What can you do with this server?

Use this MCP server as an authority plane for AI agents: initialize a session, evaluate proposals against 13 constitutional floors, and manage routing/memory/deliberation — though this schema exposes only 6 of the 8 documented canonical verbs. * arif_init — bind actor identity, authority band, and session (unattested callers default to OBSERVE_ONLY / HOLD). * arif_observe — gather or record observations/evidence for judgment. * arif_think — deliberate/reason over a proposal, candidate action, or context. * arif_judge — evaluate a candidate action against constitutional floors and return a verdict (SEAL / HOLD / SABAR / PARTIAL / VOID). * arif_route — route or escalate according to judgment, authority band, or system state. * arif_memory — read/write governed memory or record context tied to the session. * Note: the README describes arif_forge (execution handoff) and arif_seal (append receipt to VAULT999) as part of the 8-verb ABI, but they are absent from this server schema. * All listed input schemas are empty (additionalProperties: true), so arguments are unconstrained at the schema level; README examples show required payloads like actor_id, session_id, candidate, and ack_irreversible.

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@arifOS Begin a new constitutional session." That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

arifOS

by ariffazil

Overview Schema Source Related Servers Discussions Admin

Python

Hybrid

⚠️ Current verified state — generated, never hand-edited
Runtime self-measurement (http://127.0.0.1:8088/health @2026-10-17T09:00:08Z): kernel healthy · floors 13/13 measured pass · vault999 healthy · release arifos-cf7a984 · drift aligned (source=built=deployed) · tools exposed 8. Per-floor provenance: .well-known/current-state.json.
Independent audit (2026-10-11, live re-probe by FI-008 + claim-level hand audit; receipts: AAA/forge_work/grant-arifos-reality-reforge-2026-10-11/): floors 2 pass · fail F2, F11, F12, F13 · 7 unmeasured = 13 distinct (raw key-count 10 includes L11/L12/L13, L-prefix aliases of the failing F11/F12/F13) · actor binding not verified (observed calls unsigned) · receipt fidelity broken on invocation-telemetry surface (HOLD persisted as ok:true) · independent reconstruction: no external verifier bound.
These are two different witness objects. Self-measurement ≠ independent audit; unmeasured is not pass. If this block conflicts with the live endpoint, the endpoint wins — re-run python scripts/generate_current_state.py.
Machine state: .well-known/current-state.json · Badge feed: .well-known/badges/ · Known gaps: What Is Not Yet Proven

arifOS

Authority before execution.

arifOS is a model-independent authority plane for AI agents. It evaluates consequential proposals against thirteen constitutional floors before execution, returns a governed verdict, preserves the human veto, and records what happened as an auditable receipt.

In a world where intelligence is abundant, authority becomes the scarce resource. arifOS keeps judgment independent from execution.

Quick Start · MCP Endpoint · Current Verified State · Agent surfaces · Known Gaps · Security

Floors PyPI Glama Unified CI Security audit License

Proposer ≠ Judge ≠ Executor ≠ Witness Human sovereignty > machine authority

What arifOS is not: not an AI model · not an agent framework · not an execution engine (A-FORGE executes) · not an attention plane (AAA attends) · not the witness (FRAME witnesses; VAULT999 remembers) · not a substitute for authentication, sandboxing, or legal review.

Audience	What you get
Human	A quiet veto: the agent proposes, the kernel records a verdict, you stay sovereign
Agent / A2A	MCP tools + receipts. You do not get the keys. Judgment by arifOS, discovery by AAA, execution by A-FORGE
Institution	Policy floors F1–F13, a hash-chained VAULT999 audit trail, model-vendor independence
Machine / MCP	Streamable HTTP endpoint, 8 canonical verbs, published schemas
Auditor / indexer	`CURRENT_VERIFIED_STATE.md` · `docs/evidence/` · `llms.txt` · `CITATION.cff`

Live: https://arifos.arif-fazil.com · MCP :8088 · sister organs AAA · A-FORGE · GEOX

Who built this

arifOS was built by Arif Fazil, a senior exploration geoscientist who spent his career making decisions where observations are incomplete, interpretations are probabilistic, provenance matters, and irreversible action must be gated. He transferred that discipline into agent runtime governance.

I am a geologist, not a programmer. I did not write this codebase and I do not read it line by line. What I do is point at where the problem is — and the agents in my federation solve it, inside the constitution and the review gates I set, with the commit trail to show who ran what.

Read the commits if you want to check that claim: the author fields are agent handles, not aliases of mine. That is the deliberate shape of this project, not a detail being hidden. It also sets the honest expectation — the design and the judgment are mine, the implementation is theirs, and where the two disagree, the bug is mine to answer for.

The system is named after its founder and reflects a core belief: governance is a systems problem, not a model problem.

One human, and the agents he directs.

Related MCP server: acf-mcp

30-second proof

pip install arifos
python examples/enterprise_operations_demo.py

Three of the six graded scenarios:

Read customer account data        → SEAL   (receipt RCPT-…)
Major refund (50× the ceiling)    → HOLD   (awaiting human)
Delete account + audit trail      → VOID   (blocked by a hard floor)

Full transcript: docs/QUICKSTART.md. The demo runs in-process — no real records or funds are touched.

What works today

Deterministic rejection without consulting an LLM. The judge refuses on the constitution, not on a model opinion (gate: hard_deterministic, llm_consulted: false).
Prevention of a tested unauthorised mutation. One MUTATE-class call without presented authority was stopped before execution.

What is not yet proven

Every row names its own gap. Repairing a claim by substituting a stronger one is worse than the stale claim it replaced. (Closed rows are receipted in docs/evidence/GAP_HISTORY.md.)

Gap	Risk	Status
Independent security audit	Adversarial bypass testing not published	In progress — external researcher reviewing since 2026-08-25. Findings so far: fetch-surface SSRF (fixed, `1!2026.9.1`); Cypher injection (HIGH — key whitelist landed) and fastmcp path traversal (MEDIUM — containment guard landed). See SECURITY.md
Sovereign-binding of irreversible acknowledgement	`ack_irreversible` and `actor_signature` are transported as payload fields; nothing published shows a human signature bound to `(transaction_hash ‖ state_hash ‖ nonce)`, single-use, scoped, unforgeable by the proposing agent	Open — design drafted (`docs/judgment-integrity-2026-09-22/`), not implemented. F13 is enforced by convention and band-gating, not cryptographic transaction binding
Ledger head not externally anchored or signed	A hash chain held entirely by one party cannot detect wholesale rewrite by that party	Open — VAULT999 today is self-verifiable, not independently attestable
Third-party evaluation	No external reviewer has published findings	In progress since 2026-08-25; nothing published
Reproducible demo by strangers	Onboarding path not independently tested	Partial — demo verified here; no stranger has reproduced it unaided
Enterprise deployment	No production customer reference	Open
Standards conformance	MCP/A2A results not published externally	Partial — report: `result: PARTIAL`, per-tool schema validation DEFERRED
SBOM and signed releases	Supply-chain integrity unverified externally	Partial — CycloneDX on publish; no signing, no CVE scan
Test suite	Needs a live kernel (`tests/conftest.py` refuses without `:8088`, by design)	7,668 tests collect clean (2026-10-05); the identity/authority subset carries 34 pre-existing failures vs 321 passes (2026-09-30) — quote a failure set, never a bare pass count
Observability	Tracing partially wired	Partial — sovereign Postgres + arifFlow live; OTel spans on all 8 verbs; caller-side propagation incomplete
Semantic layer (Graphiti)	Knowledge graph retired from the read path	`graphiti_read: retired_888` (2026-09-04); semantic floor disabled by choice (`ARIFOS_ML_FLOORS=0`)
Comparative benchmark	No published comparison against alternative frameworks	Open
Maintainer continuity	Single sovereign, single reviewer; no succession or key-recovery procedure published	Open — relevant to institutional adoption
Identity registry in two copies	`contracts/identity.py` ↔ `arifosmcp/contracts/identity.py` had diverged; a one-sided edit ships split-brain identity	Mitigated 2026-09-30 (tripwire tests, 18 actors aligned) — consolidation to one owner still open

See SECURITY.md for the threat model and disclosure policy, and docs/evidence/claims.yaml for the machine-readable claim registry.

How it works

  Agent proposes action
         │
         ▼
  ┌─────────────────┐
  │   arifOS Kernel  │  Evaluates against 13 constitutional floors
  │     (:8088)      │  Records provenance + evidence refs + hashes
  └────────┬────────┘
           │
    ┌──────┼────────┬──────────┬───────────┐
    ▼      ▼        ▼          ▼           ▼
  SEAL    HOLD    SABAR     PARTIAL      VOID
  (go)  (wait for (defer —  (proceed   (blocked by
        human)    evidence   with       a floor)
                  pending)   cooling)
    │      │
    ▼      ▼
  Execute  Human
  via      reviews
  A-FORGE
    │
    ▼
  Receipt in VAULT999 (append-only hash chain)

The judge never executes. The executor never certifies.

The verdict lattice

Verdicts are ordered and non-compensatory — a stronger verdict always dominates a weaker one (arifosmcp/models/verdicts.py):

VOID  >  HOLD_888  >  HOLD  >  SABAR  >  PARTIAL  >  PROVISIONAL  >  SEAL

Verdict	Plain English	What happens
SEAL	Go	Proceed to execution
PARTIAL	Go carefully	Proceed with cooling and monitoring
PROVISIONAL	Proceed with expiry timer	Auto-revoke at `valid_until`; no extension without re-judging
SABAR	Wait for evidence	Retry permitted later; distinct from HOLD
HOLD	Wait for human	Pause; await a human decision
HOLD_888	Stop — the sovereign decides	Escalate to F13
VOID	Blocked	Stop; the constraint must be resolved

Floors are never averaged. One floor failure propagates into the verdict; there is no compensating score.

13 Constitutional Floors (F1–F13)

Floor	Name	Rule (essence)
F1	AMANAH	Reversible first. Irreversible → 888_HOLD unless the sovereign acknowledges
F2	TRUTH	P(truth) ≥ 0.99; evidence carries OBS/DER/INT/SPEC labels
F3	TRI-WITNESS	W₃ = ∛(Human × AI × Earth) ≥ 0.75 at judgment; W³ ≥ 0.95 for SEAL
F4	CLARITY	ΔS ≤ 0 — every output reduces entropy
F5	PEACE²	Non-destructive power — block harm and extraction
F6	EMPATHY (kernel: MARUAH)	Protect the weakest stakeholder; dignity is not tradeable
F7	HUMILITY	Ω₀ ∈ [0.03, 0.05] — in-band pass, no fake certainty
F8	GENIUS	G ≥ 0.80 for complex actions — the simplest correct path
F9	ANTIHANTU	No deception, manipulation, or consciousness claims (lower = better)
F10	ONTOLOGY	AI-only ontology; a soul claim is VOID
F11	AUDITABILITY	Every decision logged, inspectable, attributable
F12	RESILIENCE	Injection defence; input risk < 0.85 (lower = better)
F13	SOVEREIGN	Human veto is FINAL

Three semantic classes: score floors (higher ≥ threshold), band floors (F7 in-band), ceiling floors (F9, F12 lower = better). Full canonical rules: FEDERATION_CONTRACT.md §3 · GENESIS/000_KERNEL_CANON.md.

VAULT999 — the record

Every consequential verdict and receipt is written to VAULT999: a hash-chained, append-only JSONL ledger set — tamper-evident by construction, not tamper-proof. An entry carries payload hash, entry hash, previous hash, trace root, actor, session and evidence references; source payloads are not copied in.

A hash chain proves internal consistency — not freedom from rewrite by whoever holds the ledger. External anchoring (published chain head, external signing) is not implemented: VAULT999 today is self-verifiable, not independently attestable. Census methods and counts: docs/evidence/VAULT_CENSUS.md (quote the timestamp with any count).

Connect an MCP client

https://mcp.arif-fazil.com/mcp      # canonical public door · or http://localhost:8088/mcp self-hosted

Canonical endpoint: https://mcp.arif-fazil.com/mcp. https://arifos.arif-fazil.com/mcp is a live alias (proxies to the same kernel); use the canonical URL in client configs.

Cline — cline_mcp_settings.json:

{ "mcpServers": { "arifos": { "type": "streamableHttp", "url": "https://mcp.arif-fazil.com/mcp" } } }

Cursor — ~/.cursor/mcp.json:

{ "mcpServers": { "arifos": { "url": "https://mcp.arif-fazil.com/mcp" } } }

Windsurf — mcp_config.json (note: serverUrl, not url):

{ "mcpServers": { "arifos": { "type": "streamable-http", "serverUrl": "https://mcp.arif-fazil.com/mcp" } } }

Claude Desktop — stdio bridge to the HTTP door:

{ "mcpServers": { "arifos": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.arif-fazil.com/mcp"] } } }

Protocol facts, as measured: the kernel advertises 2026-07-28 and accepts 2026-07-28 · 2025-11-25 · 2025-03-26 · 2024-11-05; a live initialize currently settles on 2025-11-25 — pin that if you pin anything.

curl -s http://localhost:8088/mcp \
  -H 'content-type: application/json' -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'
# → 8 tools: arif_init arif_observe arif_think arif_route arif_memory arif_judge arif_forge arif_seal

Session flow (agents start here)

The kernel binds a session before any judgment:

// 1 — arif_init: actor identity + authority band (HOLD is the normal starting state)
{ "name": "arif_init", "arguments": { "mode": "init", "actor_id": "my-agent", "intent": "…" } }
// 2 — arif_judge: evaluate a proposal → verdict + evidence + next_safe_action
{ "name": "arif_judge", "arguments": { "candidate": "Delete the production audit table", "action_tier": "standard", "session_id": "…", "actor_id": "my-agent" } }
// 3 — arif_seal: only after a SEAL verdict; appends the receipt to VAULT999
{ "name": "arif_seal", "arguments": { "payload": "…", "session_id": "…", "ack_irreversible": true } }

Call arif_judge without a session and the kernel answers actor: anonymous, authority: OBSERVE_ONLY, verdict: HOLD — it will not silently upgrade an unattested caller.

Stage numbering (single source of truth). The verbs follow the ratified eight-stage map: 000 INIT · 111 OBSERVE · 333 THINK · 444 ROUTE · 555 MEMORY · 666 JUDGE · 777 FORGE · 999 SEAL (arifosmcp/constitutional_map.py, F13-ratified 2026-07-31). The retired 888 judge label survives only in historical mirrors; the live wire says 666.

Guided walkthrough: docs/START_HERE.md · verified docs/QUICKSTART.md.

Machine-readable surfaces

Surface	URL	For
MCP tool schemas	tools.json	agents, registry crawlers
Agent context	`llms.txt` · `AGENTS.md`	coding agents
Citation	`CITATION.cff`	institutions, researchers
Truth badges	`.well-known/badges/`	status dashboards
Current state	`.well-known/current-state.json`	automation

Architecture

arifOS Federation — planes and classes

    ┌───────────────────────────────────────────────────┐
    │  Authority plane — arifOS :8088                    │
    │  Constitutional judgment · F1–F13 · VAULT999        │
    └──────────────────────┬────────────────────────────┘
                           │
    ┌──────────────────────▼────────────────────────────┐
    │  Attention plane — AAA :3001                       │
    │  What matters · routing · state · skill catalog    │
    └──────────────────────┬────────────────────────────┘
                           │
    ┌──────────────────────▼────────────────────────────┐
    │  Execution plane — A-FORGE :7071/:7072             │
    │  Governed mutation · leases · receipts             │
    └──────────────────────┬────────────────────────────┘
                           │
    ┌──────────────────────▼────────────────────────────┐
    │  Witness + record — FRAME :18085 · VAULT999        │
    │  Independent observation · immutable history       │
    └───────────────────────────────────────────────────┘
        boundaries:  HERMES :18087 (semantic) · CHRON :18102 (temporal)
        domains:     GEOX :8081 · WEALTH :18082 · WELL :18083
        metabolism:  arifFlow :7073      gateway: FED :7074      synthesis: i-ARIF

Plane / class	Component	Role
Authority	arifOS `:8088`	Constitutional judgment — owns the gavel and the ledger
Attention	AAA `:3001`	What matters, and to whom. Displays, routes, queues; never adjudicates
Execution	A-FORGE `:7071`/`:7072`	Governed mutation — leases, gates, receipts
Witness	FRAME `:18085`	Independent observer. Its output is evidence, never a verdict
Record	VAULT999 (in-kernel)	Immutable append-only ledger
Metabolism	arifFlow `:7073`	Receipt ingestion, FQ monitoring; never adjudicates
Domain intelligence	GEOX `:8081` · WEALTH `:18082` · WELL `:18083`	Domain evidence and computation. Compute-only: no organ authorises its own action
Provider gateway	FED `:7074`	Multi-provider model routing (advisory-only)
Boundary services	HERMES `:18087` · CHRON `:18102`	Semantic and temporal boundaries — not organs (FEDERATION_CONTRACT.md §2.1)

Tool-count semantics (so no two surfaces disagree): tools_loaded = 8 — the public MCP facade (KERNEL_ABI_8), the only number to quote publicly · canonical superset = 25 (8 public ABI + 4 map-only verbs: arif_fetch, arif_challenge, arif_stage, arif_measure + 13 hidden verbs) · total_declared = 48 (8 canonical + 40 diagnostic) · registry = 62 (with aliases) · operational = 3 (durable SUCCESS in the last 24 h — proven live, not merely invocable).

Verification Status

Dynamic values live in the generated block at the top of this file — this table names how each surface is verified, not stale copies of the numbers.

Surface	How to verify
Public repository	GitHub `ariffazil/arifOS`, AGPL-3.0
PyPI package	`pip install arifos` → pypi.org/project/arifos
Live kernel + floors	`curl localhost:8088/health` → status, per-floor provenance
MCP interface	live `tools/list`; protocol negotiation note above
VAULT999 ledger	`scripts/verify_vault_chain.py` (scope: the active ledgers under `arifOS/VAULT999/`); census methods in `docs/evidence/VAULT_CENSUS.md`
Source / build / deploy	`/health → software_release` (drift flag) · re-attested on every `scripts/deploy-release.sh` run
Contract schema	`contract_status` in `/health`
Machine-readable	tools.json · llms.txt · CITATION.cff
Scanner attestation	mcp.arif-fazil.com/proof/

Operational gates (CI)

Workflow	What it guards
Unified CI	build + test
MCP Conformance	protocol surface
Vault Integrity	ledger chain
Floor Gate	floor evaluation
Governance Gate	governance contract
Drift Monitor	source↔runtime drift
Uptime	endpoint liveness

Sister Repositories

Repository	Purpose
AAA	Attention plane — routing, state, skill catalog, A2A gateway
A-FORGE	Execution engine after authorisation
GEOX	Earth sciences domain evidence
WEALTH	Capital and financial intelligence
WELL	Human and machine vitality observation
arifFlow	Metabolic ledger daemon — FQ monitoring, receipt ingestion
FRAME	Independent observer — drift detection, evidence gathering (repository archived, organ live)

No public repository today: FED (:7074) and i-ARIF. They are deployed and reachable, but their source is not published. Treat their behaviour as observed from /health only.

Evidence & Trust

arifOS publishes verifiable evidence for its claims. Every public claim links to an artifact that can be regenerated.

Claim	Evidence	Status
MCP conformance	CI · report	Partial
ABI stability	Drift guard	Partial
Floor enforcement	`/health → layer_health.constitutional` (per-floor provenance)	Verified by self-measurement; independent audit found the gap set above
Vault integrity	`scripts/verify_vault_chain.py`	Verified — INTACT within its scope; 2 legacy breaks reported as historical
SBOM	Generator	Partial
Quickstart	Verified quickstart	Verified by the maintainer 2026-09-21; not yet reproduced by a stranger

Honesty principle: we publish what passed, what failed, and what remains unknown. We do not claim maturity beyond our evidence.

Who Is This For

Operators deploying AI agents in regulated environments who need an independent judgment layer between proposals and execution. Developers building agent systems who want a policy decision point as a service. Evaluators and security reviewers assessing AI governance frameworks. Domain builders adapting governance to a field (geoscience, finance, healthcare).

Start here: docs/START_HERE.md

Development

git clone https://github.com/ariffazil/arifOS.git
cd arifOS
pip install -e ".[dev]"                       # dev tier — kernel + test tooling
python -m pytest tests/ -q                    # needs a live kernel at :8088 (see gaps)
make health                                   # probe the kernel
PORT=8088 arifos-mcp streamable-http          # start the kernel
python scripts/generate_current_state.py      # re-stamp the generated truth block

See CODEOWNERS for sovereign ownership of automation surfaces and CONTRIBUTING.md.

arifOS/
├── arifosmcp/          # Core kernel package                    [wheel root]
│   ├── abi/            # Capability registry and floor definitions
│   ├── constitution/   # Constitutional floor implementations
│   ├── contracts/      # Packaged copy of the identity/verdict contracts
│   ├── kernel/         # Core judgment engine
│   └── VAULT999/       # VAULT999 ledger implementation
├── arifos/             # Phase 3 identity/consent namespace      [wheel root]
├── contracts/          # Runtime contract package                [wheel root]
├── core/               # Load-bearing legacy root                [wheel root]
├── schemas/            # INIT v2 schemas (F13-ratified 2026-09-20) [wheel root]
├── examples/           # Runnable governed workflow demo
├── tests/              # Test suite (pytest)
├── scripts/            # Operational tooling (update_readme_sot.py, generate_current_state.py)
├── .well-known/        # Generated machine state + truth badges (gitignored: state/)
├── docs/               # Documentation + evidence/ + archive/
└── pyproject.toml      # Package metadata — [wheel root] marks packages.find.include

Until 2026-09-30 this tree listed only arifosmcp/ while the runtime imported contracts.* at 10 import statements across 5 files — production resolved them only from a site-packages leftover that a fresh venv would not have. Fixed in 27409ddbf. An incomplete structure diagram is not a cosmetic gap — it is how an unshipped, runtime-critical package stays invisible. contracts/ and arifosmcp/contracts/ are kept in agreement by tripwire tests; consolidating them into one owner is still open.

Security

See SECURITY.md for the threat model, known vulnerabilities and disclosure policy.

License

AGPL-3.0 (LICENSE). When deployed over a network, the complete source code must be made available to all users interacting with the service.

Revision 2026-10-17 — APEX-ZEN upgrade: human story moved forward, founding context consolidated, 30-second proof elevated, duplicate "not yet proven" consolidated, "drift aligned" semantics clarified (binary matches build source, not necessarily repo HEAD). Prior revision: 2026-10-16 restructured under AGENTIC-README-DOCTRINE v1. Prior audit passes: 2026-09-21 full re-measurement · 2026-09-22 Copilot external ENTERPRISE · 2026-10-11 independent re-probe · 2026-10-17 four-probe audit (333-AGI + IrfanClaw + ChatGPT + WawaBot).

Ditempa Bukan Diberi — Forged, Not Given.

🔗 Federation Identity

Field	Value
Organ	`arifos` · CORE · governance_kernel
Ports	8088 (/mcp)
Unit	arifos.service
Authority ceiling	JUDGE_ONLY
Public MCP	https://mcp.arif-fazil.com/mcp (canonical; live alias: https://arifos.arif-fazil.com/mcp)
Flow graph	FEDERATION.md — peta semua organ + repo

Available Tools

6 tools

arif_initDInspect

arif_init

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.6/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure, and it discloses nothing. For an initialization tool it should at minimum state side effects, idempotency, required prior state, or what gets created or mutated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is a single token, but this is under-specification rather than conciseness — there is no content to be front-loaded or trimmed. The brevity is a defect, not an efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An initialization tool with no annotations, no output schema, and five ambiguous siblings needs the description to explain ordering, prerequisites, and effect; it explains none of these. The definition is unusable for correct tool selection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantics to explain and the schema is trivially complete at 100% coverage. Baseline 4 applies per the zero-parameter rule.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no indication of when to call this tool, when not to, or how it relates to any of the five sibling tools. An agent has literally nothing to route on.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_judgeDInspect

arif_judge

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.6/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure, and it discloses nothing. Whether this judges, mutates state, requires auth, or has side effects is entirely unknown.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single bare token is not conciseness but under-specification. There is no sentence structure or front-loading to evaluate, and no information is conveyed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool sitting in a family of five sibling arif_* tools, the description provides no differentiation, no behavior, and no usage context. It is completely inadequate for correct selection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing for the description to clarify, though it also adds nothing here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, no alternatives, no context for selecting this over the other arif_* tools. The agent is left with zero routing information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_memoryDInspect

arif_memory

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.5/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure, and it discloses nothing. Whether this reads, writes, persists, or clears state is entirely unknown.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness1/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single token 'arif_memory' is not concise in the meaningful sense — it is under-specified and conveys no information beyond the name the agent already has.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool that sits alongside five related arif_* siblings with no annotations and no output schema, the description is completely inadequate. An agent has no basis to select or invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline is 4; there is no parameter semantics to explain and the description cannot be faulted here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance whatsoever on when to use this tool versus alternatives such as arif_init, arif_think, or arif_route. The description provides no context, exclusions, or routing cues.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_observeDInspect

arif_observe

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.6/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, and it discloses nothing about behavior — no side effects, no state changes, no cost, no prerequisites. The agent cannot tell whether this observes, mutates, or merely reads.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The text is short but only because it is under-specified, not because it is concise. A bare name is not a front-loaded description — no information is conveyed at all.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool sitting in a family of six similarly named arif_* tools, the description is completely inadequate: no purpose, no usage context, no behavioral disclosure, and no output schema to compensate. An agent cannot call this correctly with any confidence.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantics for the description to add; baseline 4 applies. The empty schema and additionalProperties:true mean an agent learns only that no declared inputs exist.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance whatsoever on when to use this tool, when not to, or which sibling to prefer. An agent has no basis for selecting arif_observe over arif_think or arif_judge.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_routeDInspect

arif_route

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.6/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden, yet it discloses nothing about side effects, state changes, permissions, or return behavior. The single word 'route' hints at dispatching but gives no reliable information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is short, but the brevity reflects under-specification rather than conciseness. There is effectively no content to front-load.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even for a zero-parameter tool, the description is completely inadequate: an agent cannot tell what arif_route does, when to call it, or how it differs from its five siblings. There is no output schema to compensate either.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so per the rubric the baseline is 4. The schema has additionalProperties true, but with no properties to document there is nothing for the description to add.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no indication of when to use arif_route versus the sibling tools (arif_init, arif_observe, arif_think, arif_judge, arif_memory). No triggers, prerequisites, or exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_thinkDInspect

arif_think

ParametersJSON Schema

Name	Required	Description	Default
No parameters

TDQS

D1.6/5.0

Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure, and it discloses nothing. It does not say whether the call is a safe read, whether it mutates state, what permissions it needs, or what it returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single word is not concise writing but under-specification; brevity here comes from omitting all meaning rather than from editing it down. Front-loading is moot when there is no content to front-load.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no annotations, no output schema, and no description content, an agent has no information about what this tool does or what to expect from calling it. Nothing about the tool's purpose or behavior is conveyed anywhere in the definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema declares zero parameters, and by the scoring rule a zero-parameter tool has a baseline of 4 since there are no parameter semantics for the description to clarify. The description neither helps nor hurts here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool, when not to, or how it relates to any of the five sibling arif_* tools. The agent is given no selection criteria at all.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

11 tool updatesv2026.10.16Oct 17, 2026

Removedarif_bridge_connect
Removedarif_compose
Removedarif_critique
Removedarif_forge

Changedarif_init28 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / ack_irreversible

Removed value: -{
-  "default": false,
-  "type": "boolean"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / actor_signature

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / agent_policy

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / caller_actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / client_capabilities

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / context

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / counterparty

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / declared_model_key

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / delegation_mode

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / epoch_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / evidence

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / executor_actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / idempotency_key

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / intent

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / mode

Removed value: -{
-  "default": "init",
-  "enum": [
-    "init",
-    "light",
-    "resume",
-    "validate",
-    "canary",
-    "preflight",
-    "triage",
-    "epoch_open",
-    "epoch_seal",
-    "opt_out",
-    "opt_out_profiling"
-  ],
-  "type": "string"
-}

removedInput schema / properties / nonce

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / payload

Removed value: -{
-  "default": null,
-  "title": "Payload"
-}

removedInput schema / properties / previous_session_hash

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / requested_authority

Removed value: -{
-  "default": "OBSERVE_ONLY",
-  "type": "string"
-}

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / sovereign_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / tooling

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / trace_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / verbose

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Changedarif_judge17 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / actor

Removed value: -{
-  "type": "string"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / authority_token

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / blast_radius
```
Removed value: -{
-  "type": "string"
-}
```

removedInput schema / properties / domain

Removed value: -{
-  "type": "string"
-}

removedInput schema / properties / epistemic_state

Removed value: -{
-  "default": "UNKNOWN",
-  "type": "string"
-}

removedInput schema / properties / evidence

Removed value: -{
-  "anyOf": [
-    {
-      "items": {
-        "additionalProperties": true,
-        "type": "object"
-      },
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / intent

Removed value: -{
-  "type": "string"
-}

removedInput schema / properties / measurement

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / requested_capability
```
Removed value: -{
-  "type": "string"
-}
```
removedInput schema / properties / reversibility_level
```
Removed value: -{
-  "type": "string"
-}
```

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_token

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / required

Removed value: -[
-  "actor",
-  "intent",
-  "requested_capability",
-  "domain",
-  "reversibility_level",
-  "blast_radius"
-]

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Changedarif_memory57 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / aspect

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / caller_chain

Removed value: -{
-  "anyOf": [
-    {
-      "items": {},
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / cascade

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / content

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / correction_event

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / embedding_ref

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / from_tier

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / graph_first

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / human_approval

Removed value: -{
-  "default": false,
-  "type": "boolean"
-}

removedInput schema / properties / hybrid

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / idempotency_key

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / include

Removed value: -{
-  "anyOf": [
-    {
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / include_contested

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / include_proof

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / lease_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / memory_class

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / memory_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / metadata

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / minimised_vault_record

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / mode

Removed value: -{
-  "default": "recall",
-  "enum": [
-    "recall",
-    "inspect",
-    "attest",
-    "remember",
-    "promote",
-    "revise",
-    "forget",
-    "audit"
-  ],
-  "type": "string"
-}

removedInput schema / properties / new_content

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / new_structured

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / new_truth_class

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / organ_staleness_band

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / payload

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / policy

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / policy_basis

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / progressive_level

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / promotion_reason

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / provenance

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / query

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / redact_pii

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / require_human_ack

Removed value: -{
-  "anyOf": [
-    {
-      "type": "boolean"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / required_floors_satisfied

Removed value: -{
-  "anyOf": [
-    {
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / resolution_kind

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / scope

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / seal_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_token

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / source_receipts

Removed value: -{
-  "anyOf": [
-    {
-      "items": {
-        "additionalProperties": true,
-        "type": "object"
-      },
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / structured

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / supersedes_memory_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / temporal_as_of

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / tier

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / tier_hint

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / time_window_hours

Removed value: -{
-  "anyOf": [
-    {
-      "type": "integer"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / timestamp

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / to_tier

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / tombstone_text

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / top_k

Removed value: -{
-  "anyOf": [
-    {
-      "type": "integer"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / trace_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / truth_class

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / vault_version

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Changedarif_observe11 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / layers

Removed value: -{
-  "anyOf": [
-    {
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / mode

Removed value: -{
-  "default": "search",
-  "enum": [
-    "search",
-    "fetch",
-    "hybrid_discovery",
-    "ingest",
-    "compass",
-    "atlas",
-    "entropy_dS",
-    "vitals"
-  ],
-  "type": "string"
-}

removedInput schema / properties / query

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / result_limit

Removed value: -{
-  "default": 10,
-  "type": "integer"
-}

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_token

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / url

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Changedarif_route11 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Calling actor."
-}

removedInput schema / properties / arguments

Removed value: -{
-  "anyOf": [
-    {
-      "additionalProperties": true,
-      "type": "object"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Arguments to pass to organ_tool."
-}

removedInput schema / properties / intent

Removed value: -{
-  "description": "Natural-language description of what the user wants.\n          e.g. \"interpret this seismic section\", \"assess portfolio risk\"",
-  "type": "string"
-}

removedInput schema / properties / organ

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Optional explicit organ override. If provided, intent matching\n          is skipped and this organ is used directly."
-}

removedInput schema / properties / organ_tool

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "The tool name on the target organ to call.\n          If absent, returns routing decision only (no bridge call)."
-}

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Governing session."
-}

removedInput schema / properties / task

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Alias for intent (backward compat)."
-}

removedInput schema / required
```
Removed value: -[
-  "intent"
-]
```

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

Removedarif_seal

Changedarif_think10 fields changed

changedInput schema / additionalProperties
```
Previous value: -falseNew value: +true
```

removedInput schema / properties / _envelope

Removed value: -{
-  "default": null,
-  "title": "Envelope"
-}

removedInput schema / properties / actor_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / mode

Removed value: -{
-  "default": "reason",
-  "enum": [
-    "reason",
-    "reflect",
-    "verify",
-    "axioms",
-    "plan",
-    "plan_review",
-    "plan_approve",
-    "refactor_plan",
-    "metabolize",
-    "simulate"
-  ],
-  "type": "string"
-}

removedInput schema / properties / plan_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / query

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_id

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / session_token

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null
-}

removedInput schema / properties / witness_type

Removed value: -{
-  "default": "ai",
-  "type": "string"
-}

changedOutput schema / (root)

Previous value: -{
-  "additionalProperties": true,
-  "type": "object"
-}New value: +null

35 tool updatesv0.1.1Jul 9, 2026

Removedarif_bridge

Changedarif_bridge_connect3 fields changed

addedOutput schema / additionalProperties
```
Added value: +true
```

removedOutput schema / properties

Removed value: -{
-  "_nine_signal_compliant": {
-    "description": "Internal compliance flag",
-    "type": "boolean"
-  },
-  "_violations": {
-    "description": "Non-compliance audit trail",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "actor_id": {
-    "description": "Sovereign or agent actor ID",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "delta_S": {
-    "description": "Thermodynamic entropy change",
-    "type": "number"
-  },
-  "meta": {
-    "description": "Metadata including actor_id, mode, circuit",
-    "type": "object"
-  },
-  "nine_signal": {
-    "description": "F2 addendum nine-signal block",
-    "type": "object"
-  },
-  "output_policy": {
-    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
-    "type": "string"
-  },
-  "reasons": {
-    "description": "Human-readable justification list",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "result": {
-    "description": "Tool-specific payload",
-    "type": "object"
-  },
-  "session_id": {
-    "description": "Active session identifier",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "stage_progression": {
-    "description": "Next stage auto-chain hint",
-    "type": [
-      "object",
-      "null"
-    ]
-  },
-  "status": {
-    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
-    "type": "string"
-  },
-  "timestamp": {
-    "description": "ISO-8601 timestamp",
-    "type": "string"
-  },
-  "tool": {
-    "description": "Canonical tool name that produced this response",
-    "type": "string"
-  },
-  "verdict": {
-    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
-    "type": "string"
-  }
-}

removedOutput schema / required

Removed value: -[
-  "status",
-  "tool",
-  "verdict",
-  "result",
-  "nine_signal",
-  "reasons"
-]

Addedarif_compose
Removedarif_conformance_report
Addedarif_critique
Removedarif_evidence_fetch
Addedarif_forge
Removedarif_forge_execute
Removedarif_gateway_connect
Removedarif_heart_critique
Addedarif_init
Removedarif_initialize_probe
Addedarif_judge
Removedarif_judge_deliberate
Removedarif_kernel_attest
Removedarif_kernel_health
Removedarif_kernel_route
Removedarif_kernel_status
Addedarif_memory
Removedarif_memory_recall
Removedarif_mind_reason
Addedarif_observe
Removedarif_ops_measure
Removedarif_ping
Removedarif_reply_compose

Changedarif_route3 fields changed

addedOutput schema / additionalProperties
```
Added value: +true
```

removedOutput schema / properties

Removed value: -{
-  "_nine_signal_compliant": {
-    "description": "Internal compliance flag",
-    "type": "boolean"
-  },
-  "_violations": {
-    "description": "Non-compliance audit trail",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "actor_id": {
-    "description": "Sovereign or agent actor ID",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "delta_S": {
-    "description": "Thermodynamic entropy change",
-    "type": "number"
-  },
-  "meta": {
-    "description": "Metadata including actor_id, mode, circuit",
-    "type": "object"
-  },
-  "nine_signal": {
-    "description": "F2 addendum nine-signal block",
-    "type": "object"
-  },
-  "output_policy": {
-    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
-    "type": "string"
-  },
-  "reasons": {
-    "description": "Human-readable justification list",
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "result": {
-    "description": "Tool-specific payload",
-    "type": "object"
-  },
-  "session_id": {
-    "description": "Active session identifier",
-    "type": [
-      "string",
-      "null"
-    ]
-  },
-  "stage_progression": {
-    "description": "Next stage auto-chain hint",
-    "type": [
-      "object",
-      "null"
-    ]
-  },
-  "status": {
-    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
-    "type": "string"
-  },
-  "timestamp": {
-    "description": "ISO-8601 timestamp",
-    "type": "string"
-  },
-  "tool": {
-    "description": "Canonical tool name that produced this response",
-    "type": "string"
-  },
-  "verdict": {
-    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
-    "type": "string"
-  }
-}

removedOutput schema / required

Removed value: -[
-  "status",
-  "tool",
-  "verdict",
-  "result",
-  "nine_signal",
-  "reasons"
-]

Removedarif_schema_echo
Addedarif_seal
Removedarif_sense_observe
Removedarif_session_init
Addedarif_think
Removedarif_transport_echo
Removedarif_triage
Removedarif_vault_seal
Removedarif_version_echo

26 tool updatesv0.1.0Jun 21, 2026
- First observedarif_bridge
- First observedarif_bridge_connect
- First observedarif_conformance_report
- First observedarif_evidence_fetch
- First observedarif_forge_execute
- First observedarif_gateway_connect
- First observedarif_heart_critique
- First observedarif_initialize_probe
- First observedarif_judge_deliberate
- First observedarif_kernel_attest
- First observedarif_kernel_health
- First observedarif_kernel_route
- First observedarif_kernel_status
- First observedarif_memory_recall
- First observedarif_mind_reason
- First observedarif_ops_measure
- First observedarif_ping
- First observedarif_reply_compose
- First observedarif_route
- First observedarif_schema_echo
- First observedarif_sense_observe
- First observedarif_session_init
- First observedarif_transport_echo
- First observedarif_triage
- First observedarif_vault_seal
- First observedarif_version_echo

Deploy Server

Context Every Agent Can ShareAgents share what they learn, hand off work, and keep it when you switch models. Start with 5 GB free.fulcradynamics.comAd

TDQS

C2.5/5.0

Scored 2026-10-17 03:20 across 6 tools

Disambiguation4/5

The tools have distinct names for different cognitive stages (init, observe, think, judge, memory, route), but without detailed descriptions, the boundary between 'think' and 'judge' could be ambiguous to an agent. Overall, the purposes are mostly distinct.

Naming Consistency5/5

All tools follow a consistent 'arif_' prefix followed by a single verb or noun, creating a predictable and uniform naming pattern throughout.

Tool Count5/5

Six tools is a well-scoped number for a cognitive agent loop, covering essential functions (initialization, perception, reasoning, decision, memory, routing) without redundancy or bloat.

Completeness4/5

The set covers a full cognitive cycle from initialization to routing, but lacks an explicit action execution or learning tool, leaving minor gaps that agents might need to work around.

Maintenance

ActivityActive

ResponsivenessWithin a week

Resources

Need Help?

Related Servers

Related MCP Connectors

arifOS — Constitutional AI Kernel A
io.github.ariffazil
Constitutional AI kernel with 13 MCP tools, 888_JUDGE verdict pipeline, and VAULT999 ledger.
AI & Machine Learning Knowledge & Memory
83
NizhOAuth
com.nizh
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
Security Legal & Compliance
1
Atomadic MCP C
tech.atomadic
Atomadic MCP: 68 deterministic tools for agent identity, escrow, SLA, EU AI Act compliance.
Security Legal & Compliance Payments & Billing
681
GHOSBC Safety Gate
io.github.MisfitMEdiAhouse
Agent governance with A2A/Shopify/MCP trust audits, action screening, and decision UI.
Security Autonomous Agents
1

Related MCP Servers

dingdawg-governance
Agent Orchestration Security
dingdawg
A
license
A
quality
D
maintenance
Universal governance layer for AI agents — MCP-native, fail-closed, LNN interpretability. Governed receipts, IPFS audit proofs, and rollback for any agent in any framework.
Updated 2 months ago (2026-08-06 18:50 UTC)
3
38 npm
Apache 2.0
acf-mcp
Legal & Compliance Autonomous Agents AI & Machine Learning
acfstandard
A
license
Not graded
quality
B
maintenance
Enables AI agents to reason about the ACF governance standard for autonomous AI agents, providing structured assessments, regulatory compliance checks, and doctrine-based tools via MCP.
Updated 4 months ago (2026-06-15 01:47 UTC)
189 npm
MIT
arifosmcp
Agent Orchestration Knowledge & Memory
ariffazil
A
license
Not graded
quality
F
maintenance
Constitutional MCP server enforcing 13 Floors of governance for AI agents, providing tools for session anchoring, reasoning, safety critique, and audit logging.
Updated 6 months ago (2026-04-03 08:31 UTC)
AGPL 3.0
org-as-code MCP Server
Version Control Project Management Autonomous Agents
SYNTRIAD
A
license
Not graded
quality
D
maintenance
Enables AI agents to interact with a Git-native organizational governance system, supporting proposal-validation workflows, decision-making, and audit trail management through 21 MCP tools over stdio transport.
Updated 6 months ago (2026-04-08 19:29 UTC)
1
MIT