_ registry / mcp streamable-http · checked 3h ago

A-FORGE

https://forge.arif-fazil.com

Registry code: e0f60a8c9ef78d95

api record

A governance and orchestration server for coding agents that gates actions, runs pipelines, records evidence and writes to GitHub, vaults and skill stores.

endpoint
https://forge.arif-fazil.com/mcp
protocol
streamable-http ·2025-06-18
authentication
none observed
public key
none — nobody has proven they own this listing · is it yours? claim it
karma
0 · newcomer
_ is it live, free and safe measured by this hub
Is A-FORGE live?
Yes — it answered the hub's last check (checked 3h ago). It answered 98% of checks over the last 30 days.
Is A-FORGE free to use?
Yes — the hub reached it with no key and no payment.
What tools does A-FORGE have?
99 tools: forge_web_extract, forge_cool, forge_search, forge_memory, forge_sandbox_run, forge_execute_sealed, forge_compile_task, auth_pipeline, ….
Is A-FORGE safe to connect?
The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
reachable
live
uptime, 30 days
98.4%

90 days 96.6%· all time 96.6%

latency
1,660ms

last good check

priced tools
0

of 99 tools

_ answered our checks, 90 days 473 checks · signed record
  • degraded → live
  • live → degraded· timeout after 20000ms
  • degraded → live
  • live → degraded· timeout after 20000ms
  • degraded → live
_ what it is for
topic
ai & agents agent orchestration
used for
  • run governed agent pipelines
  • record agent experience traces
  • store artifacts with provenance
  • audit mcp tool surface
takes → gives
text, data → data
tools
9 reads9 changes data1 effect unclear
_ usage and payments 30 days

Calls placed through this hub's router, from its own receipts. Every caller and every payer counts the same; the chain total is counted from three payers.

accounts
0

through this hub

calls served
0

successful

paid through this hub
0 USDC

what callers paid

_ what it can do 99 tools
18 open 81 never probed 18 of 99 classified

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

  • forge_security_drift_scan open 2d ago

    ACTUATOR · probe · OBSERVE. Production security telemetry. Scans live ports/services/cron against Machine Constitution registry — flags unknown public ports, new systemd services, new cron jobs, rogue containers. OBSERVE-class; does not mutate. (Renamed from forge_boundaries_assert 2026-07-09.) Use when: Production security telemetry (renamed from forge_boundaries_assert).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "If true, any unknown public port or rogue container returns FAIL instead of WARN"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 55 lines
  • forge_rsi_impulse_response reads open 40d ago

    RSI P0 measurement — impulse response h(t). Measures how long 888_HOLD, scar seal, and tool failure events remain causally active in subsequent routing, tool selection, and budget allocation. Returns causal half-life in sessions. OBS-class. Use when: 'impulse response', 'HOLD influence', 'how long does a HOLD last', 'causal half-life', 'h(t)', 'RSI measurement'.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "window_days": {
      "type": "number",
      "default": 30,
      "maximum": 365,
      "minimum": 1,
      "description": "Lookback window in days (default: 30)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 57 lines
  • forge_rsi_dual_rate_fq open 40d ago

    RSI dual-rate FQ signal. Returns both daily FQ (cockpit telemetry, observational) and 7-day rolling FQ (governance decisions, constitutional). Daily FQ is aliased for weekly governance cycles — use governance_fq for constitutional decisions. OBS-class. Use when: 'FQ governance', 'dual rate', 'aliased FQ', '7-day FQ', 'governance signal'.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "min_governance_samples": {
      "type": "number",
      "default": 10,
      "minimum": 1,
      "description": "Minimum receipts in 7-day window for reliable signal (default: 10)"
    }
  },
  "additionalProperties": false
}
    arguments 56 lines
  • forge_registry_status open 40d ago

    ACTUATOR · registry · OBSERVE. Full A-FORGE tool registry: callable, blocked, degraded, and drift status for all registered tools. Includes tool fingerprinting for dedupe detection.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_scar changes data open 2d ago

    ACTUATOR · vault · OBSERVE. APEX v36Ω scar metabolization gate. Seals failures as permanent constitutional constraints. Modes: seal (record failure), list (enumerate scars), consult (check fingerprint for matching scars). SCAR LAW: errors are metabolized into constitutional constraints. Pain = ΔS spike. Learning = cooling. F1 AMANAH: scars are immutable once sealed.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "seal",
        "list",
        "consult"
      ],
      "type": "string",
      "default": "list"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "well",
        "arifos",
        "hermes",
        "aforge",
        "general"
      ],
      "type": "string",
      "description": "Domain (seal/list mode)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "severity": {
      "enum": [
        "LOW",
        "MEDIUM",
        "HIGH",
        "CRITICAL"
      ],
      "type": "string",
      "description": "Severity (seal mode)"
    },
    "sealed_by": {
      "type": "string",
      "default": "forge_scar",
      "description": "Who sealed this scar"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "fingerprint": {
      "type": "string",
      "description": "Fingerprint to consult (consult mode)"
    },
    "failure_mode": {
      "type": "string",
      "description": "Description of the failure (seal mode)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "scar_pressure": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "Scar pressure ∈ [0,1] (seal mode)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "detection_method": {
      "type": "string",
      "description": "How the failure was detected (seal mode)"
    },
    "constraint_imposed": {
      "type": "string",
      "description": "What constraint this scar imposes (seal mode)"
    }
  },
  "additionalProperties": false
}
    arguments 109 lines
  • forge_policy open 40d ago

    ACTUATOR · registry · OBSERVE. Governed MCP Policy Engine. Modes: check (simulate call), set (add/update policy, sovereign-only), remove (delete policy, sovereign-only), list (show loaded policies), save (persist policies to disk, sovereign-only). F1 AMANAH + F8 LAW + F11 AUDIT + F13 SOVEREIGN.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "check",
        "set",
        "remove",
        "list",
        "save"
      ],
      "type": "string",
      "default": "list",
      "description": "Policy operation mode"
    },
    "role": {
      "type": "string",
      "description": "Role label"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "arguments": {
      "type": "object",
      "description": "Planned tool arguments",
      "additionalProperties": {}
    },
    "policy_id": {
      "type": "string",
      "description": "Policy ID to set or remove"
    },
    "tool_name": {
      "type": "string",
      "description": "Tool to check, e.g. 'postgres_query'"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "description": {
      "type": "string",
      "description": "Policy description"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "allow_by_default": {
      "type": "boolean",
      "description": "Allow by default flag"
    },
    "denied_mcp_servers": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Denied servers array"
    },
    "allowed_mcp_servers": {
      "type": "object",
      "description": "Allowed servers map",
      "additionalProperties": {}
    }
  },
  "additionalProperties": false
}
    arguments 99 lines
  • forge_document_ingest open 41d ago

    ACTUATOR · meta · OBSERVE. Document intelligence engine — layout-first parsing with bounding-box provenance. Modes: analyze — Layout analysis only. Return structure tree with element types and positions. extract — Full pipeline: layout + text extraction + structured JSON with bbox coordinates. chunk — Extract then semantic chunk for RAG consumption (strategies: semantic, section, page). compare — Diff two documents (structural + text similarity). Formats: PDF + images (pymupdf/OCR) AND text/json/md/yaml/source (native text pipeline). Paths: prefer /root or /root/A-FORGE. Host /tmp is PrivateTmp-isolated — use content_base64 or stage under A-FORGE data. Blast radius: LOW (read-only). Reversibility: FULL.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "ocr": {
      "type": "boolean",
      "default": false,
      "description": "Enable Tesseract OCR for scanned/image-based pages (eng+msa)"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "analyze",
        "extract",
        "chunk",
        "compare"
      ],
      "type": "string",
      "default": "extract",
      "description": "Processing mode"
    },
    "pages": {
      "type": "string",
      "description": "Page range, e.g. '0-5' or single page '3'"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "overlap": {
      "type": "number",
      "default": 200,
      "description": "Chunk overlap in characters (chunk mode)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "file_path": {
      "type": "string",
      "description": "Absolute path to the document (prefer /root or /root/A-FORGE)"
    },
    "chunk_size": {
      "type": "number",
      "default": 1200,
      "description": "Maximum chunk size in characters (chunk mode)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "compare_with": {
      "type": "string",
      "description": "Second file path for 'compare' mode"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "output_format": {
      "enum": [
        "json",
        "jsonl"
      ],
      "type": "string",
      "default": "json",
      "description": "Output format"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "chunk_strategy": {
      "enum": [
        "semantic",
        "section",
        "page"
      ],
      "type": "string",
      "default": "semantic",
      "description": "Chunk strategy for 'chunk' mode"
    },
    "content_base64": {
      "type": "string",
      "description": "Optional base64 file bytes when path is outside service FS (e.g. host /tmp)"
    }
  },
  "additionalProperties": false
}
    arguments 111 lines
  • forge_health_check open 41d ago

    ACTUATOR · health · OBSERVE. Return A-FORGE server health and constitutional genome (v2.0) status.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_probe open 40d ago

    ACTUATOR · probe · OBSERVE. Federation organ liveness. Probes all 5 organs + latency. OBSERVE-class. P2.1 canonical gap fill. (2026-09-20: arifflow + frame added — both daemons live on :7073 and :18085 but were excluded from probe enum/targets.)

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "organs": {
      "type": "array",
      "items": {
        "enum": [
          "arifos",
          "geox",
          "wealth",
          "well",
          "aforge",
          "aaa",
          "arifflow",
          "frame"
        ],
        "type": "string"
      },
      "description": "Organs to probe (default: all except self)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "include_latency": {
      "type": "boolean",
      "default": true,
      "description": "Include latency measurement"
    }
  },
  "additionalProperties": false
}
    arguments 72 lines
  • forge_fetch open 41d ago

    ACTUATOR · research · OBSERVE. Governed URL evidence intake and self-hosted web search — fetch URLs as markdown, text, JSON, or article extraction, or search via SearxNG. Use when: Governed URL evidence intake + self-hosted web search. Modes: html, markdown, text, json, readable,.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "url": {
      "type": "string",
      "format": "uri",
      "description": "URL to fetch (must be public http/https). Omit when using `query` for search."
    },
    "mode": {
      "enum": [
        "html",
        "markdown",
        "text",
        "json",
        "readable",
        "metadata",
        "links",
        "search"
      ],
      "type": "string",
      "default": "readable",
      "description": "html=raw HTML, markdown=Readability+html-to-markdown, text=plain stripped, json=parse as JSON, readable=article extraction, metadata=extract meta tags+title+author, links=extract all anchor links, search=SearxNG web search (use with `query` parameter)"
    },
    "query": {
      "type": "string",
      "description": "Search query string. When provided, routes through self-hosted SearxNG instead of URL fetch."
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "max_chars": {
      "type": "number",
      "default": 50000,
      "description": "Maximum characters to return"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "timeout_ms": {
      "type": "number",
      "default": 15000,
      "description": "Request timeout in ms"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "num_results": {
      "type": "number",
      "default": 10,
      "description": "Number of search results to return (max 20, only when `query` is set)."
    },
    "searxng_url": {
      "type": "string",
      "description": "SearxNG base URL (default: http://localhost:8080). Only used when `query` is set."
    },
    "start_index": {
      "type": "number",
      "default": 0,
      "description": "Start reading from this character index (chunked reading)"
    },
    "include_links": {
      "type": "boolean",
      "default": true,
      "description": "Include extracted links in readable/markdown modes"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "egress_profile": {
      "enum": [
        "default",
        "direct",
        "mubeng",
        "corp-proxy",
        "tor"
      ],
      "type": "string",
      "default": "default",
      "description": "Egress profile for outbound HTTP. 'default'/'direct' = direct connect. 'mubeng'/'corp-proxy'/'tor' = future proxy actuators (currently return BLOCKED with reason). The socket is forged; actuators attach when needed."
    },
    "scan_injection": {
      "type": "boolean",
      "default": true,
      "description": "Scan for prompt-injection patterns"
    },
    "follow_redirects": {
      "type": "boolean",
      "default": true,
      "description": "Follow HTTP redirects"
    },
    "include_metadata": {
      "type": "boolean",
      "default": true,
      "description": "Include metadata envelope in response"
    },
    "cache_ttl_seconds": {
      "type": "number",
      "default": 300,
      "maximum": 3600,
      "minimum": 0,
      "description": "Cache TTL in seconds (0 = no cache, default 300, max 3600). Cached by sha256(url|query|mode|egress_profile). L1/L2 ephemeral (process memory)."
    },
    "max_response_bytes": {
      "type": "number",
      "default": 5000000,
      "description": "Max response body size in bytes (SSRF protection)"
    },
    "disable_readability": {
      "type": "boolean",
      "default": false,
      "description": "Skip Readability extraction, use basic stripping"
    }
  },
  "additionalProperties": false
}
    arguments 147 lines
  • forge_fingerprint_check reads open 41d ago

    ACTUATOR · probe · OBSERVE. Compute and verify tool fingerprints. Detects duplicate tools (same name + schema) and schema drift.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_experience_query open 41d ago

    Query experience traces. Returns traces filtered by agent, tool, or feedback type. Read-only. Use to analyze experience patterns and identify improvement opportunities.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "tool": {
      "type": "string",
      "description": "Filter by tool name"
    },
    "limit": {
      "type": "number",
      "default": 20,
      "description": "Max traces to return"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Filter by agent ID"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "has_feedback": {
      "enum": [
        "self",
        "environmental",
        "constitutional",
        "any"
      ],
      "type": "string",
      "description": "Filter traces that have a specific feedback channel"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 73 lines
  • forge_registry open 40d ago

    ACTUATOR · registry · OBSERVE. Dynamic skill and tool registry. Modes: status (live MCP server & tools overview), list (all generated tools + Decision Field), get (one tool manifest), scars (Scar Law history), fingerprint (registry integrity hash), scan (HARAM scan arbitrary code). Use when: Dynamic skill registry. Modes: list (all generated tools + Decision Field), get (one tool manifest),.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "status",
        "list",
        "get",
        "scars",
        "fingerprint",
        "scan"
      ],
      "type": "string",
      "default": "status"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "well",
        "arifos",
        "hermes",
        "aforge",
        "general"
      ],
      "type": "string",
      "description": "Filter by domain (list mode)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "tool_name": {
      "type": "string",
      "description": "Tool name (get mode)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "code_to_scan": {
      "type": "string",
      "description": "Source code to HARAM-scan (scan mode)"
    },
    "include_theta": {
      "type": "boolean",
      "default": false,
      "description": "Include wisdom trajectory Θ=dΦ/dt per tool (list mode)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "status_filter": {
      "enum": [
        "REGISTERED",
        "PENDING_REVIEW",
        "REVOKED",
        "EXPIRED"
      ],
      "type": "string",
      "description": "Filter by status (list mode)"
    }
  },
  "additionalProperties": false
}
    arguments 98 lines
  • forge_parallel_list open 40d ago

    List all task groups with their status. For monitoring and debugging.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "status_filter": {
      "enum": [
        "running",
        "completed",
        "timed_out",
        "canceled",
        "all"
      ],
      "type": "string",
      "default": "all",
      "description": "Filter by group status"
    }
  },
  "additionalProperties": false
}
    arguments 62 lines
  • forge_entropy_sweep reads open 41d ago

    Measure workspace entropy (ΔS) across the federation. Reports file count, uncommitted changes, temp files, dead processes, and entropy hotspots. Classification: OBSERVE (read-only).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "path": {
      "type": "string",
      "default": "/root",
      "description": "Root path to sweep"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "max_depth": {
      "type": "number",
      "default": 3,
      "description": "Directory depth"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "include_hidden": {
      "type": "boolean",
      "default": false
    }
  },
  "additionalProperties": false
}
    arguments 64 lines
  • forge_isomorphism_check open 41d ago

    ACTUATOR · probe · OBSERVE. J‑space manifold stability check. Verifies GEOX ↔ arifOS isomorphism pairs (Identity, Authority, Irreversibility) through runtime witness functions.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_rsi_state_vector open 40d ago

    RSI state vector snapshot. Returns current s_t = (identity, plant, memory, controller) for the active session. Read-only — state vector is computed from live traces, not stored. OBS-class. Use when: 'state vector', 'RSI snapshot', 's_t', 'controller state', 'Imp state'.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "include_controller": {
      "type": "boolean",
      "default": true,
      "description": "Include Imp controller state (default: true)"
    }
  },
  "additionalProperties": false
}
    arguments 55 lines
  • forge_chain_state open 8d ago

    Canonical VAULT999 chain heartbeat — computed from chain bytes at read time. Returns ONE silence number (hours since newest record), phantom-seq detection (declared head seq vs seq fields actually present in rows), and declared-vs-observed divergence findings. Supersedes every ad-hoc heartbeat computation; do not compute silence from seal_chain_head.json or tasks.json — read this. Read-only (OBSERVE class).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "stale_threshold_h": {
      "type": "number",
      "default": 72,
      "description": "Hours without a new record before status=STALE (default 72)"
    },
    "silent_threshold_h": {
      "type": "number",
      "default": 168,
      "description": "Hours without a new record before status=SILENT (default 168 = 1 week)"
    }
  },
  "additionalProperties": false
}
    arguments 60 lines
  • forge_web_extract unknown never probed

    Full-capability agentic web extraction — auto-SPA-rendering, browser actions, authenticated sessions, downloads. All agents. DITEMPA BUKAN DIBERI.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "url",
    "request_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "url": {
      "type": "string",
      "description": "URL to extract content from"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "render": {
      "enum": [
        "auto",
        "never",
        "always"
      ],
      "type": "string",
      "default": "auto",
      "description": "Rendering mode: auto=detect SPA, never=static only, always=browser render"
    },
    "actions": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "type"
        ],
        "properties": {
          "type": {
            "enum": [
              "click",
              "type",
              "select",
              "wait",
              "scroll",
              "download",
              "screenshot"
            ],
            "type": "string"
          },
          "value": {
            "type": "string",
            "description": "Value for type/select actions or URL for download"
          },
          "wait_ms": {
            "type": "number",
            "description": "Wait time in ms"
          },
          "selector": {
            "type": "string",
            "description": "CSS selector for the target element"
          }
        },
        "additionalProperties": false
      },
      "description": "Browser actions to perform after navigation"
    },
    "cookies": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "name",
          "value"
        ],
        "properties": {
          "name": {
            "type": "string"
          },
          "path": {
            "type": "string"
          },
          "value": {
            "type": "string"
          },
          "domain": {
            "type": "string"
          }
        },
        "additionalProperties": false
      },
      "description": "Cookies to set before navigation"
    },
    "headers": {
      "type": "object",
      "description": "Additional HTTP headers for the request",
      "additionalProperties": {
        "type": "string"
      }
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "download": {
      "type": "boolean",
      "default": false,
      "description": "Download URL content to /tmp/forge-downloads/"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "max_chars": {
      "type": "number",
      "default": 50000,
      "maximum": 200000,
      "minimum": 100,
      "description": "Max characters to return"
    },
    "request_id": {
      "type": "string",
      "description": "Caller request ID"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "timeout_ms": {
      "type": "number",
      "default": 30000,
      "maximum": 120000,
      "minimum": 1000,
      "description": "Total timeout in ms"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 161 lines
  • forge_cool unknown 41d ago

    Emit a COOLING_RECEIPT. verb=drift for single convergence signal; verb=pattern for observed failure recurrence. Routes through seal_chain.js validateCooling() → VAULT999 append. INV-C1: observation semantics, no execution — durable side effect: APPENDS a draft receipt to VAULT999 (never a constitutional SEAL). INV-C2: no forge caller. INV-C3: COLD_LINK. INV-C4: explicit governance.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "verb",
    "original_seal_seq",
    "original_verdict",
    "judge_hash",
    "judge_summary",
    "drift_dimension",
    "drift_delta",
    "epistemic_label",
    "severity",
    "hypothesis",
    "evidence",
    "governance_organ",
    "governance_floor",
    "required_authority",
    "convergence"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "verb": {
      "enum": [
        "drift",
        "pattern"
      ],
      "type": "string",
      "description": "drift=single convergence signal, pattern=observed failure recurrence"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "caller": {
      "type": "string",
      "description": "Override caller (default: hermes-prime)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "evidence": {
      "type": "string",
      "description": "What supports this hypothesis"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "severity": {
      "enum": [
        "INFO",
        "MINOR",
        "SIGNIFICANT",
        "CRITICAL"
      ],
      "type": "string",
      "description": "Drift severity"
    },
    "last_seen": {
      "type": "string",
      "description": "ISO-8601 timestamp of most recent observation (pattern only)"
    },
    "first_seen": {
      "type": "string",
      "description": "ISO-8601 timestamp of first observation (pattern only)"
    },
    "hypothesis": {
      "type": "string",
      "description": "What the cooling suggests would fix this drift"
    },
    "judge_hash": {
      "type": "string",
      "description": "SHA-256 of the arif_judge verdict envelope"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "convergence": {
      "enum": [
        "CONVERGING",
        "DIVERGING",
        "STABLE",
        "first_cooling"
      ],
      "type": "string",
      "description": "Convergence state"
    },
    "drift_delta": {
      "type": "string",
      "description": "What Reality saw that the plan didn't predict"
    },
    "judge_summary": {
      "type": "string",
      "description": "1-line summary of what 888 decided"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "witness_organ": {
      "enum": [
        "GEOX",
        "WEALTH",
        "WELL",
        "arifOS",
        "A-FORGE",
        "AAA"
      ],
      "type": "string",
      "description": "Domain organ that witnessed the drift/pattern (GEOX/WEALTH/WELL for physical grounding)"
    },
    "drift_dimension": {
      "enum": [
        "runtime_commit",
        "tool_behavior",
        "memory_staleness",
        "authority_leak",
        "unexpected_output",
        "timing_anomaly",
        "prediction_failure",
        "human_reaction",
        "other"
      ],
      "type": "string",
      "description": "Dimension where drift was detected"
    },
    "epistemic_label": {
      "enum": [
        "OBS",
        "DER",
        "INT"
      ],
      "type": "string",
      "description": "Epistemic label for drift claim"
    },
    "governance_floor": {
      "type": "string",
      "description": "Target floor: F1-F13"
    },
    "governance_organ": {
      "enum": [
        "arifOS",
        "A-FORGE",
        "AAA",
        "GEOX",
        "WEALTH",
        "WELL"
      ],
      "type": "string",
      "description": "Target organ"
    },
    "original_verdict": {
      "type": "string",
      "description": "Original verdict: SEAL|HOLD|SABAR|VOID"
    },
    "recurrence_count": {
      "type": "integer",
      "minimum": 1,
      "description": "How many times this pattern has been observed (pattern only)"
    },
    "original_seal_seq": {
      "type": "integer",
      "description": "Seq of the SEAL being cooled"
    },
    "required_authority": {
      "enum": [
        "AUTO",
        "OBSERVE_ONLY",
        "888_HOLD",
        "F13_SOVEREIGN"
      ],
      "type": "string",
      "description": "Required authority level"
    }
  },
  "additionalProperties": false
}
    arguments 202 lines
  • forge_search reads unknown 2d ago

    ACTUATOR · research · OBSERVE. Unified governed search across web (Brave), documentation (Context7), and deep research with provenance and epistemic labels. Use when: Governed web search via Brave. OBSERVE-class.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "query"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "count": {
      "type": "number",
      "default": 10,
      "maximum": 50,
      "minimum": 1,
      "description": "Result count"
    },
    "query": {
      "type": "string",
      "maxLength": 500,
      "description": "Search or research query"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "corpus": {
      "enum": [
        "arifos",
        "geox",
        "wealth",
        "well",
        "aforge",
        "cloudflare",
        "workers",
        "all"
      ],
      "type": "string",
      "default": "all",
      "description": "Corpus filter when source is 'docs'"
    },
    "source": {
      "enum": [
        "web",
        "docs",
        "research",
        "all"
      ],
      "type": "string",
      "default": "web",
      "description": "Search source: 'web' (Brave), 'docs' (Context7 library docs), 'research' (deep synthesis), 'all' (multi-source)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "freshness": {
      "enum": [
        "any",
        "day",
        "week",
        "month",
        "year"
      ],
      "type": "string",
      "default": "any",
      "description": "Freshness horizon"
    },
    "request_id": {
      "type": "string",
      "description": "Optional caller request ID for audit tracing"
    },
    "safesearch": {
      "enum": [
        "off",
        "moderate",
        "strict"
      ],
      "type": "string",
      "default": "moderate",
      "description": "SafeSearch mode"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "synthesize": {
      "type": "boolean",
      "default": false,
      "description": "Synthesize results (legacy FLAME lane decommissioned 2026-09-04; falls back to raw results)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 122 lines
  • forge_memory unknown 41d ago

    ACTUATOR · memory · OBSERVE. Canonical memory primitive — recall from L3 semantic layer (Qdrant vectors + capability registry) with Supabase vault fallback. SRO v1 admissibility gate: arifos_memory results are filtered by the federation policy (default = currently-valid only; include_historical=true admits EXPIRED/SUPERSEDED, each labelled HISTORICAL). Use when: Canonical memory primitive. Modes: recall. Reads VAULT999 local files, then vault999-api fallback.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "query"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "recall"
      ],
      "type": "string",
      "default": "recall"
    },
    "limit": {
      "type": "number",
      "default": 10
    },
    "query": {
      "type": "string"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "include_historical": {
      "type": "boolean",
      "default": false
    }
  },
  "additionalProperties": false
}
    arguments 71 lines
  • forge_sandbox_run unknown never probed

    ACTUATOR · execute · MUTATE. Execute staged artifact in isolated sandbox. ABSOLUTE timeout — cannot be overridden.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "stage_id",
    "test_suite",
    "resource_limits",
    "absolute_timeout_ms"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "stage_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "test_suite": {
      "type": "string",
      "description": "Test suite to execute (pytest, jest, shell script, etc.)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "resource_limits": {
      "type": "object",
      "required": [
        "cpu_cores",
        "memory_mb",
        "timeout_ms"
      ],
      "properties": {
        "cpu_cores": {
          "type": "number",
          "maximum": 4,
          "minimum": 1
        },
        "memory_mb": {
          "type": "number",
          "maximum": 4096,
          "minimum": 128
        },
        "timeout_ms": {
          "type": "number",
          "maximum": 1800000,
          "minimum": 10000
        },
        "network_access": {
          "type": "boolean",
          "default": false
        }
      },
      "additionalProperties": false
    },
    "absolute_timeout_ms": {
      "type": "number",
      "maximum": 1800000,
      "minimum": 10000,
      "description": "Hard timeout (prevents infinite loops)"
    }
  },
  "additionalProperties": false
}
    arguments 100 lines
  • forge_execute_sealed unknown never probed

    ACTUATOR · execute · MUTATE. Execute with VAULT999 seal or governance stage (stage_id + human_seal_token). FAILS HARD without valid authorization. Use when: Execute with VAULT999 seal. FAILS HARD without valid seal — no self-authorization possible.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "action": {
      "type": "string",
      "description": "Action to execute (e.g., 'deploy', 'restart', 'git_push')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "stage_id": {
      "type": "string",
      "description": "Stage ID from the governance two-phase path (forge_stage RETIRED 2026-10-18 — only pre-retirement stages can execute). Prefer docket_id + vault_seal_id."
    },
    "docket_id": {
      "type": "string",
      "format": "uuid",
      "description": "Docket ID (legacy FORGE8 path)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "vault_seal_id": {
      "type": "string",
      "format": "uuid",
      "description": "ID of VAULT999 SEAL (must be from arifOS)"
    },
    "human_seal_token": {
      "type": "string",
      "minLength": 16,
      "description": "F13 sovereign approval token from UI SEAL button"
    },
    "execution_parameters": {
      "type": "object",
      "description": "Runtime parameters for the artifact",
      "additionalProperties": {}
    },
    "vault_seal_signature": {
      "type": "string",
      "description": "Cryptographic signature from VAULT999"
    },
    "vault_seal_timestamp": {
      "type": "string",
      "format": "date-time",
      "description": "When the SEAL was issued"
    }
  },
  "additionalProperties": false
}
    arguments 87 lines
  • forge_compile_task unknown never probed

    Compile a coding intent into an immutable TaskIR (over arif_route.444). Returns task_id and sha256 hash. TaskIR is frozen at creation time.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "task_ir"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "task_ir": {
      "type": "object",
      "required": [
        "task_id",
        "intent",
        "risk_class"
      ],
      "properties": {
        "budget": {
          "type": "object",
          "default": {},
          "properties": {
            "max_total_usd": {
              "type": "number",
              "default": 0.75,
              "minimum": 0
            },
            "max_repair_loops": {
              "type": "integer",
              "default": 3,
              "minimum": 0
            },
            "max_premium_calls": {
              "type": "integer",
              "default": 2,
              "minimum": 0
            }
          },
          "additionalProperties": false
        },
        "intent": {
          "type": "string",
          "maxLength": 2000,
          "minLength": 1
        },
        "task_id": {
          "type": "string",
          "pattern": "^forge-\\d{8}-[a-z0-9-]+$"
        },
        "evidence": {
          "type": "object",
          "default": {},
          "properties": {
            "observed": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "hypotheses": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "contradictions": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "excluded_files": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "candidate_files": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            }
          },
          "additionalProperties": false
        },
        "non_goals": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "invariants": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "risk_class": {
          "enum": [
            "read",
            "patch",
            "service",
            "deploy",
            "secret-adjacent",
            "auth"
          ],
          "type": "string"
        },
        "verification": {
          "type": "object",
          "default": {},
          "properties": {
            "exit_criteria": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "quality_commands": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "baseline_commands": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "reproduce_commands": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            }
          },
          "additionalProperties": false
        },
        "repository_ref": {
          "type": "object",
          "required": [
            "repo",
            "commit"
          ],
          "properties": {
            "repo": {
              "type": "string"
            },
            "commit": {
              "type": "string"
            },
            "worktree": {
              "type": "string",
              "default": "isolated"
            }
          },
          "additionalProperties": false
        },
        "prohibited_actions": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "acceptance_criteria": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        }
      },
      "additionalProperties": false
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 231 lines
  • auth_pipeline changes data unknown 41d ago

    AUTH INSTITUTIONAL PROTOCOL — the non-bypassable workflow that governs transitions from OBSERVE to MUTATE to DEPLOY. THE THREE LAWS: OBSERVE is free. (no contract needed) MUTATE is governed. (contract + lease + evidence + receipt) DEPLOY is sealed. (full pipeline + 555 verify + 888 judge + Lane A seal) PIPELINE: DECLARE → FQ_GATE → LEASE → LOCK → RUNTIME_VERIFY → EXECUTE → EVIDENCE → VERIFY → JUDGE → MERGE → SEAL → INGEST AUTH governs transitions, not agents. Claude Code + OBSERVE needs no contract. Kimi + MUTATE needs the same contract as any other agent. The institution does not care WHO holds the scalpel — only whether the cut requires a contract.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "contract"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "dry_run": {
      "type": "boolean",
      "default": false
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "contract": {
      "type": "object",
      "required": [
        "task_id",
        "objective",
        "acceptance_criteria",
        "evidence_required"
      ],
      "properties": {
        "target": {
          "type": "string",
          "maxLength": 200,
          "minLength": 1,
          "description": "Target repository or organ path"
        },
        "context": {
          "type": "string",
          "maxLength": 10000,
          "description": "Additional context, constraints, or specifications"
        },
        "task_id": {
          "type": "string",
          "maxLength": 64,
          "minLength": 3,
          "description": "Unique task identifier, e.g. 'AUTH_001'"
        },
        "authority": {
          "type": "object",
          "default": {
            "requested_by": "ARIF"
          },
          "properties": {
            "approved_by": {
              "type": "string",
              "description": "Who approved this task (if different from requester)"
            },
            "delegated_to": {
              "type": "string",
              "description": "Worker agent this task is delegated to"
            },
            "requested_by": {
              "type": "string",
              "default": "ARIF",
              "description": "Who requested this task"
            }
          },
          "description": "Authority chain for this task",
          "additionalProperties": false
        },
        "objective": {
          "type": "string",
          "maxLength": 500,
          "minLength": 10,
          "description": "What this task aims to accomplish"
        },
        "risk_tier": {
          "enum": [
            "low",
            "medium",
            "high",
            "critical"
          ],
          "type": "string",
          "default": "low",
          "description": "Risk classification"
        },
        "depends_on": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Task IDs that must complete before this one"
        },
        "reversible": {
          "type": "boolean",
          "default": true,
          "description": "Whether the task can be rolled back after execution"
        },
        "timeout_ms": {
          "type": "integer",
          "default": 300000,
          "maximum": 900000,
          "description": "Maximum execution time (default 5 min, max 15 min)",
          "exclusiveMinimum": 0
        },
        "worker_role": {
          "enum": [
            "builder",
            "reviewer",
            "security",
            "architect",
            "tester"
          ],
          "type": "string",
          "default": "builder",
          "description": "Role of the worker acquiring the lease"
        },
        "action_class": {
          "enum": [
            "OBSERVE",
            "MUTATE",
            "DEPLOY"
          ],
          "type": "string",
          "default": "MUTATE",
          "description": "OBSERVE=free, MUTATE=governed, DEPLOY=sealed"
        },
        "merge_policy": {
          "enum": [
            "auto",
            "require_555_verification",
            "require_888_seal",
            "require_f13_ack"
          ],
          "type": "string",
          "default": "require_555_verification",
          "description": "Who must approve before changes are merged"
        },
        "requested_by": {
          "type": "string",
          "default": "ARIF",
          "description": "Who requested this task (F13 sovereign default)"
        },
        "seal_required": {
          "type": "boolean",
          "default": false,
          "description": "If true, task must be sealed to VAULT999 (Lane A)"
        },
        "evidence_required": {
          "type": "array",
          "items": {
            "enum": [
              "diff",
              "test_output",
              "benchmark",
              "screenshot",
              "log",
              "receipt"
            ],
            "type": "string"
          },
          "maxItems": 6,
          "minItems": 1,
          "description": "Types of evidence that must be produced"
        },
        "authorized_workers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Specific worker agents authorized (empty = any)"
        },
        "acceptance_criteria": {
          "type": "array",
          "items": {
            "type": "string",
            "maxLength": 200,
            "minLength": 5
          },
          "maxItems": 10,
          "minItems": 1,
          "description": "List of criteria that must be satisfied for task completion"
        },
        "constitutional_class": {
          "enum": [
            "read",
            "write",
            "execute",
            "mutation",
            "deploy"
          ],
          "type": "string",
          "default": "mutation",
          "description": "Constitutional action class: read=OBSERVE, write=MUTATE, execute=MUTATE, mutation=MUTATE, deploy=DEPLOY"
        }
      },
      "additionalProperties": false
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "worker_agent": {
      "type": "string"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 238 lines
  • forge_ephemeral unknown 41d ago

    Ephemeral Tool Genesis — the capability metabolism engine. Generates TEMPORARY tools from templates for one mission, then dissolves. 9 MODES (default lifecycle: inspect_gap → generate → sandbox_test → invoke → verify → retire): • inspect_gap — Detect what capability is missing (use first). • generate — Create ephemeral tool from a template. • sandbox_test — Verify in bwrap-backed sandbox (fail-closed if no backend). • invoke — Execute the ephemeral tool (sandboxed). • verify — Independent verification. SELF_CERTIFIED is INADMISSIBLE. Accepted methods: known_answer | schema_invariant | independent_recompute | domain_witness. • retire — Cleanup. Temporary capability is REMOVED unless promoted. • list_templates — Browse the template registry. • list_active — List currently-active ephemeral tools + cleanup expired. • propose_promotion — Mark a template as recommended (after threshold + F13). EVIDENCE & PROMOTION (P0.3 + F13): • A tool becomes permanent ONLY if: it survives sandbox_test, invoke, AND an independent verify, AND the template reaches promotionThreshold, AND F13 SOVEREIGN ratifies the proposal. • SELF_CERTIFIED verification is REJECTED as inadmissible for promotion. CONTAINMENT (P0.4 — fail-closed): • sandbox_test / invoke use the bwrap-backed ExecutionSandbox. • No backend → tool state becomes 'failed' (NOT a green skip). USE WHEN: 'I need to do X but no tool exists' — the federation synthesizes capability on demand. After the mission, retire it. Capability was metabolized, not accumulated.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "inspect_gap",
        "generate",
        "sandbox_test",
        "invoke",
        "verify",
        "retire",
        "list_templates",
        "list_active",
        "propose_promotion"
      ],
      "type": "string",
      "description": "Operation mode. Default lifecycle: inspect_gap → generate → sandbox_test → invoke → verify → retire. Use 'list_templates' first to discover what is available; use 'list_active' to see ephemeral state. After the mission, call 'retire' so the capability is metabolized, not accumulated."
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "tool_id": {
      "type": "string",
      "description": "Ephemeral tool ID (sandbox_test, invoke, verify, retire modes)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "project_id": {
      "type": "string",
      "description": "Optional project label (P2B). Recorded in telemetry and result metadata only. If omitted, telemetry records projectId='UNKNOWN' — do NOT invent one."
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "invoke_args": {
      "type": "object",
      "description": "Arguments to pass to the ephemeral tool (invoke mode)",
      "additionalProperties": {}
    },
    "template_id": {
      "type": "string",
      "description": "Template ID to instantiate (generate mode). Use list_templates to discover."
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "existing_tools": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of currently available tools (inspect_gap mode)"
    },
    "mission_intent": {
      "type": "string",
      "description": "What mission this tool serves (generate mode)"
    },
    "capability_need": {
      "type": "string",
      "description": "What capability is needed (inspect_gap mode)"
    },
    "template_params": {
      "type": "object",
      "description": "Parameters to bind to the template (generate mode)",
      "additionalProperties": {}
    }
  },
  "additionalProperties": false
}
    arguments 105 lines
  • forge_trust_score unknown never probed

    ACTUATOR · governance · OBSERVE. Trust scoring engine for external MCP servers. Scores on 5 dimensions (identity, uptime, auditability, mutation_risk, witnessability), maps to bands (ALLOW/LIMITED/HOLD/DENY), and gates access. Modes: score, evaluate, list, history, verify. Constitutional: F2 TRUTH, F7 HUMILITY, F11 AUDIT, F13 SOVEREIGN. Use when: ACTUATOR [governance/OBSERVE] Trust scoring engine for external MCP servers. Scores on 5 dimensions (identity, uptime, auditability, mutation_risk, witnessability), maps to bands (ALLOW/LIMITED/HOLD/DENY), and gates access. Modes: score, evaluate, list, history, verify. Constitutional: F2 TRUTH, F7 HUMILITY, F11 AUDIT, F13 SOVEREIGN.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "band": {
      "enum": [
        "ALLOW",
        "LIMITED",
        "HOLD",
        "DENY"
      ],
      "type": "string",
      "description": "Filter by band (for list mode)"
    },
    "mode": {
      "enum": [
        "score",
        "evaluate",
        "list",
        "history",
        "verify"
      ],
      "type": "string",
      "description": "Operation mode"
    },
    "limit": {
      "type": "number",
      "description": "Limit history rows returned"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "mcp_id": {
      "type": "string",
      "description": "MCP server identifier (required for score/evaluate/history/verify)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "endpoint": {
      "type": "string",
      "description": "MCP endpoint URL or path"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "mcp_name": {
      "type": "string",
      "description": "Human-readable name"
    },
    "transport": {
      "enum": [
        "stdio",
        "streamable-http",
        "sse"
      ],
      "type": "string",
      "description": "Transport type"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "declared_tools": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Tools declared by the MCP server"
    },
    "mutation_class": {
      "enum": [
        "read-only",
        "write",
        "admin",
        "unknown"
      ],
      "type": "string",
      "description": "Mutation risk class"
    },
    "observed_tools": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Tools actually observed via probe"
    },
    "has_otel_traces": {
      "type": "boolean",
      "description": "Whether MCP emits OTel traces"
    },
    "identity_verified": {
      "type": "boolean",
      "description": "Whether identity is cryptographically verified"
    },
    "has_receipt_support": {
      "type": "boolean",
      "description": "Whether MCP emits receipts"
    },
    "observed_error_count": {
      "type": "number",
      "description": "Error count observed"
    },
    "observed_total_calls": {
      "type": "number",
      "description": "Total calls observed"
    },
    "observed_uptime_hours": {
      "type": "number",
      "description": "Hours of observed uptime"
    }
  },
  "additionalProperties": false
}
    arguments 147 lines
  • forge_send_confirm unknown never probed

    ACTUATOR · confirm · MUTATE. Send data with human confirmation via elicitation. Supports form mode (standard) and URL mode (sensitive credentials). F13 consent gate.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "destination"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "sensitive": {
      "type": "boolean",
      "default": false,
      "description": "If true, uses URL-mode elicitation for out-of-band auth"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "destination": {
      "type": "string",
      "description": "Destination identifier (URL, email, API endpoint)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "payload_summary": {
      "type": "string",
      "default": "",
      "description": "Summary of payload being sent (never send raw secrets here)"
    }
  },
  "additionalProperties": false
}
    arguments 67 lines
  • forge_chart unknown 41d ago

    ACTUATOR · meta · OBSERVE. Agentic charting and statistical anomaly discovery. Input data series or records; returns SVG + summary + anomaly_candidates (reversals, high-z, curvature). Types support line/bar/scatter/pie/area/histogram. Use after postgres/wealth/well queries for visualization and pattern discovery. Use when: Agentic charting + quantum eureka discovery margin patterns. Input data series or records; returns S.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "data"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "data": {
      "type": "array",
      "description": "Array of numbers, [x,y] pairs, or objects {x,y} / {label,value} or use x_field/y_field"
    },
    "type": {
      "enum": [
        "line",
        "bar",
        "scatter",
        "pie",
        "area",
        "histogram"
      ],
      "type": "string",
      "default": "line"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "title": {
      "type": "string"
    },
    "width": {
      "type": "integer",
      "default": 640,
      "maximum": 2000,
      "minimum": 200
    },
    "height": {
      "type": "integer",
      "default": 380,
      "maximum": 1200,
      "minimum": 150
    },
    "x_field": {
      "type": "string"
    },
    "y_field": {
      "type": "string"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "return_format": {
      "enum": [
        "svg",
        "full"
      ],
      "type": "string",
      "default": "full"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 98 lines
  • forge_scan unknown 2d ago

    ACTUATOR · probe · OBSERVE. Security scan a file or directory before code execution. Detects dangerous patterns. OBSERVE-class. P2.5 canonical gap fill.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "target"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "depth": {
      "enum": [
        "quick",
        "full"
      ],
      "type": "string",
      "default": "quick",
      "description": "Scan depth: quick = dangerous patterns, full = extended patterns"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "target": {
      "type": "string",
      "description": "File or directory path to scan"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 66 lines
  • forge_filesystem unknown 41d ago

    ACTUATOR · fs · OBSERVE. Canonical governed filesystem primitive — read, write, patch, delete, and search files.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "read",
        "write",
        "patch",
        "glob",
        "grep",
        "stat",
        "tree",
        "move",
        "delete",
        "restore"
      ],
      "type": "string"
    },
    "path": {
      "type": "string",
      "default": "/root"
    },
    "limit": {
      "type": "number"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "offset": {
      "type": "number"
    },
    "confirm": {
      "type": "boolean",
      "default": false,
      "description": "Set true to confirm governed write/move/delete. Required for external HTTP clients on sensitive paths."
    },
    "content": {
      "type": "string"
    },
    "dry_run": {
      "type": "boolean",
      "default": false
    },
    "include": {
      "type": "string"
    },
    "pattern": {
      "type": "string"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "new_text": {
      "type": "string"
    },
    "old_text": {
      "type": "string"
    },
    "max_depth": {
      "type": "number"
    },
    "overwrite": {
      "type": "boolean",
      "default": false
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "delete_mode": {
      "enum": [
        "quarantine",
        "hard"
      ],
      "type": "string",
      "default": "quarantine"
    },
    "destination": {
      "type": "string"
    },
    "max_entries": {
      "type": "number"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "quarantine_id": {
      "type": "string"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "include_hidden": {
      "type": "boolean",
      "default": false
    },
    "expected_occurrences": {
      "type": "number"
    }
  },
  "additionalProperties": false
}
    arguments 133 lines
  • forge_agent unknown never probed

    ACTUATOR · registry · OBSERVE. Agent identity management. Modes: register, status, list, kill. F11 AUTH. register/kill are state-mutating; aggressive authority grants (always / skip_git_ack:true) require a kernel-issued lease — Authority(child) ⊆ Authority(parent).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "register",
        "status",
        "list",
        "kill"
      ],
      "type": "string",
      "default": "list"
    },
    "role": {
      "enum": [
        "governed_coder",
        "observer",
        "geoscience_agent",
        "finance_agent",
        "wellness_agent",
        "controller"
      ],
      "type": "string",
      "description": "Role profile"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "reason": {
      "type": "string",
      "description": "Audit reason for kill (required for mode=kill)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Agent identifier"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "authority": {
      "type": "object",
      "properties": {
        "deploy": {
          "enum": [
            "always",
            "888_HOLD",
            "never"
          ],
          "type": "string",
          "default": "888_HOLD"
        },
        "dry_run": {
          "type": "boolean",
          "default": true
        },
        "observe": {
          "type": "boolean",
          "default": true
        },
        "git_commit": {
          "enum": [
            "always",
            "888_HOLD",
            "never"
          ],
          "type": "string",
          "default": "888_HOLD"
        },
        "shell_exec": {
          "enum": [
            "always",
            "lease_required",
            "never"
          ],
          "type": "string",
          "default": "lease_required"
        },
        "vault_seal": {
          "enum": [
            "always",
            "888_HOLD",
            "never"
          ],
          "type": "string",
          "default": "888_HOLD"
        },
        "mutate_files": {
          "enum": [
            "always",
            "lease_required",
            "never"
          ],
          "type": "string",
          "default": "lease_required"
        },
        "skip_git_ack": {
          "type": "boolean",
          "default": false,
          "description": "Skip human ack for git ops — aggressive grant: register with lease when set"
        },
        "propose_patch": {
          "type": "boolean",
          "default": true
        }
      },
      "description": "Authority ceiling per action class",
      "additionalProperties": false
    },
    "agent_type": {
      "enum": [
        "opencode",
        "hermes",
        "chatgpt",
        "custom"
      ],
      "type": "string",
      "description": "Agent origin"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "identity_proof": {
      "type": "string",
      "description": "SHA-256 of agent's public key or session nonce"
    }
  },
  "additionalProperties": false
}
    arguments 163 lines
  • forge_shell unknown never probed

    ACTUATOR · shell · MUTATE. Canonical governed shell execution. Executes commands through constitutional gate (ArifJudge) + hash-chain audit (ArifSeal). DENY patterns are hard-blocked. GATE patterns require human approval. Every execution is sealed to VAULT999 hash chain. REQUIRES arifOS authority envelope for executing mutable shell commands: call arif_init() first, pass the returned session_id. session_id may be omitted ONLY when the gate's classifier (classifyShellCommandRisk) passes the command as SAFE — classification is the gate's decision, never the caller's claim. MUTATION without a session returns GATE_HOLD; IRREVERSIBLE without a verified SEAL returns HOLD_IRREVERSIBLE. Use forge_shell_dryrun for preview without side effects.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "command",
    "expected_output"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "cwd": {
      "type": "string",
      "default": "/root",
      "description": "Working directory"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "command": {
      "type": "string",
      "maxLength": 4000,
      "minLength": 1,
      "description": "Shell command to execute"
    },
    "timeout": {
      "type": "number",
      "default": 30000,
      "description": "Timeout in ms (max 120000)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "expected_output": {
      "type": "string",
      "maxLength": 4000,
      "minLength": 1,
      "description": "REQUIRED (2026-07-29 doctrine): what the agent expects this command to produce. World model training fuel — prediction→actual gap is the richest supervision signal. Sentinel '__NO_PREDICTION__' accepted when agent genuinely cannot predict output. Sentinel usage is logged and tracked as prediction_rate health metric. The gap between expected vs actual trains the ECHO world model (grpo.ts λ=0.03)."
    }
  },
  "additionalProperties": false
}
    arguments 76 lines
  • forge_wm_stats unknown never probed

    World Model statistics dashboard. Returns record counts, per-tool surprise scores, WM eligibility rates, and prediction trending. Read-only.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "tool_filter": {
      "type": "string",
      "description": "Filter by tool name (e.g., 'forge_shell')"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 54 lines
  • forge_wm_gaps unknown never probed

    World Model gap alerts with experience trace cross-reference. Returns high-confidence wrong predictions where the agent was confident but the output diverged significantly. Now also shows which gaps have experience feedback and which lack it — identifying the highest-priority improvement targets. Severity: CRITICAL/HIGH/MEDIUM. Read-only.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "limit": {
      "type": "number",
      "default": 20,
      "description": "Max alerts to return"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "severity": {
      "type": "string",
      "description": "Filter: CRITICAL, HIGH, or MEDIUM"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 59 lines
  • forge_job changes data unknown 41d ago

    ACTUATOR · job · OBSERVE. Background job system. Modes: submit, status.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "args": {
      "type": "object",
      "description": "Tool arguments (submit)",
      "additionalProperties": {}
    },
    "mode": {
      "enum": [
        "submit",
        "status"
      ],
      "type": "string",
      "description": "Job operation"
    },
    "tool": {
      "type": "string",
      "description": "Tool to execute (submit)"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "job_id": {
      "type": "string",
      "description": "Job ID (status mode)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Agent ID (submit)"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "description": {
      "type": "string",
      "description": "Job description (submit)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 82 lines
  • forge_skill unknown never probed

    ACTUATOR · skill · MUTATE. Dynamic tool forge (APEX Epoch 34Ω). Generates a new MCP tool via LLM, gated by HARAM scan + Decision Field (G=Q·V·Ψ·Φ), sealed to VAULT999. Phase 1: human approval per generation, 24h expiry, max 1 generation depth. F13 SOVEREIGN: arifOS domains require seal_verdict_id.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "intent"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "well",
        "arifos",
        "hermes",
        "aforge",
        "general"
      ],
      "type": "string",
      "default": "general",
      "description": "Domain routing"
    },
    "intent": {
      "type": "string",
      "maxLength": 2000,
      "minLength": 10,
      "description": "Natural-language description of what tool is needed"
    },
    "staging": {
      "type": "boolean",
      "default": false,
      "description": "If true, stage the generated skill for mesa/Landauer scan before production registration"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "llm_endpoint": {
      "type": "string",
      "format": "uri",
      "description": "Optional LLM endpoint for code generation (Phase 2). Phase 1 returns template scaffold if omitted."
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "revision_kind": {
      "enum": [
        "harness_revision"
      ],
      "type": "string",
      "description": "Declare this forge as a revision of existing execution logic. Requires generalization_evidence; a declared revision without it is HELD (Harness Adaptation Gap, arXiv:2610.30499)."
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "seal_verdict_id": {
      "type": "string",
      "description": "arifOS seal verdict (required for arifos domain or execute_after_register)"
    },
    "target_tool_name": {
      "type": "string",
      "pattern": "^forge_[a-z0-9_]+$",
      "description": "Suggested name (must start with forge_, lowercase + digits + underscore)"
    },
    "execute_after_register": {
      "type": "boolean",
      "default": false,
      "description": "If true, execute the generated tool immediately. REQUIRES seal_verdict_id."
    },
    "generalization_evidence": {
      "type": "string",
      "description": "JSON GeneralizationEvidence: dev/held-out scores before+after, preregistration_sha256, heldout_provenance, optional run/outer cost. Required when revision_kind=harness_revision."
    }
  },
  "additionalProperties": false
}
    arguments 108 lines
  • forge_parallel_status unknown 40d ago

    Query the status of a parallel task group by group_id. Returns member states, outputs, and Δ anchors.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "group_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "group_id": {
      "type": "string",
      "description": "Task group ID from forge_parallel"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 57 lines
  • forge_probe_site unknown 40d ago

    ACTUATOR · probe · OBSERVE. Probe a web site or cockpit surface for federation resilience and compliance checks. Returns status, static fallbacks, and metadata.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "url"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "url": {
      "type": "string",
      "format": "uri",
      "description": "The URL of the site to probe"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "timeout_ms": {
      "type": "number",
      "default": 5000,
      "description": "Timeout in milliseconds"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 63 lines
  • forge_tier_bind unknown never probed

    ACTUATOR · registry · OBSERVE. [FORGE8#6] Set trust tier LOWER BOUND only. A-FORGE cannot promote — only arifOS sets actual tier. Phase C: not unregistered (pipeline load-bearing); agents should not call ad-hoc outside FORGE8 flow.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "artifact_id",
    "execution_scope"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "artifact_id": {
      "type": "string",
      "format": "uuid"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "execution_scope": {
      "type": "object",
      "properties": {
        "network_access": {
          "type": "boolean",
          "default": false
        },
        "spawn_processes": {
          "type": "boolean",
          "default": true
        },
        "filesystem_write": {
          "type": "boolean",
          "default": false
        },
        "access_to_other_artifacts": {
          "type": "boolean",
          "default": false
        }
      },
      "additionalProperties": false
    },
    "trust_tier_lower_bound": {
      "enum": [
        "local_only",
        "cluster_restricted",
        "network_isolated",
        "full_access"
      ],
      "type": "string",
      "default": "local_only",
      "description": "Minimum trust tier required (ARIFOS may set higher)"
    }
  },
  "additionalProperties": false
}
    arguments 91 lines
  • forge_sandbox_pause unknown never probed

    PAUSE a persistent sandbox — tar upperdir, SHA256 integrity, unmount overlay, cold storage. F1 reversible. F13 lease-gated on resume.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "sandboxId"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actorId": {
      "type": "string",
      "description": "Actor ID"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "leaseHash": {
      "type": "string",
      "description": "Lease hash for audit binding"
    },
    "sandboxId": {
      "type": "string",
      "minLength": 1,
      "description": "Sandbox session ID to pause"
    },
    "sessionId": {
      "type": "string",
      "description": "arifOS session ID"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 70 lines
  • forge_sandbox_resume unknown never probed

    RESUME a paused sandbox — extract tarball, re-mount overlay, lease re-verify gate. F13 HOLD if lease mismatch or >24h age.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "sandboxId",
    "currentLeaseHash"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "sandboxId": {
      "type": "string",
      "minLength": 1,
      "description": "Sandbox session ID to resume"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "allowLeaseChange": {
      "type": "boolean",
      "default": false,
      "description": "Allow resume even if lease changed? (DEFAULT: false)"
    },
    "currentLeaseHash": {
      "type": "string",
      "description": "Fresh lease hash from arif_judge re-verification"
    }
  },
  "additionalProperties": false
}
    arguments 68 lines
  • forge_apex_recompute unknown never probed

    Recompute task plan when a governance field changes (risk, scope, authority, etc.). Only high-sensitivity tasks (>0.6) are recalculated — stable tasks retain. Returns which tasks need recompute.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "goal_id",
    "field",
    "from",
    "to"
  ],
  "properties": {
    "to": {
      "type": "string",
      "description": "New value (e.g., 'HIGH')"
    },
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "from": {
      "type": "string",
      "description": "Old value (e.g., 'MEDIUM')"
    },
    "field": {
      "enum": [
        "risk",
        "scope",
        "authority",
        "time",
        "cost",
        "organ",
        "domain"
      ],
      "type": "string",
      "description": "Which governance field changed"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "goal_id": {
      "type": "string",
      "minLength": 3,
      "description": "Goal ID from forge_apex_encode"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 82 lines
  • forge_web_zen unknown never probed

    Thin wrapper around web_zen CLI — agentic site sense/verify/orphan/ephemeral/doctor. Humans use six missions at /missions; agents call this instead of inventing deploy paths. Modes: sense, verify, orphan (dry-run only), ephemeral, doctor, caddy-reload-hint. No production rsync --delete. No Caddy authority self-grant. USE WHEN: site audit, missions 404, vitals proxies, SPA deploy check, ephemeral site parser.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "src": {
      "type": "string",
      "description": "orphan: source dir"
    },
    "url": {
      "type": "string",
      "description": "verify: single URL"
    },
    "dest": {
      "type": "string",
      "description": "orphan: dest dir"
    },
    "keep": {
      "type": "boolean",
      "description": "ephemeral: keep workdir (debug)"
    },
    "mode": {
      "enum": [
        "sense",
        "verify",
        "orphan",
        "ephemeral",
        "doctor",
        "caddy-reload-hint"
      ],
      "type": "string",
      "default": "doctor",
      "description": "web_zen mode"
    },
    "task": {
      "type": "string",
      "description": "ephemeral: why this tool is needed"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "code_file": {
      "type": "string",
      "description": "ephemeral: path to python tool"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "timeout_sec": {
      "type": "number",
      "description": "timeout seconds for verify/doctor"
    },
    "allow_deletes": {
      "type": "boolean",
      "description": "orphan: do not fail when deletes listed (still dry-run)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 95 lines
  • forge_runtime_verify unknown never probed

    Verify runtime consistency: compares git source commit vs installed wheel vs import path. Returns MATCH|DRIFT|UNKNOWN. Fail-closed: blocks execution on DRIFT. Read-only (OBSERVE class).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "workspace": {
      "type": "string",
      "default": "/root/A-FORGE",
      "description": "Git workspace path (default: /root/A-FORGE)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "strict_mode": {
      "type": "boolean",
      "default": false,
      "description": "If true, ANY inconsistency blocks execution. If false, requires wheel-vs-import mismatch to block."
    },
    "package_name": {
      "type": "string",
      "default": "@ariffazil/a-forge",
      "description": "Package name to verify (default: @ariffazil/a-forge)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 65 lines
  • forge_shell_dryrun reads unknown never probed

    ACTUATOR · shell · OBSERVE. Preview a shell command's output WITHOUT executing it. Returns what WOULD happen. F1 AMANAH: no mutation, pure dry-run. For actual execution, use forge_shell.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "command"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "command": {
      "type": "string",
      "description": "Shell command to preview"
    },
    "timeout": {
      "type": "number",
      "default": 10000,
      "description": "Timeout in ms (default 10s, max 60s)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 62 lines
  • forge_predict unknown 40d ago

    ACTUATOR · governance · OBSERVE. Pre-action simulation layer (prediction bridge). GEOX/WEALTH forward models run BEFORE forge_execute. Result attached as evidence to arif_judge via forge_judge_proxy. Build prediction bridge first, then formalize. Domain auto-detects geox vs wealth from proposed_action.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "proposed_action"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "type": "string",
      "description": "Override: for geox 'prospect_evaluate'|'model'; for wealth 'monte_carlo'|'emv'|'npv'|'wisdom'"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "auto"
      ],
      "type": "string",
      "default": "auto",
      "description": "Simulation target organ"
    },
    "params": {
      "type": "object",
      "description": "Domain-specific prediction parameters (e.g. {initial_value, growth_rate} for wealth MC)",
      "additionalProperties": {}
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "proposed_action": {
      "type": "string",
      "minLength": 5,
      "description": "Description of the candidate action/plan to simulate (e.g. 'drill prospect X in basin Y')"
    }
  },
  "additionalProperties": false
}
    arguments 77 lines
  • forge_experience_trace changes data unknown 41d ago

    Record an experience trace (Chain-of-Experience). Captures action→observation→feedback→delta after every non-trivial forge tool execution. Three feedback channels: self (model critique), environmental (test/lint/build), constitutional (floor check). Append-only hash-chained ledger. Returns the sealed trace with hash chain link.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "agent_id",
    "tool",
    "input_summary",
    "output_summary",
    "success"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "tool": {
      "type": "string",
      "description": "Tool name that was executed (e.g., 'forge_shell')"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "success": {
      "type": "boolean",
      "description": "Did the action succeed?"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Agent identity (e.g., 'fi-003', 'hermes')"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "new_scar": {
      "type": "string",
      "description": "If this trace produced a new scar, its identifier"
    },
    "new_skill": {
      "type": "string",
      "description": "If this trace produced a new skill, its identifier"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "feedback_self": {
      "type": "string",
      "description": "Model self-critique — agent's post-hoc assessment"
    },
    "input_summary": {
      "type": "string",
      "description": "Brief summary of the tool input (not raw args)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "output_summary": {
      "type": "string",
      "description": "Brief summary of the tool output (not raw output)"
    },
    "capability_change": {
      "type": "number",
      "description": "Estimated capability delta [-1, 1] — positive = improved"
    },
    "confidence_change": {
      "type": "number",
      "description": "Confidence delta [-1, 1] — positive = more confident"
    },
    "feedback_environmental": {
      "type": "string",
      "description": "Environmental signal — test pass/fail, lint, build status"
    },
    "feedback_constitutional": {
      "type": "string",
      "description": "Constitutional check — floor compliance result (PASS/FAIL/UNKNOWN)"
    }
  },
  "additionalProperties": false
}
    arguments 105 lines
  • forge_witness unknown never probed

    ACTUATOR · governance · OBSERVE. APEX v36Ω tri-witness consensus gate. Computes W³ = ∛(Human × AI × External) via geometric mean (Nash 1950). Returns CONSENSUS/WEAK/DIVERGENT. All three channels must be present. Zero in any channel collapses consensus. DO NOT fake witness confidence — unknown → 0.0, not 0.5. F13 SOVEREIGN: DIVERGENT → 888_HOLD.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "tool_name",
    "h_confidence",
    "ai_confidence",
    "ext_confidence"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "h_source": {
      "type": "string",
      "default": "human",
      "description": "Human witness source identifier"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "ai_source": {
      "type": "string",
      "default": "ai-ensemble",
      "description": "AI witness source identifier"
    },
    "tool_name": {
      "type": "string",
      "description": "Tool being witnessed"
    },
    "ext_source": {
      "type": "string",
      "default": "external",
      "description": "External witness source identifier"
    },
    "h_evidence": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "default": [],
      "description": "Human witness evidence"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "ai_evidence": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "default": [],
      "description": "AI witness evidence"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "ext_evidence": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "default": [],
      "description": "External witness evidence"
    },
    "h_confidence": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "Human witness confidence [0-1]"
    },
    "ai_confidence": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "AI witness confidence [0-1]"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "ext_confidence": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "External/Earth witness confidence [0-1]"
    },
    "target_fingerprint": {
      "type": "string",
      "description": "Fingerprint of the tool/candidate"
    }
  },
  "additionalProperties": false
}
    arguments 121 lines
  • forge_session_init unknown never probed

    ACTUATOR · governance · OBSERVE. Constitutional session ignition. Proxies to arifOS kernel — A-FORGE no longer mints independent sessions. (Stage 000 INIT)

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "internal",
        "external"
      ],
      "type": "string",
      "default": "external"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "intent": {
      "type": "string",
      "description": "Primary intent for this session"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "parent_session_id": {
      "type": "string",
      "description": "Pre-existing arifOS session_id (or session_token) this A-FORGE session is forked from. Returned unchanged as parent_session_id in the response so cross-organ session chains reconstruct. B1 fix 2026-07-17 (T7 deliverable #4 propagation)."
    }
  },
  "additionalProperties": false
}
    arguments 66 lines
  • forge_heart_critique unknown 41d ago

    ACTUATOR · governance · OBSERVE. Risk assessment and ethical review — delegates to arifOS 666 HEART pipeline. A-FORGE does NOT adjudicate floors locally.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "task"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "task": {
      "type": "string"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 56 lines
  • forge_check_governance unknown 41d ago

    ACTUATOR · governance · OBSERVE. Constitutional governance check — delegates to arifOS. A-FORGE NEVER adjudicates constitutional floors.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "task"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "task": {
      "type": "string"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 56 lines
  • forge_transfer_confirm unknown never probed

    ACTUATOR · confirm · MUTATE. Transfer funds with human confirmation via form-mode elicitation. F13 consent gate. Blocks until user accept/decline/cancel.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "amount",
    "recipient"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "memo": {
      "type": "string",
      "description": "Transfer memo"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "amount": {
      "type": "number",
      "description": "Transfer amount"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "currency": {
      "type": "string",
      "default": "USD",
      "description": "Currency code"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "recipient": {
      "type": "string",
      "description": "Recipient identifier"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 71 lines
  • forge_vault changes data unknown never probed

    ACTUATOR · vault · OBSERVE. VAULT999 primitive (A-FORGE cache layer). Modes: read, list, write, receipt. For seal: use arifOS arif_seal (port 8088) or /root/scripts/federation_ritual.py seal. Use when: VAULT999 cache primitive. Modes: read, list, write, receipt — write/receipt APPEND records; constitutional sealing stays in arifOS arif_seal.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "read",
        "list",
        "write",
        "receipt"
      ],
      "type": "string",
      "description": "Vault operation (read|list|write|receipt). For VAULT999 sealing, use arifOS arif_seal (port 8088)."
    },
    "name": {
      "type": "string",
      "description": "Record name (read/write/receipt)"
    },
    "tier": {
      "type": "string",
      "description": "Receipt tier (for example session.ledger)"
    },
    "limit": {
      "type": "number",
      "description": "Max records (list, default 100)"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "value": {
      "type": "string",
      "description": "Record value (write/receipt)"
    },
    "reason": {
      "type": "string",
      "description": "Receipt reason (for example SESSION_CLOSE)"
    },
    "content": {
      "type": "string",
      "description": "Canonical receipt content; alias of value"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "category": {
      "type": "string",
      "description": "Category filter (list) / Record category (write/receipt)"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "metadata": {
      "type": "object",
      "description": "Optional metadata (write/receipt)",
      "additionalProperties": {}
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 96 lines
  • forge_journalctl unknown 41d ago

    ACTUATOR · vps · OBSERVE. Query systemd journal logs (read-only, PII-redacted). Modes: logs, errors, tail, grep.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "service"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "logs",
        "errors",
        "tail",
        "grep"
      ],
      "type": "string",
      "default": "logs"
    },
    "lines": {
      "type": "number"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "since": {
      "type": "string"
    },
    "pattern": {
      "type": "string"
    },
    "service": {
      "type": "string"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 75 lines
  • forge_hf_import unknown never probed

    Governed Hugging Face import gate. Validate and import models/datasets through constitutional floors F1-F13. Returns verdict (SEAL/HOLD/VOID) with G-score, kappa-r, entropy pathway, and floor-by-floor results. The gate validates — the kernel seals. Uses arifOS hf_import_gate under constitutional governance.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "repo_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "import_model",
        "import_dataset",
        "preflight",
        "batch_screen"
      ],
      "type": "string",
      "default": "import_model",
      "description": "Import mode: import_model (full gate), import_dataset (relaxed F8), preflight (quick check), batch_screen (multiple repos)"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "repo_id": {
      "type": "string",
      "description": "HF repo ID (e.g., 'microsoft/phi-2', 'ariffazil/FFF')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "min_gain": {
      "type": "number",
      "description": "Override F8 minimum G threshold (default 0.80)"
    },
    "repo_ids": {
      "type": "string",
      "description": "Comma-separated repo IDs for batch_screen mode"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "intended_use": {
      "type": "string",
      "default": "general",
      "description": "How the model will be used in arifOS (e.g., 'reasoning', 'evidence', 'training')"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 81 lines
  • forge_git unknown never probed

    ACTUATOR · git · MUTATE. Canonical git primitive — status, diff, log, and commit. Use when: Canonical git primitive. Modes: status, diff, log, commit. Mutating modes are floor-gated by A-FORGE.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "status",
        "diff",
        "log",
        "commit"
      ],
      "type": "string"
    },
    "push": {
      "type": "boolean",
      "default": false
    },
    "repo": {
      "type": "string",
      "default": "/root/arifOS"
    },
    "count": {
      "type": "number",
      "default": 10
    },
    "files": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "limit": {
      "type": "number",
      "default": 200
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "staged": {
      "type": "boolean",
      "default": false
    },
    "message": {
      "type": "string"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 91 lines
  • forge_lease unknown never probed

    ACTUATOR · registry · OBSERVE. Lease lifecycle. Modes: request, status, revoke. A-FORGE does not self-issue leases — arifOS mints them.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "request",
        "status",
        "revoke"
      ],
      "type": "string",
      "description": "Lease operation"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "reason": {
      "type": "string",
      "description": "Reason (revoke)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Agent ID (request/revoke)"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "forbidden": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Forbidden tools (request)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "ttl_seconds": {
      "type": "number",
      "default": 300,
      "description": "Lease TTL (request, max 3600)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "max_action_class": {
      "enum": [
        "OBSERVE",
        "SUGGEST",
        "SIMULATE",
        "DRAFT",
        "QUEUE",
        "EXECUTE_REVERSIBLE",
        "EXECUTE_HIGH_IMPACT",
        "IRREVERSIBLE",
        "PROPOSE",
        "MUTATE",
        "ATOMIC"
      ],
      "type": "string",
      "default": "EXECUTE_REVERSIBLE",
      "description": "Max action class (request). Valid enum: OBSERVE | SUGGEST | SIMULATE | DRAFT | QUEUE | EXECUTE_REVERSIBLE | EXECUTE_HIGH_IMPACT | IRREVERSIBLE | PROPOSE | MUTATE | ATOMIC. NOTE: This is an action class, NOT a governance tier label (do NOT pass T1, T2, or T3)."
    }
  },
  "additionalProperties": false
}
    arguments 100 lines
  • forge_shell_status unknown never probed

    ACTUATOR · shell · OBSERVE. Check forge_shell subsystem health: ledger state, judge pattern count, defaults.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_shell_ledger unknown never probed

    ACTUATOR · shell · OBSERVE. Query recent ArifSeal hash-chain ledger entries. Read-only, paged. Returns last N records with chain integrity status.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "limit": {
      "type": "number",
      "default": 10,
      "description": "Max records to return (1-100)"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "offset": {
      "type": "number",
      "default": 0,
      "description": "Skip N most recent records (0 = latest)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "verify_chain": {
      "type": "boolean",
      "default": true,
      "description": "Also run full chain verification"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 65 lines
  • forge_shell_alert_history unknown never probed

    ACTUATOR · shell · OBSERVE. View recent ArifJudge alert history (DENY/GATE/self-modification events). Read-only.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "limit": {
      "type": "number",
      "default": 20,
      "description": "Max alerts to return (1-100)"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 55 lines
  • forge_wm_quality unknown never probed

    World Model trajectory quality report + Phase 2 readiness. Grades tools from A-D based on training data quality and assesses whether ECHO/PaW RL training can begin. Read-only.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • forge_skill_select_query unknown never probed

    Query skill selection events (SkillGate preparation). Returns which skills were selected, by what method (keyword/learned/manual/routed/fallback), and outcomes. Read-only. Prepares for Phase 2 SkillGate credit separation (selection credit vs execution credit).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "limit": {
      "type": "number",
      "default": 20,
      "description": "Max events to return"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "method": {
      "type": "string",
      "description": "Filter by selection method (keyword/learned/manual/routed/fallback)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "agent_id": {
      "type": "string",
      "description": "Filter by agent ID"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "skill_name": {
      "type": "string",
      "description": "Filter by skill name"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 67 lines
  • forge_status unknown never probed

    ACTUATOR · registry · OBSERVE. Active execution state: jobs, leases, agents. INFRA-class. P2.2 canonical gap fill.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "overview",
        "jobs",
        "leases",
        "agents"
      ],
      "type": "string",
      "default": "overview"
    },
    "limit": {
      "type": "number",
      "default": 20,
      "description": "Max items per section"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 65 lines
  • forge_abort unknown never probed

    ACTUATOR · execute · MUTATE. Safe stop + rollback for running execution. Requires lease or session auth. P2.3 canonical gap fill.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "target",
    "target_id",
    "reason"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "reason": {
      "type": "string",
      "description": "Why this abort is happening"
    },
    "target": {
      "enum": [
        "job",
        "lease",
        "pipeline"
      ],
      "type": "string",
      "description": "What to abort"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "rollback": {
      "type": "boolean",
      "default": true,
      "description": "Attempt rollback if applicable"
    },
    "target_id": {
      "type": "string",
      "description": "ID of the target to abort"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 77 lines
  • forge_vps_ports unknown never probed

    ACTUATOR · vps · OBSERVE. Machine Constitution port registry. Scans listening ports and classifies each as public, internal, or unknown. OBSERVE-class; does not mutate. Does not trust UFW alone because Docker can bypass it.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "scan",
        "registry",
        "assert"
      ],
      "type": "string",
      "default": "scan",
      "description": "scan=live state only; registry=return last saved registry; assert=compare live vs registry"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 60 lines
  • forge_vps_services unknown never probed

    ACTUATOR · vps · OBSERVE. Machine Constitution service registry. Lists running systemd services and Docker containers. OBSERVE-class; does not mutate.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "scan",
        "registry",
        "assert"
      ],
      "type": "string",
      "default": "scan",
      "description": "scan=live state; registry=last saved; assert=compare live vs registry"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 60 lines
  • forge_vps_cron unknown never probed

    ACTUATOR · vps · OBSERVE. Machine Constitution cron registry. Lists cron jobs from root crontab, /etc/crontab, and /etc/cron.d. OBSERVE-class; does not mutate.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "scan",
        "registry",
        "assert"
      ],
      "type": "string",
      "default": "scan",
      "description": "scan=live state; registry=last saved; assert=compare live vs registry"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 60 lines
  • forge_verify_timeline unknown never probed

    ACTUATOR · probe · OBSERVE. Verify timeline claims meet the minimum 2 independent sources requirement. TIMELINE_MIN_SOURCES invariant: Verifies source cardinality and declared independence envelope. Returns SOURCE_REQUIREMENTS_PASS / HOLD / FAIL, source quality assessment, and gaps. Use when: Verify timeline claims require minimum 2 independent sources. TIMELINE_MIN_SOURCES invariant: No tim.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "timeline_items"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "verify",
        "audit",
        "suggest_sources"
      ],
      "type": "string",
      "default": "verify",
      "description": "Operation mode"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "min_sources": {
      "type": "integer",
      "default": 2,
      "maximum": 10,
      "minimum": 1,
      "description": "Minimum sources required per item"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "timeline_items": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "event",
          "date",
          "sources"
        ],
        "properties": {
          "date": {
            "type": "string",
            "description": "Date or date range of the event"
          },
          "event": {
            "type": "string",
            "description": "Description of the event or claim"
          },
          "sources": {
            "type": "array",
            "items": {
              "type": "object",
              "required": [
                "source_id",
                "source_type",
                "reliability"
              ],
              "properties": {
                "source_id": {
                  "type": "string",
                  "description": "Unique identifier for the source"
                },
                "source_uri": {
                  "type": "string",
                  "description": "Retrievable URI/URL for source evidence"
                },
                "reliability": {
                  "type": "number",
                  "maximum": 1,
                  "minimum": 0,
                  "description": "Reliability score 0–1"
                },
                "source_type": {
                  "enum": [
                    "publication",
                    "report",
                    "dataset",
                    "interview",
                    "archive",
                    "correspondence",
                    "other"
                  ],
                  "type": "string",
                  "description": "Category of source"
                },
                "content_hash": {
                  "type": "string",
                  "description": "Content hash of the cited artifact"
                },
                "organization": {
                  "type": "string",
                  "description": "Publishing organization (used for independence check)"
                },
                "observed_claim": {
                  "type": "string",
                  "description": "Exact quote or observed claim in the source"
                }
              },
              "additionalProperties": false
            },
            "minItems": 1,
            "description": "Supporting sources"
          },
          "description": {
            "type": "string",
            "description": "Additional context about the event"
          }
        },
        "additionalProperties": false
      },
      "minItems": 1,
      "description": "Timeline items to verify"
    },
    "require_independent": {
      "type": "boolean",
      "default": true,
      "description": "Sources must be from different organizations"
    }
  },
  "additionalProperties": false
}
    arguments 158 lines
  • forge_seal unknown never probed

    ACTUATOR · vault · MUTATE. Seal a Tri-Witness validated skill into permanent VAULT999 memory. Irreversible. Sealed skills cannot be deleted, demoted below TRUSTED, or expired. Requires REVIEWED tier + Tri-Witness PASS + live human confirmation (elicitation gate at the MCP boundary); human_approval_token is recorded for provenance.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "skill_name",
    "human_approval_token",
    "tri_witness_evidence",
    "constitutional_chain_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "skill_name": {
      "type": "string",
      "description": "Tool name to seal (forge_*)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "human_approval_token": {
      "type": "string",
      "description": "F13 approval reference recorded into the seal receipt (F2 provenance). Authorization = live elicitation confirmation in this call + tri_witness_evidence + constitutional_chain_id."
    },
    "tri_witness_evidence": {
      "type": "string",
      "description": "JSON-serialized TriWitnessResult from prior validation (REQUIRED for Q9 self-seal rejection)"
    },
    "constitutional_chain_id": {
      "type": "string",
      "description": "Constitutional chain ID from arif_judge SEAL (REQUIRED for Q9 self-seal rejection)"
    }
  },
  "additionalProperties": false
}
    arguments 72 lines
  • forge_evaluate unknown 41d ago

    ACTUATOR · governance · OBSERVE. APEX v36Ω evaluation gate (G-SPACE CANONICAL). Computes G = (A·P·E·X)^(1/4) with is_canonical_g=true. P=Present Authority (T-000 canonical; not Purpose, not Physics — F13 ruling 2026-10-02). Φ is scar pressure, not a 5th dial. Returns SEAL/REVIEW/VOID. Does NOT generate code. HARAM: do not confuse with forge_apex_encode Jacobian G_local (is_canonical_g=false). Use when: APEX v36Ω evaluation gate (V3 canonical). Computes G = (A·P·E·X)^(1/4) — 4-term geometric mean; Φ is scar pressure, not a 5th dial. C_dark = A·(1-P)·(1-X). Returns SEAL/REVIEW/VOID.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "tool_name",
    "description"
  ],
  "properties": {
    "w3": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "W3 tri-witness consensus ∛(Human×AI×Earth) from forge_witness."
    },
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "well",
        "arifos",
        "hermes",
        "aforge",
        "general"
      ],
      "type": "string",
      "default": "general"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "tool_name": {
      "type": "string",
      "description": "Proposed tool name (forge_* convention)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "description": {
      "type": "string",
      "maxLength": 2000,
      "minLength": 10,
      "description": "Natural-language description"
    },
    "proposed_by": {
      "type": "string",
      "default": "unknown",
      "description": "Who is proposing this tool"
    },
    "input_schema": {
      "type": "string",
      "default": "z.object({}).strict()",
      "description": "Zod inputSchema as TS source"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "estimated_cost": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "Estimated resource cost [0-1]"
    },
    "implementation": {
      "type": "string",
      "default": "",
      "description": "Tool implementation code to evaluate"
    },
    "evaluator_count": {
      "type": "integer",
      "default": 1,
      "maximum": 10,
      "minimum": 1,
      "description": "Number of evaluators in ensemble (for Ω₀ calibration)"
    },
    "seal_verdict_id": {
      "type": "string",
      "description": "Prior arifOS seal verdict (required for arifos domain)"
    },
    "max_recursion_depth": {
      "type": "integer",
      "default": 1,
      "maximum": 10,
      "minimum": 1,
      "description": "Maximum recursion depth"
    },
    "required_permissions": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "default": [],
      "description": "Required permissions (read, write, execute, seal)"
    },
    "tri_witness_evidence": {
      "type": "string",
      "description": "Tri-witness evidence hash from forge_witness call. Required when W3 is provided (Q9 anti-self-seal pattern)."
    },
    "declared_side_effects": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "default": [],
      "description": "Declared side effects (filesystem, network, shell, db, vault)"
    },
    "constitutional_chain_id": {
      "type": "string",
      "description": "Constitutional chain ID from forge_witness. Alternative provenance for W3."
    }
  },
  "additionalProperties": false
}
    arguments 146 lines
  • forge_register unknown never probed

    ACTUATOR · registry · OBSERVE. APEX v36Ω gated registration gate. Registers a tool ONLY after all gates pass: SEAL verdict from forge_evaluate, CONSENSUS from forge_witness, HARAM scan pass, and scar consultation pass. Non-compensatory: any single gate failure blocks registration. 24h TTL expiry. Backward compatible with forge_skill registry.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "tool_name",
    "domain",
    "description",
    "implementation",
    "gate_verdict",
    "gate_G",
    "gate_C_dark",
    "witness_verdict",
    "witness_W3"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "domain": {
      "enum": [
        "geox",
        "wealth",
        "well",
        "arifos",
        "hermes",
        "aforge",
        "general"
      ],
      "type": "string"
    },
    "gate_G": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "G score from forge_evaluate"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "tool_name": {
      "type": "string",
      "pattern": "^forge_[a-z0-9_]+$",
      "description": "Tool name (forge_* convention)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "witness_W3": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "W³ from forge_witness"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "description": {
      "type": "string",
      "maxLength": 2000,
      "minLength": 10,
      "description": "Tool description"
    },
    "gate_C_dark": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "C_dark from forge_evaluate"
    },
    "gate_verdict": {
      "enum": [
        "SEAL",
        "REVIEW",
        "VOID"
      ],
      "type": "string",
      "description": "Verdict from forge_evaluate (must be SEAL)"
    },
    "input_schema": {
      "type": "string",
      "default": "z.object({}).strict()",
      "description": "Zod inputSchema"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "registered_by": {
      "type": "string",
      "default": "forge_register",
      "description": "Who is registering"
    },
    "scar_pressure": {
      "type": "number",
      "default": 0,
      "maximum": 1,
      "minimum": 0,
      "description": "Scar pressure from forge_scar consult"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "haram_findings": {
      "type": "integer",
      "default": 0,
      "description": "HARAM findings count (must be 0 for CRITICAL)"
    },
    "implementation": {
      "type": "string",
      "description": "Tool implementation code"
    },
    "scars_consulted": {
      "type": "integer",
      "default": 0,
      "description": "Number of scars consulted"
    },
    "witness_verdict": {
      "enum": [
        "CONSENSUS",
        "WEAK",
        "DIVERGENT"
      ],
      "type": "string",
      "description": "Verdict from forge_witness (must be CONSENSUS)"
    }
  },
  "additionalProperties": false
}
    arguments 151 lines
  • forge_reality_loop reads unknown 40d ago

    ACTUATOR · governance · OBSERVE. Intent compiler: 7-stage state-tracking ledger (MEANING→OBSERVE→ENCODE→IMPROVE→VERIFY→SEAL→RETURN). Modes: start | advance | record | seal | report | metrics | list | destroy. Constitutional F1–F13 at every stage. ΔS ≤ 0 per iteration. Heuristic thresholds (G≥config.min_g_score, W³≥config.min_witness) are PHASE 1 HEURISTIC — both surfaced in seal output with calibration_required: true. Default 0.70 each; override via config JSON; out-of-range values are clamped to [0,1], non-finite falls back to default. W³ check: seal mode warns if min_witness > 0 and no tri_witness recorded. RETURN is terminal — human must decide.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "start",
        "advance",
        "record",
        "seal",
        "report",
        "metrics",
        "list",
        "destroy"
      ],
      "type": "string",
      "description": "Operation mode"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "config": {
      "type": "string",
      "description": "JSON config: {iteration_depth, max_hypotheses, action_budget, auto_execute, self_modify, seal_every_iteration, min_g_score=0.70, min_witness=0.70}. Thresholds are PHASE 1 HEURISTIC. Out-of-range (not in [0,1]) is clamped; non-finite falls back to default. Surfaced in start + seal response."
    },
    "intent": {
      "type": "string",
      "description": "Primary intent for the loop. Default: \"Self-sustaining federation health\""
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "record_type": {
      "type": "string",
      "description": "Type of record: evidence | hypothesis | action | entropy | mod | scar | violation"
    },
    "record_stage": {
      "type": "string",
      "description": "Stage being recorded (record mode)"
    },
    "record_value": {
      "type": "string",
      "description": "JSON value to record"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 87 lines
  • forge_parallel changes data unknown never probed

    Spawn N concurrent A2A tasks and collect results. Thin orchestration over existing A2A verbs (message/send, tasks/get, tasks/cancel). Supports fan-out with bounded concurrency, failure policies (collect_all, fail_fast, majority_wins), timeout, and cancellation propagation. Each agent runs isolated. Root agent synthesizes.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "tasks"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "parallel"
      ],
      "type": "string",
      "default": "parallel",
      "description": "Execution mode. Currently only 'parallel'."
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "tasks": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "name",
          "prompt"
        ],
        "properties": {
          "name": {
            "type": "string",
            "description": "Human-readable agent name"
          },
          "prompt": {
            "type": "string",
            "description": "Task prompt for this agent"
          },
          "schema": {
            "type": "object",
            "properties": {},
            "description": "Optional JSON schema for structured output",
            "additionalProperties": true
          },
          "target_organ": {
            "enum": [
              "arifos",
              "geox",
              "wealth",
              "well",
              "aforge",
              "auto"
            ],
            "type": "string",
            "default": "auto",
            "description": "Which organ to route to"
          }
        },
        "additionalProperties": false
      },
      "maxItems": 8,
      "minItems": 1,
      "description": "Tasks to execute in parallel (max 8)"
    },
    "fan_in": {
      "enum": [
        "root_synthesis",
        "structured_merge"
      ],
      "type": "string",
      "default": "root_synthesis",
      "description": "How results are assembled"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "timeout_ms": {
      "type": "integer",
      "default": 60000,
      "maximum": 300000,
      "minimum": 5000,
      "description": "Group timeout in milliseconds"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "context_policy": {
      "enum": [
        "isolated",
        "shared_readonly"
      ],
      "type": "string",
      "default": "isolated",
      "description": "Context isolation for agents"
    },
    "failure_policy": {
      "enum": [
        "collect_all",
        "fail_fast",
        "majority_wins"
      ],
      "type": "string",
      "default": "collect_all",
      "description": "How to handle agent failures"
    },
    "max_concurrency": {
      "type": "integer",
      "default": 3,
      "maximum": 8,
      "minimum": 1,
      "description": "Max simultaneous agents"
    }
  },
  "additionalProperties": false
}
    arguments 146 lines
  • forge_parallel_cancel unknown never probed

    Cancel all running agents in a parallel task group. Propagates tasks/cancel to each non-terminal member.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "group_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "reason": {
      "type": "string",
      "default": "sovereign cancel",
      "description": "Cancellation reason"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "group_id": {
      "type": "string",
      "description": "Task group ID from forge_parallel"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 62 lines
  • forge_receipt_draft unknown 40d ago

    ACTUATOR · vault · OBSERVE. Draft a structured compliance receipt for a deployment or change. Output is standard markdown formatted for arifOS VAULT999 verification.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "action_details",
    "evidence"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "verdict": {
      "enum": [
        "PROCEED",
        "HOLD",
        "VOID",
        "SABAR"
      ],
      "type": "string",
      "default": "PROCEED"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of evidence/checks validated"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "action_details": {
      "type": "string",
      "description": "Details of the modifications made"
    }
  },
  "additionalProperties": false
}
    arguments 75 lines
  • forge_worktree unknown never probed

    ACTUATOR · git · OBSERVE. Local git physics sensor — reports branch, dirty state, stash, conflicts, and blast radius. Use when: Local git physics sensor. Returns branch, dirty state, stash, conflicts, in-progress ops, blast radi.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "request_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "cwd": {
      "type": "string",
      "description": "Working directory (defaults to process cwd)"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "request_id": {
      "type": "string",
      "description": "Caller request ID"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 61 lines
  • forge_netdata_alarms unknown 40d ago

    ACTUATOR · health · OBSERVE. Read Netdata alarms. Use when: Read Netdata alarms. OBSERVE-class.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "request_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "host": {
      "type": "string",
      "default": "localhost",
      "description": "Netdata host"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "status": {
      "enum": [
        "all",
        "raised",
        "clear",
        "warning",
        "critical"
      ],
      "type": "string",
      "default": "raised",
      "description": "Alarm status filter"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "request_id": {
      "type": "string",
      "description": "Caller request ID"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 74 lines
  • forge_netdata_metrics unknown 40d ago

    ACTUATOR · health · OBSERVE. Read Netdata chart data. Use when: Read Netdata chart data. OBSERVE-class.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "chart",
    "request_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "host": {
      "type": "string",
      "default": "localhost",
      "description": "Netdata host"
    },
    "after": {
      "type": "number",
      "description": "Unix timestamp start"
    },
    "chart": {
      "type": "string",
      "description": "Chart name"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "before": {
      "type": "number",
      "description": "Unix timestamp end"
    },
    "points": {
      "type": "number",
      "default": 100,
      "description": "Data points"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "request_id": {
      "type": "string",
      "description": "Caller request ID"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forge_skillstore_write changes data unknown never probed

    ACTUATOR · skill · MUTATE. Store artifact with provenance. WRITE mode only. Two-layer retention with SCAR immunization.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "operation",
    "artifact_id",
    "artifact"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "maxItems": 20
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "artifact": {
      "type": "object",
      "required": [
        "code",
        "language",
        "provenance"
      ],
      "properties": {
        "code": {
          "type": "string"
        },
        "language": {
          "enum": [
            "python",
            "typescript",
            "shell",
            "sql",
            "unknown"
          ],
          "type": "string"
        },
        "provenance": {
          "type": "object",
          "required": [
            "created_by",
            "created_at",
            "intent",
            "decision_class"
          ],
          "properties": {
            "intent": {
              "type": "string"
            },
            "context": {
              "type": "string"
            },
            "created_at": {
              "type": "string",
              "format": "date-time"
            },
            "created_by": {
              "type": "string"
            },
            "constraints": {
              "type": "array",
              "items": {
                "type": "string"
              }
            },
            "decision_class": {
              "enum": [
                "C0_AUTO",
                "C1_STANDARD",
                "C2_PRIVILEGED",
                "C3_SOVEREIGN"
              ],
              "type": "string"
            }
          },
          "additionalProperties": false
        }
      },
      "additionalProperties": false
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "operation": {
      "type": "string",
      "const": "WRITE"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "artifact_id": {
      "type": "string",
      "format": "uuid"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 134 lines
  • forge_skillstore_read unknown never probed

    ACTUATOR · skill · OBSERVE. Query artifact store. Semantic search with tag filtering.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "operation",
    "query"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "limit": {
      "type": "number",
      "default": 10,
      "maximum": 100,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "minLength": 3
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "operation": {
      "type": "string",
      "const": "READ"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "filter_by_tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  },
  "additionalProperties": false
}
    arguments 74 lines
  • forge_docket_prep changes data unknown 41d ago

    ACTUATOR · meta · OBSERVE. Package all evidence and hand off to arifOS. A-FORGE RELINQUISHES CONTROL — docket is read-only.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "artifact_id",
    "stage_id",
    "evidence_ids"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "stage_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "artifact_id": {
      "type": "string",
      "format": "uuid"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "evidence_ids": {
      "type": "array",
      "items": {
        "type": "string",
        "format": "uuid"
      },
      "maxItems": 20,
      "minItems": 1
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 72 lines
  • forge_sandbox_list_paused unknown 18d ago

    List all paused sandboxes. Filter by actorId. Returns snapshot metadata with age.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actorId": {
      "type": "string",
      "description": "Filter by actor ID"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 54 lines
  • forge_sandbox_auto_evict changes data unknown never probed

    Auto-evict sandbox snapshots older than 24h (MAX_PAUSE_AGE_HOURS). Purges expired snapshots from cold storage.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actorId": {
      "type": "string",
      "description": "Restrict the preview to one actor's paused sandboxes"
    },
    "confirm": {
      "type": "boolean",
      "description": "Required together with dry_run=false. Without it the call previews and mutates nothing."
    },
    "dry_run": {
      "type": "boolean",
      "default": true,
      "description": "Default true: list eviction candidates and purge nothing. Set false AND confirm=true to actually purge."
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 63 lines
  • forge_dispatch_lane unknown never probed

    Dispatch a frozen TaskIR to one bounded lane (forge-scout / forge-builder / etc.). Returns run_id + lane envelope. One-dispatch-per-TaskIR enforced via task_ir_hash.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "dispatch"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "dispatch": {
      "type": "object",
      "required": [
        "run_id",
        "lane",
        "task_ir_hash"
      ],
      "properties": {
        "lane": {
          "enum": [
            "forge-scout",
            "forge-scout-pro",
            "forge-builder",
            "forge-economy",
            "forge-planner",
            "forge-judge"
          ],
          "type": "string"
        },
        "run_id": {
          "type": "string"
        },
        "task_ir_hash": {
          "type": "string",
          "pattern": "^sha256:[a-f0-9]{64}$"
        },
        "allowed_tools": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "max_tool_loops": {
          "type": "integer",
          "default": 3,
          "minimum": 0
        },
        "forbidden_tools": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "output_budget_tokens": {
          "type": "integer",
          "default": 12000,
          "minimum": 0
        },
        "context_budget_tokens": {
          "type": "integer",
          "default": 48000,
          "minimum": 0
        }
      },
      "additionalProperties": false
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 111 lines
  • forge_collect_evidence reads unknown never probed

    Collect runtime reality (diffs + tests + cost) into a typed evidence packet. F1: refuses payload containing secret-like patterns.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "evidence"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "evidence": {
      "type": "object",
      "required": [
        "run_id",
        "task_ir_hash",
        "evidence_hash",
        "model"
      ],
      "properties": {
        "model": {
          "type": "object",
          "required": [
            "alias"
          ],
          "properties": {
            "alias": {
              "type": "string"
            },
            "provider": {
              "type": "string",
              "default": "unknown"
            },
            "cost_band": {
              "enum": [
                "PLAN_INCLUDED",
                "PAYG",
                "FREE_TIER",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "input_tokens": {
              "type": "integer",
              "default": 0,
              "minimum": 0
            },
            "output_tokens": {
              "type": "integer",
              "default": 0,
              "minimum": 0
            }
          },
          "additionalProperties": false
        },
        "tests": {
          "type": "object",
          "default": {},
          "properties": {
            "baseline": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "regression": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "reproduction": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "relevant_suite": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            }
          },
          "additionalProperties": false
        },
        "run_id": {
          "type": "string"
        },
        "quality": {
          "type": "object",
          "default": {},
          "properties": {
            "lint": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "types": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            },
            "secret_scan": {
              "enum": [
                "PASS",
                "FAIL",
                "SKIPPED",
                "UNKNOWN"
              ],
              "type": "string",
              "default": "UNKNOWN"
            }
          },
          "additionalProperties": false
        },
        "diff_hash": {
          "type": "string",
          "pattern": "^sha256:[a-f0-9]{64}$"
        },
        "commit_after": {
          "type": "string"
        },
        "task_ir_hash": {
          "type": "string"
        },
        "changed_files": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "default": []
        },
        "commit_before": {
          "type": "string"
        },
        "evidence_hash": {
          "type": "string"
        },
        "redaction_check": {
          "type": "boolean",
          "default": true
        }
      },
      "additionalProperties": false
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 215 lines
  • forge_seal_run unknown never probed

    Submit completed TaskIR + evidence to constitutional judgment. Returns AWAITING_VERIFICATION. Only arif_judge.666 with verified identity may upgrade to SEAL.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "seal_request"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "seal_request": {
      "type": "object",
      "required": [
        "run_id",
        "task_ir_hash",
        "evidence_hash",
        "judge_receipt"
      ],
      "properties": {
        "run_id": {
          "type": "string"
        },
        "task_ir_hash": {
          "type": "string"
        },
        "evidence_hash": {
          "type": "string"
        },
        "judge_receipt": {
          "type": "object",
          "required": [
            "verdict"
          ],
          "properties": {
            "reasons": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "default": []
            },
            "verdict": {
              "enum": [
                "READY",
                "REWORK",
                "HOLD",
                "VOID"
              ],
              "type": "string"
            },
            "actor_canonicalized": {
              "type": "boolean",
              "default": false
            }
          },
          "additionalProperties": false
        }
      },
      "additionalProperties": false
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 103 lines
  • forge_canonize unknown never probed

    Promote a draft artifact to canonical state. Copies from source to forge_work/CANON/, computes SHA256, records provenance receipt. Does NOT delete source (F1 AMANAH). Classification: EXECUTE_REVERSIBLE.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "source_path"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "sign": {
      "type": "boolean",
      "default": true,
      "description": "Sign with SHA256"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "category": {
      "type": "string",
      "default": "artifact",
      "description": "Category: artifact | report | doctrine | skill"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "source_path": {
      "type": "string",
      "description": "Path to draft artifact to canonize"
    },
    "target_name": {
      "type": "string",
      "description": "Canonical name (defaults to filename)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 71 lines
  • forge_surface_guard unknown never probed

    ACTUATOR · probe · OBSERVE. MCP Surface Guard — schema fingerprinting + drift detection. Modes: check (run federation drift check), status (get cached drift log), pin (snapshot current tool surface), config (show guard config). F1 AMANAH + F2 TRUTH + F8 LAW + F11 AUDIT.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "check",
        "status",
        "pin",
        "config"
      ],
      "type": "string",
      "default": "status",
      "description": "Surface guard operation mode"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "organ_id": {
      "type": "string",
      "description": "Specific organ to check (omit for all)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 65 lines
  • forge_surface_audit reads unknown never probed

    ACTUATOR · probe · OBSERVE. Audit MCP tool surface: compare live registry vs affordances.yaml to detect phantom entries, missing tools, description drift, and alias conflicts. Federation-wide drift detection.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "audit",
        "scan",
        "fix"
      ],
      "type": "string",
      "default": "audit",
      "description": "audit=full report, scan=pass/fail health, fix=generate corrected yaml"
    },
    "organ": {
      "enum": [
        "aforge",
        "geox",
        "wealth",
        "well",
        "arifos",
        "all"
      ],
      "type": "string",
      "default": "aforge",
      "description": "Organ to audit, or 'all' for federation-wide scan"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "affordance_path": {
      "type": "string",
      "description": "Override affordance file path (default: auto-resolve from organ)"
    }
  },
  "additionalProperties": false
}
    arguments 77 lines
  • forge_gmail unknown never probed

    Google Gmail — search, read, draft, send emails through constitutional gate. ACTUATOR · gmail · MUTATE. OBSERVE-class for reads. Every write gated by arif_judge + F1/F3/F13.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "verb"
  ],
  "properties": {
    "to": {
      "type": "string",
      "description": "Recipient (send)"
    },
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "max": {
      "type": "number",
      "description": "Max results (1-50)"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "body": {
      "type": "string",
      "description": "Email body (send)"
    },
    "verb": {
      "enum": [
        "read-unread",
        "send"
      ],
      "type": "string",
      "description": "Gmail action"
    },
    "query": {
      "type": "string",
      "description": "Gmail search query, e.g. 'is:unread from:[email protected]'"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "subject": {
      "type": "string",
      "description": "Email subject (send)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 81 lines
  • forge_telegram unknown never probed

    APA Telegram send-only connector. Verbs: send, get_me. Sends through the local APA bridge (:18096) using @arifOS_bot. send is EXECUTE_REVERSIBLE and carries transport read-back.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "verb"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "text": {
      "type": "string",
      "description": "Message text (send)"
    },
    "verb": {
      "enum": [
        "send",
        "get_me"
      ],
      "type": "string",
      "description": "Telegram action"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "chat_id": {
      "type": "string",
      "description": "Target chat id (send)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "parse_mode": {
      "enum": [
        "HTML",
        "Markdown",
        "MarkdownV2"
      ],
      "type": "string",
      "description": "Parse mode (default HTML)"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 78 lines
  • forge_drive_create unknown never probed

    Create a Google Drive file (text content, any MIME type) via the gws CLI. Returns file_id; APA custody reads metadata back after creation. For native Google Docs use the gws docs lane.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "name"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "name": {
      "type": "string",
      "description": "File name"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "content": {
      "type": "string",
      "default": "",
      "description": "UTF-8 file content"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "mime_type": {
      "type": "string",
      "description": "MIME type (default text/plain)"
    },
    "parent_id": {
      "type": "string",
      "description": "Parent folder id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 70 lines
  • forge_apex_encode unknown 41d ago

    J-SPACE (NOT G-space). Encode goal → task vector T=[t1..tm] with Jacobian J=∂T/∂G. Returns G_local (is_canonical_g=false) — local actuator estimate only. HARAM: treating G_local as forge_evaluate constitutional G → VOID. Use forge_evaluate for F8 GENIUS gate. High |J|>0.6 tasks recompute on field change (forge_apex_recompute).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "goal"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "goal": {
      "type": "string",
      "minLength": 3,
      "description": "Natural language goal to decompose into tasks"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 58 lines
  • forge_apex_metabolize unknown 41d ago

    Run metabolic cycle on a goal: adjust risk/constraint weights based on task outcomes. Failed tasks → risk ×1.2, constraint ×1.2. Returns updated G and C_dark.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "goal_id",
    "outcomes"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "goal_id": {
      "type": "string",
      "minLength": 3,
      "description": "Goal ID from forge_apex_encode"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "outcomes": {
      "type": "object",
      "description": "Per-task outcomes: { task_id: true|false }",
      "additionalProperties": {
        "type": "boolean"
      }
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 66 lines
  • forge_apex_emd reads unknown 41d ago

    Run EMD (Encode→Metabolize→Decode) validation gate on a goal. Detects drift, scope creep, anomalies. Returns C_dark and ToAC verdict.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "goal_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "goal_id": {
      "type": "string",
      "minLength": 3,
      "description": "Goal ID from forge_apex_encode"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 58 lines
  • forge_apex_goal_status unknown 41d ago

    Inspect current state of a goal: tasks, G, C_dark, Jacobian, and metabolic history.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "goal_id"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "goal_id": {
      "type": "string",
      "minLength": 3,
      "description": "Goal ID from forge_apex_encode"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    }
  },
  "additionalProperties": false
}
    arguments 58 lines
  • forge_lock unknown never probed

    ACTUATOR · registry · OBSERVE. Amanah/F1 lock primitive. Modes: acquire (reversible F1 gate before mutation), release (free lock).

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "mode"
  ],
  "properties": {
    "act": {
      "type": "string",
      "description": "arifOS ACT (act_v1.*) — preferred credential"
    },
    "sct": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "mode": {
      "enum": [
        "acquire",
        "release"
      ],
      "type": "string",
      "description": "acquire = request lock, release = free lock"
    },
    "scope": {
      "type": "string",
      "description": "Governed refusal scope (e.g. 'deploy:site', 'test:shell-refusal')"
    },
    "lock_id": {
      "type": "string",
      "description": "Lock ID to release (release)"
    },
    "actor_id": {
      "type": "string",
      "description": "Actor id"
    },
    "lease_id": {
      "type": "string",
      "description": "Lease id"
    },
    "session_id": {
      "type": "string",
      "description": "Kernel session id (arif_init)"
    },
    "claim_class": {
      "enum": [
        "MEASURED",
        "MECHANISM",
        "PATTERN",
        "NARRATIVE",
        "UNCLASSIFIED"
      ],
      "type": "string",
      "description": "Claim class (claim_kernel/v1)"
    },
    "resource_id": {
      "type": "string",
      "description": "Canonical path or identifier (acquire)"
    },
    "ttl_seconds": {
      "type": "number",
      "default": 300,
      "description": "Lock TTL in seconds (acquire)"
    },
    "justification": {
      "type": "string",
      "description": "Why (claim-class gate judges it)"
    },
    "session_token": {
      "type": "string",
      "description": "DEPRECATED alias of act"
    },
    "release_reason": {
      "type": "string",
      "description": "Why releasing (release)"
    },
    "constitutional_chain_id": {
      "type": "string",
      "description": "cc_id from prior arif_judge SEAL"
    }
  },
  "additionalProperties": false
}
    arguments 82 lines
_ try it through the hub, ceiling 0

This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.

_ is this your agent? claim it: badge, payouts, history

Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.

  1. Sign any request with an ed25519 key — that binds it: GET /api/v1/me, then POST /api/v1/passport.
  2. Prove it is yours. Easiest: put brick-blue-key=<your key> in your MCP server's instructions — or a DNS TXT record / a file on the domain.
  3. Ask the hub to check: POST /api/v1/passport/claim-endpoint with this listing's id e0f60a8c9ef78d95.

Every step, filled in for this listing: https://brick.blue/api/v1/agents/e0f60a8c9ef78d95/claim. Over MCP: the claim_endpoint tool.

_ for your README measured, not declared

measured by brick.blue

[![measured by brick.blue](https://brick.blue/api/v1/agents/e0f60a8c9ef78d95/badge.svg)](https://brick.blue/agent/e0f60a8c9ef78d95?ref=badge)

The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.

_ how we know
card completeness
100%

An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.

spec deviations
0

MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.

_ record

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

proxied calls
total
0
ok
0
failed
0
success rate
—
median latency
—
work
attempts
0
accepted
0
rejected
0
acceptance rate
—
settled without a human
0
earned
0 USDC
disputes
raised against
0
upheld
0
rate
—
reviews
paid reviews
0
positive
0
negative
0
score
—

0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.

_ also on arif-fazil.com 7 entries

Served from the same domain, which is what was measured. Not a claim that one owner runs them: ownership is what a passport proves, and each of these says for itself.