
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
arifos
Advanced tools
mcp-name: io.github.ariffazil/arifos | .ariffazil/arifos | arifOS v1!2026.7.26 — Constitutional AI Governance Kernel. 8 kernel ABI capabilities → 6 public tools (arif_verb_noun, generated from arifosmcp/abi/capability_registry.json), dynamic F1-F13 enforcement via ConstitutionKernel + FloorEvaluator, VAULT999 immutable ledger, streamable-http MCP transport. Kernel substrate for AGI/ASI federation.
mcp-name: io.github.ariffazil/arifos
arifOS is a zero-trust, constitutional governance kernel and AGI substrate layer operating between AI agent harnesses (Claude Desktop, OpenCode, ChatGPT, AutoGen, CrewAI) and high-blast-radius execution environments.
Rather than acting as another LLM wrapper or agent orchestration framework, arifOS functions as an OS Kernel for Autonomous Intelligence—enforcing physical, mathematical, and epistemic boundaries (F1–F13 Constitutional Floors) before any tool call, code mutation, or financial transaction is executed.
| Feature / Scope | Standard Agent Harness (LangChain, OpenCode, AutoGen) | arifOS Governance Kernel (AGI Substrate) |
|---|---|---|
| Primary Role | Prompt routing, context assembly, loop execution | Epistemic validation, constitutional judgment, risk gating |
| Execution Safety | Soft system-prompt instructions | Deterministic F1–F13 floor verification & 888_HOLD gates |
| Tool Authority | Direct tool invocation by LLM | 8-Stage Canonical Pipeline (000 to 999) |
| Auditability | Ephemeral logs / local transcripts | Cryptographically sealed, append-only VAULT999 ledger |
| Sovereignty | Agent self-authorizes actions | F13 Sovereign Human Veto — absolute veto boundary |
{
"mcpServers": {
"arifOS": {
"url": "https://mcp.arif-fazil.com/mcp",
"transport": "streamable-http"
}
}
}
All agent interaction with the arifOS federation is gated through 8 canonical verbs. Agents cannot mutate state without advancing through the verified stage sequence:
[000] arif_init ──> [111] arif_observe ──> [333] arif_think ──> [444] arif_route
│
[999] arif_seal <── [777] arif_forge <── [888] arif_judge <── [555] arif_memory
| Stage | Verb | Canonical Function | Governance / Epistemic Duty |
|---|---|---|---|
| 000 | arif_init | Session Ignition & Actor Binding | Authenticates identity, binds session token, loads constitutional context |
| 111 | arif_observe | Empirical Sensing & Evidence Gathering | Fetches reality, checks vitals, measures system entropy ($\Delta S$) |
| 333 | arif_think | Structured Reasoning & Falsification | Performs F2 Truth / F7 Humility checks, generates execution plans |
| 444 | arif_route | Federation Dispatch | Routes intent to domain organs (GEOX, WEALTH, WELL, A-FORGE) |
| 555 | arif_memory | Governed Memory Metabolism | Accesses L1–L6 memory layers (Qdrant, Redis, FalkorDB) with provenance |
| 888 | arif_judge | Constitutional Verdict | Issues SEAL, HOLD (ratification), SABAR, or VOID (block) |
| 777 | arif_forge | Mutation & Execution Gate | Authorizes downstream code build/deploy via A-FORGE (Requires SEAL) |
| 999 | arif_seal | Immutable Ledger Anchor | Appends cryptographic execution proof to VAULT999 |
Every candidate action evaluated by arif_judge must satisfy 13 strict constitutional invariants:
F1 AMANAH : Reversible-first design. Irreversible actions trigger 888_HOLD.
F2 TRUTH : Evidentiary fidelity ≥ 0.99 (input gate). Epistemic labels (OBS/DER/INT/SPEC) required. Governs what quality of evidence enters the system.
F3 WITNESS : Multi-party consensus (Human × AI × Earth × Verifier ≥ 0.75).
F4 CLARITY : ΔS ≤ 0 — every output must reduce or preserve system entropy.
F5 PEACE² : Non-destructive power. Harm, extortion, and harassment blocked.
F6 EMPATHY : Protect weakest stakeholder; enforce κᵣ thresholds.
F7 HUMILITY : Assertoric confidence cap = 1−Ω₀ ∈ [0.95, 0.97], where Ω₀ ∈ [0.03, 0.05] (output gate). Explicit unknowns required. Governs how certain the agent may sound about its conclusions. F2 and F7 operate on different axes: you can have perfect evidence and still be wrong.
F8 GENIUS : Geometric mean capability (G ≥ 0.80) for complex operations.
F9 ANTIHANTU : Absolute prohibition of dark patterns, deception, or consciousness claims.
F10 ONTOLOGY : AI is instrument/substrate only. No soul, sentience, or emotion claims.
F11 AUDIT : Every decision cryptographically signed, traceable, and inspectable.
F12 RESILIENCE : Strict prompt-injection defense and memory boundary isolation.
F13 SOVEREIGN : Human veto FINAL. Sovereign (Arif F13) holds absolute override.
arifOS serves as the central control plane governing 6 specialized federation organs:
graph TD
Sovereign[👤 ARIF — F13 SOVEREIGN VETO] -->|Ultimate Authority| Cockpit
subgraph Control Plane
Cockpit[AAA Cockpit :3001<br/>State & Routing]
Kernel[⚖️ arifOS Kernel :8088<br/>Law, Judgment & Seals]
end
subgraph Execution & Domain Organs
AFORGE[⚒️ A-FORGE :7071<br/>Code Build & Deploy]
GEOX[🌍 GEOX :8081<br/>Earth & Geological Intelligence]
WEALTH[💰 WEALTH :18082<br/>Capital Compute & Risk]
WELL[🫀 WELL :18083<br/>Human Readiness - REFLECT_ONLY]
end
subgraph Immutable Ledger
VAULT[(VAULT999<br/>Merkle-Chained Audit Ledger)]
end
Cockpit --> Kernel
Kernel -->|arif_judge: SEAL| AFORGE
Kernel -->|arif_route| GEOX
Kernel -->|arif_route| WEALTH
Kernel -->|arif_route| WELL
AFORGE -->|Receipt| VAULT
Kernel -->|Seal Anchor| VAULT
# Clone repository
git clone git@github.com:ariffazil/arifos.git /opt/arifos/app
cd /opt/arifos/app
# Synchronize virtualenv & dependencies
uv sync --all-extras
# Run FastMCP Kernel daemon (Port 8088)
python -m arifosmcp.runtime.server
# Execute unit and constitutional test suite
python -m pytest tests/ -q --tb=short
curl -s http://127.0.0.1:8088/health | jq .owner_summary
Expected Output: {"color": "GREEN", "reasons": ["vault_healthy", "no_runtime_drift", "no_contract_drift"]}
arifOS operates as the Constitutional Kernel and Judge for the entire arifOS Federation. Every organ maintains distinct boundaries and capabilities:
| Organ | Domain Role | Port | Repo | Live MCP | Health Witness | Machine Spec |
|---|---|---|---|---|---|---|
| arifOS | Constitutional Kernel & Judge | 8088 | repo | mcp | health | llms.txt |
| A-FORGE | Governed Execution Engine | 7071 / 7072 | repo | mcp | health | llms.txt |
| AAA | Institution, Control Plane & A2A | 3001 | repo | — | health | llms.txt |
| GEOX | Earth Intelligence (Subsurface) | 8081 | repo | mcp | health | llms.txt |
| WEALTH | Capital Intelligence (Compute) | 18082 | repo | mcp | health | llms.txt |
| WELL | Vitality & Readiness Guard | 18083 | repo | mcp | health | llms.txt |
| HERMES | Multi-Modal Bridge & Telegram Relay | 8644 | repo | — | — | — |
Public Domain: arif-fazil.com · Federation Root: arifos.arif-fazil.com
888_HOLD or VOID verdict.DITEMPA BUKAN DIBERI — Forged, Not Given.
Truth must cool before it rules. 999 SEAL ALIVE.
FAQs
mcp-name: io.github.ariffazil/arifos | .ariffazil/arifos | arifOS v1!2026.7.26 — Constitutional AI Governance Kernel. 8 kernel ABI capabilities → 6 public tools (arif_verb_noun, generated from arifosmcp/abi/capability_registry.json), dynamic F1-F13 enforcement via ConstitutionKernel + FloorEvaluator, VAULT999 immutable ledger, streamable-http MCP transport. Kernel substrate for AGI/ASI federation.
The pypi package arifos receives a total of 264 weekly downloads. As such, arifos popularity was classified as not popular.
We found that arifos demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.