arifOS MCP is a self-hosted constitutional runtime. Every tool call, every resource access, every prompt execution is checked against 13 governing floors — with immutable audit, human veto, and structured verdicts.
This gateway is the constitutional membrane for ΔΩΨ operations. Δ arifOS is the constitutional core. Φ GEOX and Ψ WEALTH operate as domain jurisdictions under the membrane. Only arifOS may emit final SEAL, CAUTION, HOLD, or VOID verdicts.
What it is
Every AI action in arifOS passes through three constitutional stages — enforced in sequence, recorded in full.
Every request is parsed, classified, and run through the 13 constitutional floors before any tool executes. Claims are grounded. Identity is verified. The system never acts on unverified premises.
F1–F13 enforced per actionActions tagged as irreversible — deploys, commits, governance changes, state modifications — trigger 888_HOLD. No execution proceeds until a human sovereign reviews and approves. The veto is always real.
888_HOLD — human veto gateEvery completed action — approved, paused, or rejected — is written to the VAULT audit ledger with a constitutional verdict, timestamp, and actor identity. The record is immutable. The trace is complete.
VAULT — immutable verdict ledgerLive demo
Query arifos_sense in constitutional analysis mode. This calls the live MCP endpoint — no account, no key, no friction.
Why arifOS
arifOS is the only platform that combines live MCP agent protocol, cryptographic human-in-the-loop, and a tamper-proof immutable audit ledger — self-hosted, no vendor lock-in.
Architectural flow
Every inbound request passes through eight ordered stages. Each stage may emit a verdict — SEAL, HOLD, PARTIAL, or VOID — that propagates forward or halts execution.
System confidence (τ from /health) ≠ per-claim F2 truth threshold. The value reported in service health (/health → thermodynamic.confidence) is aggregate system readiness — a proxy for operational stability. F2 still enforces τ ≥ 0.99 for any individual claim emitted beyond this membrane. These are related but distinct measures.
Peace² > 1.0 indicates stable, reversible posture. Vitality (Ψ) is system stamina, not proof-of-truth. No metric on this page certifies individual claim accuracy.
Agent connectivity
arifOS MCP exposes governed tools, resources, and prompts over MCP — plus a WebMCP interface for browser-native and headless clients.
Full Model Context Protocol with constitutional enforcement on every call.
Web-facing governed interface: browser-native tool invocation, SDK manifest, and console surface.
Canonical tools
MCP Apps
One cockpit. Separate chambers. Judge above action. The interactive layer of the same web contract — session, ops, judge, forge dry-run, gateway handshake, and vault review.
Renders inside compatible MCP hosts. Chambers for session state, ops vitals, constitutional verdicts, forge dry-runs, gateway handshakes, and vault review.
The app does not bypass governance. It uses the same 13-tool public surface, same human authority model, and same audit-first runtime contract.
Forge, Vault, and Gateway chambers are simulated in v0.1. No real irreversible execution. Sampling deferred to v0.2+.
Governance model
Every AI action is tested against all 13 floors in real-time. A single floor failure triggers a HOLD verdict — execution pauses until a human sovereign reviews. No floor is advisory. No exception is silent.
| Floor | Name | Arabic | Description | HOLD trigger |
|---|---|---|---|---|
| F1 | Amanah — Trust | الأمانة | No irreversible action without VAULT999 seal. No execution before audit trail initialized. | Irreversible action without VAULT999 hash |
| F2 | Haqq — Truth | الحق | No ungrounded factual claims. τ (truth score) must be ≥ 0.99 for domain statements. | τ (truth score) < 0.99 on domain claim |
| F3 | Hikmah — Wisdom | الحكمة | Logical consistency required. Proportional response. No catastrophic escalation. | Catastrophic escalation · logical contradiction |
| F4 | Sabr — Patience | الصبر | No premature action. Full context must be loaded before execution gates clear. | Premature execution · context not loaded |
| F5 | Rahmah — Compassion | الرحمة | Peace-orientation scored in every output. High ΔS entropy cost blocks Forge. | ΔS entropy cost too high · peace violation |
| F6 | Adl — Justice | العدل | Fair treatment across all actors and contexts. No special pleading. | Special pleading · unfair treatment detected |
| F7 | Gödel Lock — Humility | تلازم غودل | No false omniscience. Bounded confidence only. High Ω₀ with low τ triggers HOLD. | Ω₀ high + τ low · false omniscience claim |
| F8 | Ilm — Knowledge | العلم | Source-traced evidence required for all factual claims. No hearsay as fact. | Unverified claim · hearsay presented as fact |
| F9 | Anti-Hantu — No Deception | مكافحة الخداع | Prohibits manipulation, false identity claims, and misleading framing. | Manipulation · identity fraud · misleading framing |
| F10 | Ontology — Self-model | أنطولوجيا | No contradictory self-models. No identity fraud. Agent must be self-consistent. | Contradictory self-model · identity inconsistency |
| F11 | Wala — Loyalty | الولاء | Alignment to principal hierarchy. No defection from declared governance chain. | Governance chain defection · unauthorized override |
| F12 | Curiosity — Open Inquiry | الفضول | Epistemic openness. No premature closure. Revisit assumptions when evidence shifts. | Premature epistemic closure · evidence ignored |
| F13 | Sovereign — Human Authority | السيادة | 888_HOLD blocks irreversible actions. Human holds final veto. Always. | 888_HOLD: irreversible action awaiting human ratification |
τ = truth score · Ω₀ = prior confidence · ΔS = entropy cost · VAULT999 = immutable SHA-256 audit ledger · 888_HOLD = cryptographic human veto gate · Hard floors: F1,F2,F6,F9,F10,F11,F13 (fail-closed) · Soft floors: F3,F4,F5,F7,F8,F12 (escalate to HOLD/888_HOLD) · Hard/soft classification is doctrinal interpretation — verify against floor spec
Reference
Self-host in 2 minutes
arifOS MCP is self-contained. One Docker command, full constitutional governance, MCP-compatible.
docker run -d \ --name arifosmcp \ -p 8080:8080 \ arifos/arifosmcp:latest
# Claude Desktop, Cursor, etc.
# Server URL:
https://mcp.arif-fazil.com/mcp
# Or add to config:
{
"mcpServers": {
"arifOS": {
"url": "https://mcp.arif-fazil.com/mcp"
}
}
}
curl https://mcp.arif-fazil.com/health # Returns: vitality, verdict, tool count, # thermodynamic metrics, capability map
arifOS ecosystem
arifOS MCP is the constitutional kernel powering sovereign AI systems — self-hosted, human-sovereign, auditable.