Skip to main content
Glama

arifOS — Constitutional AI Kernel

999 Seal · VAULT999

arif_seal
Destructive

KERNEL 999 · VAULT999 immutable append — irreversible civilizational memory sealing.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNoseal
nonceNo
payloadNo
actor_idNo
_envelopeNo
session_idNo
drift_eventsNo
seal_purposeNo
witness_typeNoai
session_tokenNo
constitutionalNo
actor_signatureNo
ack_irreversibleNo
judge_state_hashNo
constitutional_chain_idNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / properties / ack_irreversible
      Added value: +{
      +  "default": false,
      +  "type": "boolean"
      +}
  2. Changed1 schema field changed
    • removedInput schema / properties / ack_irreversible
      Removed value: -{
      -  "default": false,
      -  "type": "boolean"
      -}
  3. Changed2 schema fields changed
    • addedInput schema / properties / ack_irreversible
      Added value: +{
      +  "default": false,
      +  "type": "boolean"
      +}
    • changedInput schema / properties / mode / enum
      Previous value: -[
      -  "ed25519_verify"
      -]New value: +[
      +  "seal",
      +  "verify",
      +  "ledger",
      +  "changelog",
      +  "audit",
      +  "session_close"
      +]
  4. Changed1 schema field changed
    • addedInput schema / properties / seal_purpose
      Added value: +{
      +  "anyOf": [
      +    {
      +      "type": "string"
      +    },
      +    {
      +      "type": "null"
      +    }
      +  ],
      +  "default": null
      +}
  5. Changed1 schema field changed
    • changedInput schema / properties / mode / enum
      Previous value: -[
      -  "seal",
      -  "verify",
      -  "ledger",
      -  "changelog",
      -  "audit"
      -]New value: +[
      +  "ed25519_verify"
      +]
  6. Changed1 schema field changed
    • addedInput schema / properties / constitutional
      Added value: +{
      +  "anyOf": [
      +    {
      +      "additionalProperties": true,
      +      "type": "object"
      +    },
      +    {
      +      "type": "null"
      +    }
      +  ],
      +  "default": null
      +}
  7. Changed1 schema field changed
    • addedInput schema / properties / session_token
      Added value: +{
      +  "anyOf": [
      +    {
      +      "type": "string"
      +    },
      +    {
      +      "type": "null"
      +    }
      +  ],
      +  "default": null
      +}
  8. Changed1 schema field changed
    • removedInput schema / properties / ack_irreversible
      Removed value: -{
      -  "default": false,
      -  "type": "boolean"
      -}
  9. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -{
      -  "additionalProperties": true,
      -  "type": "object"
      -}New value: +null
  10. Added
  11. Removed
  12. Changed3 schema fields changed
    • addedOutput schema / additionalProperties
      Added value: +true
    • removedOutput schema / properties
      Removed value: -{
      -  "_nine_signal_compliant": {
      -    "description": "Internal compliance flag",
      -    "type": "boolean"
      -  },
      -  "_violations": {
      -    "description": "Non-compliance audit trail",
      -    "items": {
      -      "type": "string"
      -    },
      -    "type": "array"
      -  },
      -  "actor_id": {
      -    "description": "Sovereign or agent actor ID",
      -    "type": [
      -      "string",
      -      "null"
      -    ]
      -  },
      -  "delta_S": {
      -    "description": "Thermodynamic entropy change",
      -    "type": "number"
      -  },
      -  "meta": {
      -    "description": "Metadata including actor_id, mode, circuit",
      -    "type": "object"
      -  },
      -  "nine_signal": {
      -    "description": "F2 addendum nine-signal block",
      -    "type": "object"
      -  },
      -  "output_policy": {
      -    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
      -    "type": "string"
      -  },
      -  "reasons": {
      -    "description": "Human-readable justification list",
      -    "items": {
      -      "type": "string"
      -    },
      -    "type": "array"
      -  },
      -  "result": {
      -    "description": "Tool-specific payload",
      -    "type": "object"
      -  },
      -  "session_id": {
      -    "description": "Active session identifier",
      -    "type": [
      -      "string",
      -      "null"
      -    ]
      -  },
      -  "stage_progression": {
      -    "description": "Next stage auto-chain hint",
      -    "type": [
      -      "object",
      -      "null"
      -    ]
      -  },
      -  "status": {
      -    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
      -    "type": "string"
      -  },
      -  "timestamp": {
      -    "description": "ISO-8601 timestamp",
      -    "type": "string"
      -  },
      -  "tool": {
      -    "description": "Canonical tool name that produced this response",
      -    "type": "string"
      -  },
      -  "verdict": {
      -    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
      -    "type": "string"
      -  }
      -}
    • removedOutput schema / required
      Removed value: -[
      -  "status",
      -  "tool",
      -  "verdict",
      -  "result",
      -  "nine_signal",
      -  "reasons"
      -]
  13. First observed

TDQS

D1.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true, and the description's word 'irreversible' aligns with that, so no contradiction. However, the description adds no meaningful behavioral context beyond the annotation—it doesn't disclose what data gets destroyed, what appends to the ledger, whether session tokens or actor signatures are required, or what ack_irreversible gates. For a destructive tool with no other context, this is insufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely short (a single sentence), which could be seen as concise. However, this is under-specification rather than efficient conciseness—there is virtually no actionable content. It front-loads branding language but provides no substantive guidance, so brevity is not earned.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 15 parameters, no output schema, no param coverage, and only two annotations, the description is profoundly inadequate. The tool appears to be a complex sealing/ledger operation with multiple modes, cryptographic fields (actor_signature, judge_state_hash, nonce), and side effects (irreversible, destructive). A single cryptic sentence cannot make such a tool safely invocable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must bear full responsibility for explaining the 15 parameters. The description mentions none of them—not mode, not payload, not seal_purpose, not ack_irreversible, not actor_signature. The mode enum offers six distinct operations with zero explanation. This is a severe gap for a tool with 15 parameters and no param documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses cryptic 'KERNEL 999 · VAULT999 immutable append — irreversible civilizational memory sealing' phrasing. It conveys that this is an append/sealing operation with irreversible memory implications, but the verb and resource are obscured behind brand-like labels. It doesn't clearly state what action the agent performs or distinguish from siblings like arif_forge or arif_judge.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit when-to-use or when-not-to-use guidance is provided. The mode parameter offers distinct operations (seal, verify, ledger, audit, session_close) but the description doesn't explain when each should be selected or how this differs from sibling tools. The 'ack_irreversible' flag hints users must acknowledge irreversibility, but no guidance exists on the decision process.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.