666 Judge · Verdict
arif_judgeRead-only
Evaluate proposed operations against policy and safety constraints. Weighs blast radius, reversibility, and permission level. Returns binding verdict (SEAL for approved, HOLD for blocked, SABAR for awaiting conditions). Approval verdict is required prior to calling arif_forge. Outputs: evaluation verdict and authorization receipt.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | 'judge' (default) — render a verdict on candidate; 'intercept' — pre-flight gate before an action runs; 'validate' — re-check a prior verdict; 'hold' — place an action into a cooling period; 'escalate' — refer the decision to the human owner. | judge |
| nonce | No | One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call. | |
| domain | No | Subject area for claim evaluation, e.g. 'geoscience' or 'finance'. | |
| key_id | No | Which of your registered keys produced actor_signature, e.g. 'key-1'. | |
| actor_B | No | Your calibrated confidence for a prediction, 0.0–1.0 (Brier-style score component). | |
| actor_id | No | Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you. | |
| evidence | No | The facts the verdict should rest on — a JSON list like [{"fact": "tests pass", "source": "CI"}], or an object. | |
| actor_Phi | No | JSON map of supporting signals about you, e.g. {"consistency": 0.9, "track_record": 0.7}. | |
| candidate | No | The action or claim being judged, stated plainly, e.g. 'delete table users in prod'. | |
| claim_text | No | The exact claim sentence under judgment, e.g. 'uptime exceeded 99% in August'. | |
| session_id | No | Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session. | |
| action_tier | No | How risky the action is: 'standard', 'high', or 'critical' — higher tiers demand stronger evidence. | standard |
| claim_class | No | Epistemic strength of the claim: 'OBS' (directly observed), 'DER' (derived from observations), 'INT' (interpreted), 'SPEC' (speculative), 'UNKNOWN' (cannot witness — honest null; maps to TruthClass.UNK, weight 0.30, cannot authorize mutation). RULE absence-null: 'not in my knowledge' is NOT evidence a claim is false — label UNKNOWN, never FALSE. | |
| niat_params | No | JSON intent-calibration settings, e.g. {"sincerity": 0.8, "stated_goal": "verify the claim"}. | |
| action_class | No | Kind of action under judgment: 'OBSERVE' (read-only), 'DRAFT' (compose text), 'MUTATE' (change state), 'IRREVERSIBLE' (permanent). | |
| blast_radius | No | Who or what the action can affect: 'self', 'session', 'organ', or 'federation'. | |
| seal_purpose | No | One sentence saying why this verdict/record must exist, e.g. 'closing deployment D-17'. Stored permanently alongside the record. | |
| session_token | No | Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated. | |
| context_source | No | Where the candidate came from: 'session', 'file', or 'memory'. | |
| heart_critique | No | JSON result of an ethics/dignity check, e.g. {"coercion": false, "dignity": 0.9} — feeds the verdict. | |
| vault_entry_id | No | Id of the permanent-ledger entry this verdict should attach to (from an earlier arif_seal response). | |
| actor_signature | No | Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key. | |
| authority_token | No | Authority credential CLAIMED for this proposal (payload field, not proof). The judge records the claim and still verifies identity separately — an unverified token never upgrades an OBSERVE_ONLY session, and verdicts remain binding regardless of what the token asserts. | |
| entropy_pathway | No | How the action changes system order: 'reduces', 'neutral', or 'increases' complexity. | |
| entropy_receipt | No | JSON receipt from an entropy computation, bound to this judgment. | |
| authority_effect | No | What permission a SEAL verdict would grant, e.g. 'execute forge plan P-9'. | |
| cooldown_entry_id | No | Id of an existing cooling-period record to consult before this action may proceed. | |
| sovereign_receipt | No | Reference to the human owner's explicit approval, for the rare case where they have already decided directly. | |
| reversibility_level | No | How hard the action would be to undo: 'reversible', 'hard', or 'irreversible'. | |
| requested_capability | No | The specific capability being requested, e.g. 'forge.execute' — checked against the capability registry. | |
| constitutional_chain_id | No | Id of the evidence chain this call belongs to (observe→think→judge→seal). Copy it from the earlier step's response to link the steps together. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| meta | Yes | ||
| tool | Yes | ||
| result | Yes | ||
| status | Yes | ||
| delta_S | No | ||
| reasons | Yes | ||
| actor_id | No | ||
| timestamp | Yes | ||
| session_id | No | ||
| nine_signal | Yes | ||
| output_policy | No | ||
| stage_progression | No | ||
| philosophical_anchor | No |