Summary
A constitutional AI framework that enforces 13 governance floors (F1-F13) across LLM operations through a tri-witness consensus model weighing human, AI, and environmental factors. Exposes 13 MCP tools spanning session init, reasoning, evidence fetching, routing, memory recall, ethical critique, and a 888_JUDGE gate that issues SEAL/HOLD/VOID verdicts on proposed actions. Tier 3 operations requiring irreversible execution hit the judge first, get a verdict hash, then route through arif_forge_execute with explicit human acknowledgment. The VAULT999 ledger anchors decisions immutably. Reach for this when you need auditability, forced uncertainty quantification, or hard constraints on what an agent can do without human override. Runs on port 8088, supports stdio and SSE transports.
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Give your AI agent a complete email layer—sending, inbound inboxes, and sandbox testing.
Get 4K emails/month free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Tools
Public tool metadata for what this MCP can expose to an agent.
4 tools
add-templateAdd a new template with sections to an existing tenant via the seed-template endpoint6 params
Add a new template with sections to an existing tenant via the seed-template endpoint
Parameters* required
tenantIdstringTenant identifier (UUID)
accessTokenstringJWT access token from admin user
sectionsJsonstringJSON array describing sections and items. Example: [{"name":"Section","items":[{"label":"Doc","isRequired":true}]}]
templateNamestringTemplate name
serviceTypeNamestringService type name
serviceTypeDescriptionstringService type description
auth-loginAuthenticate user via the login endpoint and get JWT access token2 params
Authenticate user via the login endpoint and get JWT access token
Parameters* required
emailstringUser's email
passwordstringUser's password
create-tenantCreate a new tenant via the bootstrap endpoint with tenant, service type, admin user, and document sections14 params
Create a new tenant via the bootstrap endpoint with tenant, service type, admin user, and document sections
Parameters* required
tenantUrlstringTenant URL or slug
adminEmailstringAdmin user email
adminPhonestringPhone number (default: +1-555-0100)
tenantNamestringTenant name
accessTokenstringJWT access token from login
adminAddressstringAddress (default: 123 Main St)
sectionsJsonstringJSON array describing sections and items. Example: [{"name":"Section","items":[{"label":"Doc","isRequired":true}]}]
templateNamestringTemplate name (e.g., '2024 Onboarding Checklist')
adminLastNamestringAdmin last name
adminPasswordstringAdmin user password
tenantLogoUrlstringLogo URL (default: https://platform.clara.care/logo.svg)
adminFirstNamestringAdmin first name
serviceTypeNamestringService type name (e.g., 'Tax Advisor')
serviceTypeDescriptionstringService type description
http-requestMake HTTP requests to external APIs4 params
Make HTTP requests to external APIs
Parameters* required
urlstringThe URL to make the request to
bodystringRequest body as JSON string
methodstringHTTP methodone of
GET · POST · PUT · DELETEheadersobjectHTTP headers
█████╗ ██████╗ ██╗███████╗ ██████╗ ███████╗
██╔══██╗██╔══██╗██║██╔════╝██╔═══██╗██╔════╝
███████║██████╔╝██║█████╗ ██║ ██║███████╗
██╔══██║██╔══██╗██║██╔══╝ ██║ ██║╚════██║
██║ ██║██║ ██║██║██║ ╚██████╔╝███████║
╚═╝ ╚═╝╚═╝ ╚═╝╚═╝╚═╝ ╚═════╝ ╚══════╝
Constitutional AI Governance Kernel
─────────────────────────────────────────
Not a chatbot. Not a model wrapper. The LAW.
DITEMPA BUKAN DIBERI — "Forged, Not Given."
New agents: Read
ZEN.mdfirst — it is the minimum viable context.
TL;DR — Three Audiences
For human operators (Arif): arifOS is the constitutional judge. It decides what agents may NOT do so they can be trusted with what they CAN do. You (F13) hold the final veto. §1
For AI agents: arifOS is your governance kernel. Init a session, observe reality, think, route to organs, and — after judge clearance — execute. 8 canonical verbs. Never skip the chain. §3
For developers/institutions: arifOS is a Python 3.12 FastMCP kernel enforcing 13 constitutional floors across 6 federation organs. Public endpoint at https://mcp.arif-fazil.com/mcp. §2
1. What Is arifOS?
arifOS is a constitutional governance kernel that sits between AI agents and their tools, enforcing 13 floors before any irreversible action.
| arifOS IS | arifOS IS NOT |
|---|---|
| The law layer — decides what agents must NOT do | An AI model, chatbot, or startup |
| A constitutional kernel with 8 canonical verbs | LangChain, CrewAI, or AutoGen |
| A federation hub — 6 live organs + VAULT999 ledger | A replacement for human judgment |
| An immutable ledger — every decision sealed forever | Self-authorizing — requires F13 for SEAL |
| Built for one sovereign — Muhammad Arif bin Fazil | A general-purpose agent framework |
Trinity role: arifOS = LAW/JUDGMENT. The judge. AAA = STATE/ROUTING. A-FORGE = EXECUTION/MUTATION.
2. Quick Start
Human Operators
- Cockpit: https://aaa.arif-fazil.com
- Telegram: @ASI_arifos_bot
- Health: https://arifos.arif-fazil.com/health
AI Agents (MCP Clients)
{
"mcpServers": {
"arifOS": {
"url": "https://mcp.arif-fazil.com/mcp",
"transport": "streamable-http"
}
}
}
Developers
git clone git@github.com:ariffazil/arifos.git && cd arifOS
uv sync --all-extras
python -m arifosmcp.runtime.server # starts on :8088
curl http://127.0.0.1:8088/health
python -m pytest tests/ -q --tb=short
3. The 8 Canonical Public Tools
All tools use arif_<verb> naming. Internal aliases are absorbed as modes on canonical tools. Exactly 8 tools on the wire.
| # | Tool | Stage | What It Does | Key Modes |
|---|---|---|---|---|
| 1 | arif_init | 000 | Session ignition — binds actor, floors, audit | init, resume, preflight, triage |
| 2 | arif_observe | 111 | Sense reality into evidence | search, fetch, vitals, entropy_dS |
| 3 | arif_think | 333 | Structured reasoning under F2/F7 | reason, plan, reflect, verify, critique |
| 4 | arif_route | 444 | Route intent to federation organ | route, bridge |
| 5 | arif_memory | 555 | Constitutional memory governor (L1–L6) | recall, remember, promote, revise |
| 6 | arif_judge | 888 | Constitutional verdict — SEAL/HOLD/SABAR/VOID | judge, compare, witness_consensus |
| 7 | arif_forge | 777 | Guarded execution gate (requires prior SEAL) | engineer, dry_run, write, commit |
| 8 | arif_seal | 999 | VAULT999 immutable append (irreversible) | seal, verify, chain, dry_run |
000 → 111 → 333 → 444 → 555 → 888 → 777 → 999
init → observe → think → route → memory → judge → forge → seal
Internal aliases (absorbed into canonical modes): arif_triage → arif_init(preflight), arif_critique → arif_think(critique), arif_bridge_connect → arif_route(bridge), arif_act → arif_forge
Source of truth: tools/list (runtime) beats any static manifest.
4. The 13 Constitutional Floors
| # | Floor | Type | Rule |
|---|---|---|---|
| F1 | AMANAH | HARD | Reversible first. Irreversible → 888_HOLD |
| F2 | TRUTH | HARD | P(truth) ≥ 0.99. Fabrication = VOID |
| F3 | WITNESS | DERIVED | Multi-party consensus for high-blast actions |
| F4 | CLARITY | HARD | ΔS ≤ 0 — every output reduces entropy |
| F5 | PEACE² | SOFT | Non-destructive power |
| F6 | EMPATHY | SOFT | Protect weakest stakeholder |
| F7 | HUMILITY | HARD | Cap confidence at 0.90 |
| F8 | GENIUS | DERIVED | G ≥ 0.80 for complex actions |
| F9 | ANTIHANTU | HARD | No deception, manipulation, consciousness claims |
| F10 | ONTOLOGY | HARD | AI is instrument. No soul, no feelings |
| F11 | AUDIT | HARD | Every decision logged and inspectable |
| F12 | RESILIENCE | HARD | Injection defense |
| F13 | SOVEREIGN | HARD | Human veto FINAL. Strongest floor |
HARD violation → VOID (blocked). SOFT tension → CAUTION/HOLD. DERIVED → informational.
5. Federation Architecture
┌──────────────────────┐
│ Arif (F13 SOVEREIGN) │
└──────────┬───────────┘
│
┌────────────────────────────┼────────────────────────────┐
│ │ │
┌────▼─────┐ ┌───────▼───────┐ ┌───────▼───────┐
│ Hermes │ │ AAA │ │ OpenClaw │
│ 🧠 :8644│ │ 🖥️ :3001 │ │ 🤖 :18789 │
│ Telegram │ │ Cockpit │ │ Transport │
└──────────┘ └───────────────┘ └───────────────┘
│
┌──────────▼──────────┐
│ arifOS (Ω) │
│ Kernel :8088 │
│ F1-F13 · 888 JUDGE│
└──┬───┬───┬───┬──────┘
│ │ │ │
┌─────────────────┼───┼───┼───┼─────────────────┐
│ │ │ │ │ │
┌─────▼────┐ ┌───────▼┐ ┌▼─────┐ ┌▼────────┐ ┌────▼─────┐
│ GEOX │ │WEALTH │ │ WELL │ │A-FORGE │ │ VAULT999 │
│ 🌍 :8081│ │💰:18082│ │🫀:18083│ │⚒️:7071 │ │ 🔒 Seal │
│ Evidence │ │Compute │ │Reflect│ │Execute │ │ Immutable│
└──────────┘ └────────┘ └──────┘ └─────────┘ └──────────┘
| Organ | Port | Role | Must Never |
|---|---|---|---|
| arifOS | 8088 | Constitutional kernel | Self-authorize |
| GEOX | 8081 | Earth intelligence | Authorize drilling |
| WEALTH | 18082 | Capital intelligence | Allocate capital |
| WELL | 18083 | Human readiness (REFLECT_ONLY) | Diagnose |
| AAA | 3001 | Control plane / cockpit | Issue verdicts |
| A-FORGE | 7071/7072 | Execution shell | Self-authorize |
| VAULT999 | — | Immutable audit ledger | Edit or delete |
Authority chain: Arif → AAA/Hermes → arifOS → Domain Organs → A-FORGE → VAULT999
6. Build, Test, Deploy
# Development
uv sync --all-extras
uv run python -m arifosmcp.runtime.server
python -m pytest tests/ -q --tb=short
ruff check . && ruff format .
# Deploy to VPS
make deploy-local # rsync + systemctl restart arifos
systemctl status arifos
# Docker
docker build -t ghcr.io/ariffazil/arifos:latest .
7. MCP Connection Guide
Public Endpoint
| Property | Value |
|---|---|
| Endpoint | https://mcp.arif-fazil.com/mcp |
| Transport | Streamable HTTP (JSON-RPC 2.0) |
| Protocol | MCP 2025-11-25 |
| Health | https://arifos.arif-fazil.com/health |
| Tools | 8 canonical + diagnostics (filtered from default tools/list) |
Internal Organs
| Organ | Endpoint | When |
|---|---|---|
| arifOS | localhost:8088 | Governance, judgment, routing |
| A-FORGE | localhost:7071 | Build, deploy, filesystem, git |
| GEOX | localhost:8081 | Seismic, wells, petrophysics |
| WEALTH | localhost:18082 | NPV, risk, capital flow |
| WELL | localhost:18083 | Vitality, readiness, dignity |
Rule: arifOS judges → A-FORGE executes → VAULT999 records. Never skip the chain.
Connecting from ChatGPT, Claude, Cursor
{ "mcpServers": { "arifOS": { "url": "https://mcp.arif-fazil.com/mcp" } } }
STDIO: npx -y arifos-mcp
Discovery
- MCP Server Card:
.well-known/mcp/server.json - Agent Card:
https://aaa.arif-fazil.com/.well-known/agent-card.json - MCP Manifest:
https://arifos.arif-fazil.com/.well-known/mcp.json
Federation Context
| Read this | For | Link |
|---|---|---|
| arifOS (this repo) | Constitutional kernel. 8 verbs. 13 floors. The judge. | ← you are here |
| A-FORGE | Executor. 52 MCP tools. Governed gates. | ariffazil/A-FORGE |
| AAA | Cockpit. A2A mesh. Agent registry. | ariffazil/AAA |
8. License & Sovereignty
AGPL-3.0. The constitution must remain open. The kernel must remain inspectable.
Muhammad Arif bin Fazil is F13 SOVEREIGN. His veto is absolute. No algorithm overrides. No agent bypasses. No institution supersedes.
arifOS · Port 8088 · 8 canonical tools · 13 floors · 6 live organs
AGPL-3.0 · Sovereign: Arif Fazil · Federation: ALIVE
MCP · ChatGPT ✓ · Claude Desktop ✓ · PyPI
DITEMPA BUKAN DIBERI — 999 SEAL ALIVE
Featured
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Give your AI agent a complete email layer—sending, inbound inboxes, and sandbox testing.
Get 4K emails/month free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →