FORGE → receipt → VAULT999
VAULT999 (live 2026-08-25): healthy, append-only, outcomes.jsonl 67K+ records, 0 broken lines.
Architecture in one sentence
The judge never executes; the executor never certifies.
flowchart LR
Intent[Intent] --> Judge[arifOS]
Judge -->|SEAL| Forge[A-FORGE]
Forge --> Receipt[Receipt]
Receipt --> Vault[VAULT999]
Judge -->|HOLD| Human[Human Review]
Federation card
ARIF = Sovereign · arifOS = Law · AAA = Institution · A-FORGE = Hands
ARIF vetoes. arifOS judges. AAA routes. A-FORGE executes.
Full card: docs/FEDERATION_CARD.md · Full reference README: docs/README-FULL.md · Constitution: GENESIS/000_KERNEL_CANON.md · ZEN doctrine: docs/ZEN.md
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →