arifOS — Constitutional AI Kernel

444 Route · Intent→Organ

arif_route

Read-onlyIdempotent

Classify intent and route tasks to domain organs (GEOX for Earth science, WEALTH for capital markets, WELL for human vitality, A-FORGE for execution). Requires valid session credentials. Outputs: organ dispatch envelope.

Input Schema

Name	Required	Description	Default
`mode`	No	'route' (default) — classify intent and recommend the target organ; 'triage' — rank a batch of intents; 'delegate' — prepare an A2A handoff; 'status' — surface organ state; 'kernel' — kernel-level status; 'metabolize' — feed routing outcomes to arifFlow. Routing only recommends — execution is arif_forge after a SEAL verdict.	route
`task`	No	Alias for intent (backward compat).
`organ`	No	Optional explicit organ override. If provided, intent matching is skipped and this organ is used directly.
`intent`	No	Natural-language description of what the user wants. e.g. "interpret this seismic section", "assess portfolio risk"
`actor_id`	No	Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you.
`arguments`	No	Arguments to pass to organ_tool.
`mission_id`	No	Explicit human-cockpit mission binding (investigate\|interpret\| decide\|build\|monitor\|remember). When set, skips keyword classification and binds the six-mission plan. Preferred over free-text when the agent already knows the mission.
`organ_tool`	No	The tool name on the target organ to call. If absent, returns routing decision only (no bridge call).
`session_id`	No	Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session.
`session_token`	No	Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.
`contract_c_kwargs`	No	Extra keyword arguments passed through to the organ tool call, as a JSON object.

Output Schema

Name	Required	Description	Default
`meta`	Yes
`tool`	Yes
`result`	Yes
`status`	Yes
`delta_S`	No
`reasons`	Yes
`actor_id`	No
`timestamp`	Yes
`session_id`	No
`nine_signal`	Yes
`output_policy`	No
`stage_progression`	No
`philosophical_anchor`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 18, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "properties": {
+    "actor_id": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "delta_S": {
+      "anyOf": [
+        {
+          "type": "number"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "meta": {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    "nine_signal": {
+      "additionalProperties": true,
+      "properties": {
+        "delta": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        },
+        "omega": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        },
+        "overall": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "psi": {
+          "properties": {
+            "en": {
+              "type": "string"
+            },
+            "plane": {
+              "type": "string"
+            },
+            "state": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "state",
+            "en"
+          ],
+          "type": "object"
+        }
+      },
+      "type": "object"
+    },
+    "output_policy": {
+      "type": "string"
+    },
+    "philosophical_anchor": {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    "reasons": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "result": {
+      "additionalProperties": true,
+      "properties": {},
+      "type": "object"
+    },
+    "session_id": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "stage_progression": {
+      "anyOf": [
+        {
+          "type": "null"
+        },
+        {
+          "properties": {
+            "current_stage": {
+              "type": "string"
+            },
+            "next_prompt": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "next_stage": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "next_tool": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            }
+          },
+          "type": "object"
+        }
+      ]
+    },
+    "status": {
+      "type": "string"
+    },
+    "timestamp": {
+      "type": "string"
+    },
+    "tool": {
+      "const": "arif_route"
+    }
+  },
+  "required": [
+    "status",
+    "tool",
+    "result",
+    "meta",
+    "timestamp",
+    "nine_signal",
+    "reasons"
+  ],
+  "type": "object"
+}

Changed1 schema field changedOct 17, 2026

addedInput schema / properties / mode / description

Added value: +"'route' (default) — classify intent and recommend the target organ; 'triage' — rank a batch of intents; 'delegate' — prepare an A2A handoff; 'status' — surface organ state; 'kernel' — kernel-level status; 'metabolize' — feed routing outcomes to arifFlow. Routing only recommends — execution is arif_forge after a SEAL verdict."

Changed1 schema field changedOct 14, 2026

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "description": "Reserved for the transport layer — never fill this in.",
-  "title": "Envelope"
-}

Changed5 schema fields changedOct 1, 2026

addedInput schema / properties / _envelope / description

Added value: +"Reserved for the transport layer — never fill this in."

changedInput schema / properties / actor_id / description

Previous value: -"Calling actor."New value: +"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."

addedInput schema / properties / contract_c_kwargs / description

Added value: +"Extra keyword arguments passed through to the organ tool call, as a JSON object."

changedInput schema / properties / session_id / description

Previous value: -"Governing session."New value: +"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."

changedInput schema / properties / session_token / description

Previous value: -"SCT from arif_init (ChatGPT continuity)."New value: +"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."

Changed5 schema fields changedOct 1, 2026

removedInput schema / properties / _envelope / description

Removed value: -"Reserved for the transport layer — never fill this in."

changedInput schema / properties / actor_id / description

Previous value: -"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."New value: +"Calling actor."

removedInput schema / properties / contract_c_kwargs / description

Removed value: -"Extra keyword arguments passed through to the organ tool call, as a JSON object."

changedInput schema / properties / session_id / description

Previous value: -"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."New value: +"Governing session."

changedInput schema / properties / session_token / description

Previous value: -"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."New value: +"SCT from arif_init (ChatGPT continuity)."

Changed1 schema field changedSep 27, 2026

addedInput schema / properties / mode

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": "route"
+}

Changed5 schema fields changedSep 25, 2026

addedInput schema / properties / _envelope / description

Added value: +"Reserved for the transport layer — never fill this in."

changedInput schema / properties / actor_id / description

Previous value: -"Calling actor."New value: +"Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."

addedInput schema / properties / contract_c_kwargs / description

Added value: +"Extra keyword arguments passed through to the organ tool call, as a JSON object."

changedInput schema / properties / session_id / description

Previous value: -"Governing session."New value: +"Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."

changedInput schema / properties / session_token / description

Previous value: -"SCT from arif_init (ChatGPT continuity)."New value: +"Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated."

Changed1 schema field changedAug 4, 2026

removedInput schema / properties / mode

Removed value: -{
-  "default": "route",
-  "description": "Operation mode: route, bridge",
-  "enum": [
-    "route",
-    "bridge"
-  ],
-  "type": "string"
-}

Changed5 schema fields changedJul 30, 2026

addedInput schema / properties / intent / anyOf

Added value: +[
+  {
+    "type": "string"
+  },
+  {
+    "type": "null"
+  }
+]

addedInput schema / properties / intent / default
```
Added value: +null
```
removedInput schema / properties / intent / type
```
Removed value: -"string"
```

addedInput schema / properties / mission_id

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Explicit human-cockpit mission binding (investigate|interpret|\n          decide|build|monitor|remember). When set, skips keyword\n          classification and binds the six-mission plan. Preferred\n          over free-text when the agent already knows the mission."
+}

removedInput schema / required
```
Removed value: -[
-  "intent"
-]
```

Changed1 schema field changedJul 19, 2026

addedInput schema / properties / mode

Added value: +{
+  "default": "route",
+  "description": "Operation mode: route, bridge",
+  "enum": [
+    "route",
+    "bridge"
+  ],
+  "type": "string"
+}

Changed2 schema fields changedJul 17, 2026

addedInput schema / properties / contract_c_kwargs

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null
+}

addedInput schema / properties / session_token

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "SCT from arif_init (ChatGPT continuity)."
+}

Changed1 schema field changedJul 12, 2026

changedInput schema / properties / arguments / anyOf

Previous value: -[
-  {
-    "additionalProperties": true,
-    "type": "object"
-  },
-  {
-    "type": "null"
-  }
-]New value: +[
+  {
+    "additionalProperties": true,
+    "type": "object"
+  },
+  {
+    "type": "string"
+  },
+  {
+    "type": "null"
+  }
+]

Changed1 schema field changedJul 4, 2026

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Changed3 schema fields changedJul 3, 2026

addedOutput schema / additionalProperties
```
Added value: +true
```

removedOutput schema / properties

Removed value: -{
-  "_nine_signal_compliant": {
-    "description": "Internal compliance flag",
-    "type": "boolean"
-  },
-  "_violations": {
-    "description": "Non-compliance audit trail",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "actor_id": {
-    "description": "Sovereign or agent actor ID",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "delta_S": {
-    "description": "Thermodynamic entropy change",
-    "type": "number"
-  },
-  "meta": {
-    "description": "Metadata including actor_id, mode, circuit",
-    "type": "object"
-  },
-  "nine_signal": {
-    "description": "F2 addendum nine-signal block",
-    "type": "object"
-  },
-  "output_policy": {
-    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
-    "type": "string"
-  },
-  "reasons": {
-    "description": "Human-readable justification list",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "result": {
-    "description": "Tool-specific payload",
-    "type": "object"
-  },
-  "session_id": {
-    "description": "Active session identifier",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "stage_progression": {
-    "description": "Next stage auto-chain hint",
-    "type": [
-      "object",
-      "null"
-    ]
-  },
-  "status": {
-    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
-    "type": "string"
-  },
-  "timestamp": {
-    "description": "ISO-8601 timestamp",
-    "type": "string"
-  },
-  "tool": {
-    "description": "Canonical tool name that produced this response",
-    "type": "string"
-  },
-  "verdict": {
-    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
-    "type": "string"
-  }
-}

removedOutput schema / required

Removed value: -[
-  "status",
-  "tool",
-  "verdict",
-  "result",
-  "nine_signal",
-  "reasons"
-]

First observedJun 30, 2026

TDQS

B3.4/5.0

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds real context beyond that — 'Requires valid session credentials' and the dispatch-envelope output — but says nothing about failure modes when credentials are missing or what happens if organ_tool is absent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with the action and organ list front-loaded and the credential prerequisite following. Nothing is wasted, though the organ acronyms are packed inline without explanation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 11 parameters, six modes, and an output schema, the description covers only the surface. Since an output schema exists it needn't explain return values, but the mode taxonomy and the recommend-vs-execute boundary are essential context that only the schema supplies.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all 11 parameters, including the six routing modes, are fully documented in the schema. The description adds no parameter-level meaning beyond what the schema already provides, which is the baseline-3 case.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Classify intent and route tasks') and resource (domain organs: GEOX, WEALTH, WELL, A-FORGE), so the core action is unambiguous. It does not, however, distinguish this from close siblings such as arif_delegate (handoff) or arif_forge (execution), leaving that routing logic to the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by naming the organs and the credential requirement, but it never says when to pick this over arif_delegate, arif_think, or arif_forge. The critical 'routing only recommends — execution is arif_forge after a SEAL verdict' guidance lives in the schema's mode parameter, not in the description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All arifOS — Constitutional AI Kernel tools Inspect

Try in Browser

Context All Your Agents Can ShareAgents share what they learn, hand off work, and hold it when you switch models. Start with 5 GB free.fulcradynamics.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

444 Route · Intent→Organ

Input Schema

Output Schema

Schema Changelog

TDQS

Glama MCP Gateway

Resources