000 Init · Kernel Session
arif_initKERNEL 000 · Ignite a governed kernel session: binds actor identity, constitutional floors F1–F13, and the audit chain. Returns the session_id + session_token that every other arif_* verb requires. Use mode=preflight to inspect an existing session without re-igniting, mode=resume to continue one. Modes: init, preflight, resume, validate, canary, triage, epoch_open, epoch_seal, light, opt_out.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out. | init |
| nonce | No | One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call. | |
| intent | No | Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit. | |
| context | No | JSON object of background facts to bind into the session, e.g. {"repo": "arifOS", "task": "fix-tests"}. | |
| payload | No | Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects. | |
| tooling | No | JSON list of the tools you can use, e.g. ["Bash", "Read"] — lets the kernel scope what it will permit you. | |
| verbose | No | Legacy on/off verbosity ('true'/'false'); prefer verbosity. | |
| actor_id | No | Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you. | |
| epoch_id | No | Optional id grouping related sessions into one long-running epoch, e.g. '2026-H2-ops'. | |
| evidence | No | JSON list of facts you have already verified, e.g. [{"fact": "pytest 299 passed", "source": "CI run"}] — carried into the session record. | |
| trace_id | No | Correlation id of your choosing (e.g. 'req-8f3a') — lets you find this call later across kernel logs and organ systems. | |
| _envelope | No | Reserved for the transport layer — never fill this in. | |
| verbosity | No | How detailed responses should be: 'minimal' (default), 'standard', or 'full'. | minimal |
| session_id | No | Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session. | |
| agent_policy | No | JSON constraints on your own behavior, e.g. {"autonomy": "reversible_only", "forbidden": ["git push"]}. | |
| auth_context | No | JSON carrying external authentication material, e.g. {"token_class": "bearer", "issuer": "github"} — used for gating. | |
| counterparty | No | JSON describing the other party in a two-agent exchange, e.g. {"agent_id": "hermes/1", "role": "verifier"}. | |
| sovereign_id | No | Identifier of the human principal you act for, when acting under their explicit delegation. | |
| session_token | No | Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated. | |
| actor_signature | No | Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key. | |
| caller_actor_id | No | If you are calling on behalf of another agent, that agent's id — builds a delegation chain for the audit log. | |
| delegation_mode | No | Contract governing delegated calls, e.g. 'read_only' or 'governed'. | |
| idempotency_key | No | Client-chosen key (e.g. 'job-42-attempt-1'). Retrying with the same key will not repeat the effect — safe retries on flaky networks. | |
| ack_irreversible | No | Set true to acknowledge that session records are permanent audit artifacts and cannot be deleted afterwards. | |
| executor_actor_id | No | Id of the agent that will actually carry out work under this session's permissions, if different from actor_id. | |
| declared_model_key | No | The model you run on, e.g. 'zai-coding-plan/glm-5.3'. Informational only — the kernel records but never trusts it. | |
| client_capabilities | No | JSON declaring what your client supports, e.g. {"transports": ["http"], "protocol": "2025-11-25"}. | |
| requested_authority | No | The highest class of action you may take: 'OBSERVE_ONLY' (read-only, default) or a higher governed class granted by your policy. | OBSERVE_ONLY |
| previous_session_hash | No | Hash string returned when your previous session closed; supplying it chains this session to that one, proving continuity. |