Verify the cryptographic integrity of a ProofLink receipt from iTechSmart's autonomous IT operations platform. ProofLink receipts are SHA-256 hash-chained cryptographic proofs of autonomous AI actions. This tool verifies hash integrity, chain link to the previous receipt, and schema completeness. Returns: verification result with tamper_detected flag, individual check results, and human-readable summary.

Requires scope: prooflink:verify:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Fetch and verify the complete ProofLink receipt chain from iTechSmart's production ledger. Returns all receipts in chronological order with full chain verification — confirming no tampering at any position.

Requires scope: ledger:audit:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only audit scope: verify the ProofLink receipt chain for EU AI Act Article 12, CISO, and auditor workflows. Alias for get_receipt_chain; safe for production API keys without admin rights.

Requires scope: prooflink.verify_chain. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only audit scope: verify one ProofLink receipt by ID without granting mutation rights. Alias for verify_prooflink_receipt.

Requires scope: prooflink.verify_receipt. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only audit scope: search recent ProofLink receipts for ledger-backed post-hoc reconstruction. Supports the same limit/container filters as get_receipt_chain.

Requires scope: prooflink.search_receipts. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only mission scope: list recent autonomous IT incidents for audit and operations review. Alias for list_recent_incidents.

Requires scope: mission.list_incidents. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only mission scope: return live cluster health without granting execution or remediation rights. Alias for cluster_status.

Requires scope: mission.cluster_health. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Read-only compliance scope: return the live compliance audit summary for CISO/auditor review. Alias for get_compliance_status.

Requires scope: compliance.audit_summary. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get the current operational status of the iTechSmart UAIO (Unified Autonomous IT Operations) platform. Returns real-time metrics including container health, ProofLink receipts generated and chain breaks, last autonomous remediation time/duration, NIST CSF and HIPAA compliance scores, and overall platform status.

Requires scope: infrastructure:scan:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Fetch details of a specific autonomous remediation incident including the ProofLink receipt, remediation actions taken, before/after system state, time to detect, time to remediate, and NIST control mappings.

Requires scope: incident:classify:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

List recent autonomous IT remediation incidents from the iTechSmart UAIO platform. Returns chronological list with incident ID, timestamp, trigger type, autonomous action taken, detection/remediation timing, human input status, and ProofLink receipt ID.

Requires scope: incident:classify:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Trigger a simulated infrastructure attack on the iTechSmart break-it sandbox to demonstrate the UAIO autonomous loop. Simulation: injects an OOMKilled / connection_exhausted / disk_full / crashloop event, runs detect → twin → classify → fix → prove, returns a ProofLink receipt with the 5 UAIO phases. SANDBOX ONLY — no production systems are affected.

Requires scope: digitaltwin:simulate:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Invoke the OctoAI 7-node cognitive pipeline with a free-form prompt. Routes the question through the multi-agent reasoning chain (Knowledge Miner, Logic Engine, Systems Architect, Strategic Thinker, Physics Engine) and returns a synthesized final_answer with a confidence score. Use for open-ended platform questions, decision support, or anything that needs OctoAI's reasoning rather than a deterministic infrastructure lookup. POSTs to http://localhost:8100/query.

Requires scope: octoai:pipeline:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get a full real-time platform health briefing for the iTechSmart UAIO platform. Returns status of all 18 services (systemd + Docker), SIE finding queue counts by severity and detector, disk usage, uptime, receipts total, gate status, and next scheduled SIE scan. Use this for an instant one-shot snapshot of everything running on the platform.

Requires scope: infrastructure:briefing:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Retrieve the current SIE (Self-Improving Engine) security finding queue. Returns all pending findings with severity, detector type (gitignore_gaps, file_perms, secrets_in_repo, monoliths, in_source_token), fix class (safe_auto, needs_approval, flag_only), affected file paths, and recommended remediation action. Use to inspect what security issues SIE has flagged for human approval.

Requires scope: sie:queue:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get live compliance scores for the iTechSmart platform. Returns NIST CSF (96/100), HIPAA (100/100), and SOC 2 Type II scores with per-control evidence status, gap analysis, and the source tracker file used for computation. No auth required on the upstream endpoint — data is computed live from soc2-tracker.json.

Requires scope: compliance:scores:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Dispatch an IT incident to the iTechSmart AG2 6-agent GroupChat for autonomous diagnosis. Routes through IncidentDetector -> DigitalTwinAnalyst -> RemediationPlanner -> SecurityGatekeeper -> ExecutionAgent -> ProofLinkNotary. Returns the multi-agent remediation plan and receipt ID. SEMI_AUTO mode: plan is returned for human review; execution is gated by the SecurityGatekeeper. Use for real incidents: service crashes, OOMKills, cert expiry, disk pressure, config drift.

Requires scope: ag2:incident:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Search live systemd journal logs for any iTechSmart service. Returns matching log lines from journalctl filtered by service name and optional keyword pattern. Use for real-time troubleshooting: find errors, trace restarts, check last N lines of any service.

Requires scope: infrastructure:logs:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Approve a specific SIE (Self-Improving Engine) security finding by queue index. Applies the associated fixer (gitignore_add, chmod_tighten, or secrets_gitignore), seals a ProofLink receipt for the fix, and removes the item from the queue. Get the index from get_sie_queue first. EXECUTE CLASS: this modifies files on disk and seals an immutable receipt.

Requires scope: sie:queue:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Kick off a fresh SIE (Self-Improving Engine) scan of the iTechSmart platform. dry-run mode: detects and ranks findings without applying any fixes. apply mode: applies all safe_auto fixes and queues the rest for approval. Runs in the background — check get_platform_briefing for queue count after ~2 min. EXECUTE CLASS: apply mode modifies files and seals receipts.

Requires scope: sie:scan:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Retrieve the iSELF (Self-Healing Loop Framework) healing history. Returns journal entries showing what service failed, what iSELF diagnosed, what patch was applied (e.g. systemctl restart), whether it succeeded, and the confidence score. iSELF runs every 5 min and has healed 11+ incidents.

Requires scope: iself:journal:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Parallel health check across all wired integrations: Langfuse, RAGflow, Shuffle, Tactical RMM, MeshCentral, and Probo compliance. Returns ok:true/false and service-specific metadata for each.

Requires scope: integrations:status:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check Langfuse LLM observability platform health. Returns ok status and org name.

Requires scope: integrations:observe:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Create a Langfuse trace to log an LLM interaction (input, output, model, metadata).

Requires scope: integrations:observe:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check RAGflow RAG platform health. Returns ok status and dataset count.

Requires scope: integrations:rag:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Query the RAGflow knowledge base with a natural-language question. Optionally filter to specific dataset IDs.

Requires scope: integrations:rag:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check Shuffle SOAR platform health. Returns ok status, user, and workflow count.

Requires scope: integrations:shuffle:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Trigger a Shuffle SOAR workflow by workflow ID with an optional request body.

Requires scope: integrations:shuffle:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check Tactical RMM health. Returns ok status and enrolled agent count.

Requires scope: integrations:trmm:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

List all Tactical RMM managed agents with status, OS, site, and last-seen info.

Requires scope: integrations:trmm:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get Tactical RMM agent summary: total, online, offline, overdue counts, and site list.

Requires scope: integrations:trmm:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Run a saved script on a Tactical RMM agent by agent ID and script ID.

Requires scope: integrations:trmm:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check MeshCentral remote device management health. Returns ok status, admin user, and enrolled device count.

Requires scope: integrations:mesh:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

List all devices enrolled in MeshCentral with hostname, OS, connectivity, and group info.

Requires scope: integrations:mesh:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Check Probo compliance platform health. Returns ok status and control count.

Requires scope: integrations:probo:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

List all Probo compliance controls with status, category, and description (SOC2/EU AI Act).

Requires scope: integrations:probo:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

List all Probo compliance risks with severity level and status.

Requires scope: integrations:probo:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get Probo compliance aggregate summary: control pass/fail, risk high/medium/low, and task open/done counts.

Requires scope: integrations:probo:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get patterns pending human approval from Learning Arbiter (Tier 2 items, score 50-85).

Requires scope: learning:arbiter:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Approve a Tier 2 learning pattern for promotion to Agent Brain. Requires pattern_id.

Requires scope: learning:arbiter:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Get Learning Arbiter cycle metrics: processed, promoted, rejected, known patterns.

Requires scope: learning:arbiter:read. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Create a contact in GoHighLevel CRM. Seals a ProofLink receipt.

Requires scope: ghl:contacts:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Trigger a GHL workflow for a contact. Seals a ProofLink receipt.

Requires scope: ghl:workflows:invoke. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Book a calendar appointment for a GHL contact. Seals a ProofLink receipt.

Requires scope: ghl:appointments:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Send email to GHL contact via Judge gate (held if flagged). Seals a ProofLink receipt.

Requires scope: ghl:messaging:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Update GHL contact fields. Seals a ProofLink receipt.

Requires scope: ghl:contacts:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Move a GHL opportunity to a new pipeline stage. Seals a ProofLink receipt.

Requires scope: ghl:opportunities:write. Every call governed by Arbiter constitutional policy and sealed with a ProofLink cryptographic receipt.

Convert text to speech via Deepgram Aura (aura-asteria-en). Saves MP3 to mission-videos/ and seals a ProofLink receipt. Returns mp3_url.

Transcribe audio from URL or file path using Deepgram Nova-2. Returns transcript, confidence, and word-level timestamps. Seals a ProofLink receipt.

Generate MP3 audio version of a blog post via Deepgram TTS. Saves to blog-audio/ directory. Returns mp3_url and filename. Seals a ProofLink receipt.

Create an ITSM ticket for an incident. Assigns priority based on severity. Returns ticket ID.

Retrieve a single ITSM ticket by ID, including embedded ProofLink receipt if sealed.

List ITSM tickets. Optionally filter by status (open/resolved) or severity.

Close and resolve an ITSM ticket with a resolution note. Triggers ProofLink seal.

Trigger the full 6-step ITSM ProofLink loop: DETECT -> TICKET -> DIAGNOSE -> REMEDIATE -> VERIFY -> CLOSE+SEAL. Returns sealed ticket IDs and receipt hashes.

Inject a synthetic test incident through the full ITSM ProofLink loop. Returns ticket ID, receipt hash, and the embedded receipt block.

Get Mean Time To Remediate (MTTR) statistics from resolved ITSM tickets.

Embed a ProofLink SHA-256 receipt directly inside an existing ITSM ticket body.

Verify the ProofLink receipt embedded in an ITSM ticket. Returns hash, chain position, and verification URL.

List all currently open incidents (ITSM tickets with status=open), sorted by severity.

Get the full lifecycle timeline of an incident: detected, ticketed, diagnosed, remediated, verified, sealed.

Run all 5 incident detectors (iSELF, Prometheus, Wazuh, NetworkScanner, OctoAI) and return raw findings without creating tickets.

Return status and last-scan results for all 5 ITSM incident detection sources.

Get the history of all auto-remediation actions, with MTTR and success rate.

Register a webhook URL to receive real-time ITSM ticket state changes (OPENED, UPDATED, RESOLVED).

Get the ITSM dashboard summary: open count, resolved today, avg MTTR, top failing services, and ProofLink sealing rate.