Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "properties": {
+    "actor_id": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "delta_S": {
+      "anyOf": [
+        {
+          "type": "number"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "meta": {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    "nine_signal": {
+      "additionalProperties": true,
+      "properties": {
+        "delta": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        },
+        "omega": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        },
+        "overall": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "psi": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        }
+      },
+      "type": "object"
+    },
+    "output_policy": {
+      "type": "string"
+    },
+    "philosophical_anchor": {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    "reasons": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "result": {
+      "additionalProperties": true,
+      "properties": {
+        "allowed_next_tools": {
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "constitution_hash": {
+          "type": "string"
+        },
+        "invariants_hash": {
+          "type": "string"
+        },
+        "nine_signal": {
+          "additionalProperties": true,
+          "type": "object"
+        },
+        "omega_0": {
+          "type": "number"
+        },
+        "reasons": {
+          "anyOf": [
+            {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "session_id": {
+          "type": "string"
+        },
+        "verdict": {
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "session_id": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "stage_progression": {
+      "anyOf": [
+        {
+          "type": "null"
+        },
+        {
+          "properties": {
+            "current_stage": {
+              "type": "string"
+            },
+            "next_prompt": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "next_stage": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "next_tool": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            }
+          },
+          "type": "object"
+        }
+      ]
+    },
+    "status": {
+      "type": "string"
+    },
+    "timestamp": {
+      "type": "string"
+    },
+    "tool": {
+      "const": "arif_init"
+    }
+  },
+  "required": [
+    "status",
+    "tool",
+    "result",
+    "meta",
+    "timestamp",
+    "nine_signal",
+    "reasons"
+  ],
+  "type": "object"
+}

Removed value: -[
-  {
-    "type": "string"
-  },
-  {
-    "type": "null"
-  }
-]

Removed value: -null

Previous value: -"Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit."New value: +"Required. Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. A session without a stated purpose is refused (F1 Amanah). Recorded for audit."

Added value: +1

Added value: +"string"

Added value: +[
+  "intent"
+]

Removed value: -{
-  "default": null,
-  "description": "Reserved for the transport layer — never fill this in.",
-  "title": "Envelope"
-}

Previous value: -[
-  {
-    "additionalProperties": true,
-    "type": "object"
-  },
-  {
-    "type": "null"
-  }
-]New value: +[
+  {
+    "additionalProperties": true,
+    "type": "object"
+  },
+  {
+    "items": {
+      "additionalProperties": {
+        "type": "string"
+      },
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "type": "null"
+  }
+]

Previous value: -"JSON list of facts you have already verified, e.g. [{\"fact\": \"pytest 299 passed\", \"source\": \"CI run\"}] — carried into the session record."New value: +"JSON list of facts you have already verified, e.g. [{\"fact\": \"pytest 299 passed\", \"source\": \"CI run\"}] — carried into the session record. Also accepts a single object."

Previous value: -[
-  {
-    "additionalProperties": true,
-    "type": "object"
-  },
-  {
-    "type": "null"
-  }
-]New value: +[
+  {
+    "additionalProperties": true,
+    "type": "object"
+  },
+  {
+    "items": {
+      "type": "string"
+    },
+    "type": "array"
+  },
+  {
+    "type": "null"
+  }
+]

Previous value: -"JSON list of the tools you can use, e.g. [\"Bash\", \"Read\"] — lets the kernel scope what it will permit you."New value: +"JSON list of the tools you can use, e.g. [\"Bash\", \"Read\"] — lets the kernel scope what it will permit you. Also accepts an object like {\"requested_capabilities\": [...]}."

Added value: +"Reserved for the transport layer — never fill this in."

Added value: +"Set true to acknowledge that session records are permanent audit artifacts and cannot be deleted afterwards."

Added value: +"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."

Added value: +"Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key."

Added value: +"JSON constraints on your own behavior, e.g. {\"autonomy\": \"reversible_only\", \"forbidden\": [\"git push\"]}."

Added value: +"JSON carrying external authentication material, e.g. {\"token_class\": \"bearer\", \"issuer\": \"github\"} — used for gating."

Added value: +"If you are calling on behalf of another agent, that agent's id — builds a delegation chain for the audit log."

Added value: +"JSON declaring what your client supports, e.g. {\"transports\": [\"http\"], \"protocol\": \"2025-11-25\"}."

Added value: +"JSON object of background facts to bind into the session, e.g. {\"repo\": \"arifOS\", \"task\": \"fix-tests\"}."

Added value: +"JSON describing the other party in a two-agent exchange, e.g. {\"agent_id\": \"hermes/1\", \"role\": \"verifier\"}."

Added value: +"The model you run on, e.g. 'zai-coding-plan/glm-5.3'. Informational only — the kernel records but never trusts it."

Added value: +"Contract governing delegated calls, e.g. 'read_only' or 'governed'."

Added value: +"Optional id grouping related sessions into one long-running epoch, e.g. '2026-H2-ops'."

Added value: +"JSON list of facts you have already verified, e.g. [{\"fact\": \"pytest 299 passed\", \"source\": \"CI run\"}] — carried into the session record."

Added value: +"Id of the agent that will actually carry out work under this session's permissions, if different from actor_id."

Added value: +"Client-chosen key (e.g. 'job-42-attempt-1'). Retrying with the same key will not repeat the effect — safe retries on flaky networks."

Added value: +"Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit."

Added value: +"What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out."

Added value: +"One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call."

Added value: +"Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects."

Added value: +"Hash string returned when your previous session closed; supplying it chains this session to that one, proving continuity."

Added value: +"The highest class of action you may take: 'OBSERVE_ONLY' (read-only, default) or a higher governed class granted by your policy."

Added value: +"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."

Added value: +"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."

Added value: +"Identifier of the human principal you act for, when acting under their explicit delegation."

Added value: +"JSON list of the tools you can use, e.g. [\"Bash\", \"Read\"] — lets the kernel scope what it will permit you."

Added value: +"Correlation id of your choosing (e.g. 'req-8f3a') — lets you find this call later across kernel logs and organ systems."

Added value: +"Legacy on/off verbosity ('true'/'false'); prefer verbosity."

Added value: +"How detailed responses should be: 'minimal' (default), 'standard', or 'full'."

Removed value: -"Reserved for the transport layer — never fill this in."

Removed value: -"Set true to acknowledge that session records are permanent audit artifacts and cannot be deleted afterwards."

Removed value: -"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."

Removed value: -"Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key."

Removed value: -"JSON constraints on your own behavior, e.g. {\"autonomy\": \"reversible_only\", \"forbidden\": [\"git push\"]}."

Removed value: -"JSON carrying external authentication material, e.g. {\"token_class\": \"bearer\", \"issuer\": \"github\"} — used for gating."

Removed value: -"If you are calling on behalf of another agent, that agent's id — builds a delegation chain for the audit log."

Removed value: -"JSON declaring what your client supports, e.g. {\"transports\": [\"http\"], \"protocol\": \"2025-11-25\"}."

Removed value: -"JSON object of background facts to bind into the session, e.g. {\"repo\": \"arifOS\", \"task\": \"fix-tests\"}."

Removed value: -"JSON describing the other party in a two-agent exchange, e.g. {\"agent_id\": \"hermes/1\", \"role\": \"verifier\"}."

Removed value: -"The model you run on, e.g. 'zai-coding-plan/glm-5.3'. Informational only — the kernel records but never trusts it."

Removed value: -"Contract governing delegated calls, e.g. 'read_only' or 'governed'."

Removed value: -"Optional id grouping related sessions into one long-running epoch, e.g. '2026-H2-ops'."

Removed value: -"JSON list of facts you have already verified, e.g. [{\"fact\": \"pytest 299 passed\", \"source\": \"CI run\"}] — carried into the session record."

Removed value: -"Id of the agent that will actually carry out work under this session's permissions, if different from actor_id."

Removed value: -"Client-chosen key (e.g. 'job-42-attempt-1'). Retrying with the same key will not repeat the effect — safe retries on flaky networks."

Removed value: -"Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit."

Removed value: -"What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out."

Removed value: -"One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call."

Removed value: -"Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects."

Removed value: -"Hash string returned when your previous session closed; supplying it chains this session to that one, proving continuity."

Removed value: -"The highest class of action you may take: 'OBSERVE_ONLY' (read-only, default) or a higher governed class granted by your policy."

Removed value: -"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."

Removed value: -"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."

Removed value: -"Identifier of the human principal you act for, when acting under their explicit delegation."

Removed value: -"JSON list of the tools you can use, e.g. [\"Bash\", \"Read\"] — lets the kernel scope what it will permit you."

Removed value: -"Correlation id of your choosing (e.g. 'req-8f3a') — lets you find this call later across kernel logs and organ systems."

Removed value: -"Legacy on/off verbosity ('true'/'false'); prefer verbosity."

Removed value: -"How detailed responses should be: 'minimal' (default), 'standard', or 'full'."

Added value: +"Reserved for the transport layer — never fill this in."

Added value: +"Set true to acknowledge that session records are permanent audit artifacts and cannot be deleted afterwards."

Added value: +"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."

Added value: +"Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key."

Added value: +"JSON constraints on your own behavior, e.g. {\"autonomy\": \"reversible_only\", \"forbidden\": [\"git push\"]}."

Added value: +"JSON carrying external authentication material, e.g. {\"token_class\": \"bearer\", \"issuer\": \"github\"} — used for gating."

Added value: +"If you are calling on behalf of another agent, that agent's id — builds a delegation chain for the audit log."

Added value: +"JSON declaring what your client supports, e.g. {\"transports\": [\"http\"], \"protocol\": \"2025-11-25\"}."

Added value: +"JSON object of background facts to bind into the session, e.g. {\"repo\": \"arifOS\", \"task\": \"fix-tests\"}."

Added value: +"JSON describing the other party in a two-agent exchange, e.g. {\"agent_id\": \"hermes/1\", \"role\": \"verifier\"}."

Added value: +"The model you run on, e.g. 'zai-coding-plan/glm-5.3'. Informational only — the kernel records but never trusts it."

Added value: +"Contract governing delegated calls, e.g. 'read_only' or 'governed'."

Added value: +"Optional id grouping related sessions into one long-running epoch, e.g. '2026-H2-ops'."

Added value: +"JSON list of facts you have already verified, e.g. [{\"fact\": \"pytest 299 passed\", \"source\": \"CI run\"}] — carried into the session record."

Added value: +"Id of the agent that will actually carry out work under this session's permissions, if different from actor_id."

Added value: +"Client-chosen key (e.g. 'job-42-attempt-1'). Retrying with the same key will not repeat the effect — safe retries on flaky networks."

Added value: +"Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit."

Added value: +"What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out."

Added value: +"One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call."

Added value: +"Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects."

Added value: +"Hash string returned when your previous session closed; supplying it chains this session to that one, proving continuity."

Added value: +"The highest class of action you may take: 'OBSERVE_ONLY' (read-only, default) or a higher governed class granted by your policy."

Added value: +"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."

Added value: +"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."

Added value: +"Identifier of the human principal you act for, when acting under their explicit delegation."

Added value: +"JSON list of the tools you can use, e.g. [\"Bash\", \"Read\"] — lets the kernel scope what it will permit you."

Added value: +"Correlation id of your choosing (e.g. 'req-8f3a') — lets you find this call later across kernel logs and organ systems."

Added value: +"Legacy on/off verbosity ('true'/'false'); prefer verbosity."

Added value: +"How detailed responses should be: 'minimal' (default), 'standard', or 'full'."

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null
+}

Previous value: -"standard"New value: +"minimal"

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null
+}

Added value: +{
+  "default": "standard",
+  "enum": [
+    "minimal",
+    "standard",
+    "full"
+  ],
+  "type": "string"
+}

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Previous value: -[
-  "init",
-  "light",
-  "resume",
-  "validate",
-  "epoch_open",
-  "epoch_seal",
-  "opt_out",
-  "opt_out_profiling"
-]New value: +[
+  "init",
+  "light",
+  "resume",
+  "validate",
+  "canary",
+  "preflight",
+  "triage",
+  "epoch_open",
+  "epoch_seal",
+  "opt_out",
+  "opt_out_profiling"
+]

Added value: +true

Removed value: -{
-  "_nine_signal_compliant": {
-    "description": "Internal compliance flag",
-    "type": "boolean"
-  },
-  "_violations": {
-    "description": "Non-compliance audit trail",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "actor_id": {
-    "description": "Sovereign or agent actor ID",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "delta_S": {
-    "description": "Thermodynamic entropy change",
-    "type": "number"
-  },
-  "meta": {
-    "description": "Metadata including actor_id, mode, circuit",
-    "type": "object"
-  },
-  "nine_signal": {
-    "description": "F2 addendum nine-signal block",
-    "type": "object"
-  },
-  "output_policy": {
-    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
-    "type": "string"
-  },
-  "reasons": {
-    "description": "Human-readable justification list",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "result": {
-    "description": "Tool-specific payload",
-    "type": "object"
-  },
-  "session_id": {
-    "description": "Active session identifier",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "stage_progression": {
-    "description": "Next stage auto-chain hint",
-    "type": [
-      "object",
-      "null"
-    ]
-  },
-  "status": {
-    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
-    "type": "string"
-  },
-  "timestamp": {
-    "description": "ISO-8601 timestamp",
-    "type": "string"
-  },
-  "tool": {
-    "description": "Canonical tool name that produced this response",
-    "type": "string"
-  },
-  "verdict": {
-    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
-    "type": "string"
-  }
-}

Removed value: -[
-  "status",
-  "tool",
-  "verdict",
-  "result",
-  "nine_signal",
-  "reasons"
-]