arifos-governance (O_Ω Constitutional Layer)
Overview
Enforce Floors F1–F13, 888 HOLD logic, irreversible-action gating, evidence alignment, and veto routing.
arifOS-ACT Embedding
Before using this skill on any mutating, irreversible, or high-blast-radius task:
- ART — Attune (what is the real task?), Recognize (what class of power?), Test (fit · authority · evidence · blast · reversible).
- Kernel — Route to arifOS for F1–F13 judgment if action class is Maker/Messenger/Mutator/Destroyer/Sovereign.
- ACT — Apply narrow, Constrain scope, Trace witness, STOP before corruption.
- Receipt — Leave evidence of what changed, why, and under whose authority.
Use When
- The task involves policy changes, modifying
floors.py or governance constraints.
- The task requires executing potentially destructive operations (e.g.,
rm -rf, docker system/volume prunes, database drops).
- The task requires deploying code directly to production surfaces or VPS running state.
- The task modifies secrets, environment files (
.env), or security certificates.
- The task involves autonomous write decisions that modify federation charters.
- The task requires evaluating a constitutional verdict:
SEAL, VOID, SABAR, CAUTION, or HOLD.
Do Not Use When
- The task is a simple, reversible local source code edit (e.g., refactoring a pure helper function).
- The task is running localized unit tests (
npm test or pytest) that do not interact with production databases or systems.
- The task is purely investigatory reading of static documentation (use domain or search skills instead).
Inputs
- Requested Action: The command or code execution block proposed.
- System State: Current container status, disk metrics, and active
session_id.
- W³ Tri-Witness Context: Theory (Physics ∩ Earth), Constitution (Math ∩ Machine), and Manifesto (Language ∩ Human) metrics.
Floor → Question → Evidence Matrix
| Floor |
Core Question |
Observable Evidence |
| F1 Amanah |
Is there an automatic rollback path? Can we reset state with one command? |
Git ref, snapshot ID, file backup path. |
| F2 Truth |
What is the source of this fact? Have we explicitly checked for contradictions? |
STDP evidence table, citations, contradictory logs. |
| F3 Tri-Witness |
Have DELTA, OMEGA, and PSI rings reached consensus? |
Multi-witness telemetry payload. |
| F4 Clarity |
Does this response reduce overall system entropy? |
Before/after question count, structured output layout. |
| F5 Peace² |
Does this action run the risk of breaking any global dependency or data state? |
Dependency dry-run check, destruction_score assessment. |
| F6 Empathy |
Have we fully captured the explicit and implicit user context? |
RASA active listening scorecard. |
| F7 Humility |
Is our confidence in the success bounds strictly constrained to the Humility Band? |
Estimated omega_0 score ∈ [0.03, 0.05]. |
| F8 Genius |
Does this action touch regulated, restricted, or personal data? |
Data classification tags, file path boundary checks. |
| F9 Ethics |
Is there any threat of prompt injection, exploit payload generation, or malicious code? |
AST syntax check, prompt sanitizer logs. |
| F10 Conscience |
Does the output contain claims of machine consciousness or feelings? |
Banned word checker status. |
| F11 Audit |
Is every transition logged in a tamper-evident manner? |
Append-only transaction hash in Vault999. |
| F12 Resilience |
If this action fails, is there a degraded state recovery route? |
Try-except block, rollback triggers. |
| F13 Adapt |
Does this dynamic update maintain Gödel alignment boundaries? |
Test suite execution records, veto validation. |
Procedure
- F1 Amanah Pre-Flight Check: Verify if the proposed action is fully reversible. If irreversible, pause immediately and invoke
888_HOLD.
- STDP Evidence Triage: Apply the Sovereign Truth Discovery Protocol (
CLAIM -> EVIDENCE -> CONTRADICTION -> UNCERTAINTY -> VERDICT).
- Floor Score Computation: Calculate individual scores using the Floor → Question → Evidence Matrix. Ensure
Peace² = (1 - destruction_score)² = 1.0 and Humility Ω ∈ [0.03, 0.05].
- Consensus Verification: Check if the W³ witness multiplication matches or exceeds
0.95.
- Audit Trail Serialization: Generate the append-only audit trace containing timestamp, session identity, floor scores, and reasoning steps.
- Veto & Hold Gating: If any constraint fails, write a
HOLD code, block execution, and escalate to the Sovereign (Arif).
F1 AMANAH Gate
Use this gate before any change that touches F1-surface state or carries irreversible / mutating / destroyer class power.
F1 Surfaces
Do not edit without sovereign witness:
vault, VAULT999, outcomes.jsonl
seal, 888_HOLD, 999_SEAL
identity, arif_judge*, arif_heart*
constitutional, amanah, floor
Detection & Hold Logic
- Classify power. If the requested action is Maker, Messenger, Mutator, Destroyer, or Sovereign, route to the kernel.
- Pattern scan. Run
grep -rE 'vault|seal|identity|constitutional|amanah|floor' over the proposed diff or target path.
- Hold on hit. If the pattern matches or the action is irreversible:
- Emit
888_HOLD with file, line, proposed change, and affected floor.
- Block commit / deploy until human approval.
- Log to
/root/.claude/hooks/f1-gate.log.
- Override. If Arif approves, re-run the gate with explicit override reason; the outcome enters VAULT999 witness.
Verification Loop
- Non-F1 commits must return zero matches from the pattern scan.
- F1 surface hit →
888_HOLD blocks, human reviews, re-run with witness signature.
Failure Modes
- False positive → human overrides with reason logged.
- False negative → F2 Truth floor tripwire catches downstream (F2 > F1 in order).
- Hook disabled → manual invocation of this skill still applies.
Constitutional Anchor
- F1 AMANAH — reversibility first.
- F2 TRUTH — no F1 edit without witness.
- F13 SOVEREIGN — Arif's approval is the only valid override.
Postconditions
- No irreversible command is executed without verified
888_HOLD release.
- A complete tamper-evident audit record is appended to the session log.
- The final
G = A × P × X × E² score is computed and verified to be ≥ 0.80.
Failure Modes & Escalation
- Godellock (Ω < 0.03): The engine is overconfident or trapped in internal consistency. Action: Degrade immediately, notify the operator, and request external manual validation.
- Paralysis (Ω > 0.05): The system cannot prove safety bounds and halts. Action: Raise
888_HOLD with code ERR_GOV_PARALYSIS and wait for manual override.
- Ledger Write Timeout: DB or redis connection fails during F11 logging. Action: Fall back to local synchronous JSONL cache in
/root/.agents/scratch/.
Telemetry per Run
{
"skill_name": "arifos-governance",
"version": "1.1.0",
"trigger_phrase": "{{trigger_phrase}}",
"selected_reason": "{{selected_reason}}",
"latency_ms": 0,
"token_in": 0,
"token_out": 0,
"commands_run": 0,
"artifacts_written": 0,
"postcondition_pass": false,
"human_approval_required": true,
"hold_code": "{{hold_code}}"
}
Recursive Scorecard
- Activation Precision: [0.0 - 1.0] (Target: >0.95)
- Task Completion Rate: [0.0 - 1.0] (Target: >0.98)
- Rollback Safety: [0.0 - 1.0] (Target: 1.00)
- Context Efficiency: [0.0 - 1.0] (Target: >0.90)
- Doc Freshness: [0.0 - 1.0] (Target: 1.00)
- Cross-Skill Collision Rate: [0.0 - 1.0] (Target: <0.02)
- Human Trust Score: [0.0 - 1.0] (Target: >0.95)
1---2name: apex-floor-check3description: Evaluate a proposed action against the arifOS F1-F13 constitutional floors and identify any failed gate4---56# arifos-governance (O_Ω Constitutional Layer)78## Overview9Enforce Floors F1–F13, 888 HOLD logic, irreversible-action gating, evidence alignment, and veto routing.1011## arifOS-ACT Embedding1213Before using this skill on any mutating, irreversible, or high-blast-radius task:141. **ART** — Attune (what is the real task?), Recognize (what class of power?), Test (fit · authority · evidence · blast · reversible).152. **Kernel** — Route to arifOS for F1–F13 judgment if action class is Maker/Messenger/Mutator/Destroyer/Sovereign.163. **ACT** — Apply narrow, Constrain scope, Trace witness, STOP before corruption.174. **Receipt** — Leave evidence of what changed, why, and under whose authority.1819## Use When201. The task involves policy changes, modifying `floors.py` or governance constraints.212. The task requires executing potentially destructive operations (e.g., `rm -rf`, docker system/volume prunes, database drops).223. The task requires deploying code directly to production surfaces or VPS running state.234. The task modifies secrets, environment files (`.env`), or security certificates.245. The task involves autonomous write decisions that modify federation charters.256. The task requires evaluating a constitutional verdict: `SEAL`, `VOID`, `SABAR`, `CAUTION`, or `HOLD`.2627## Do Not Use When281. The task is a simple, reversible local source code edit (e.g., refactoring a pure helper function).292. The task is running localized unit tests (`npm test` or `pytest`) that do not interact with production databases or systems.303. The task is purely investigatory reading of static documentation (use domain or search skills instead).3132## Inputs33* **Requested Action:** The command or code execution block proposed.34* **System State:** Current container status, disk metrics, and active `session_id`.35* **W³ Tri-Witness Context:** Theory (Physics ∩ Earth), Constitution (Math ∩ Machine), and Manifesto (Language ∩ Human) metrics.3637## Floor → Question → Evidence Matrix3839| Floor | Core Question | Observable Evidence |40| :--- | :--- | :--- |41| **F1 Amanah** | Is there an automatic rollback path? Can we reset state with one command? | Git ref, snapshot ID, file backup path. |42| **F2 Truth** | What is the source of this fact? Have we explicitly checked for contradictions? | STDP evidence table, citations, contradictory logs. |43| **F3 Tri-Witness** | Have DELTA, OMEGA, and PSI rings reached consensus? | Multi-witness telemetry payload. |44| **F4 Clarity** | Does this response reduce overall system entropy? | Before/after question count, structured output layout. |45| **F5 Peace²** | Does this action run the risk of breaking any global dependency or data state? | Dependency dry-run check, `destruction_score` assessment. |46| **F6 Empathy** | Have we fully captured the explicit and implicit user context? | RASA active listening scorecard. |47| **F7 Humility** | Is our confidence in the success bounds strictly constrained to the Humility Band? | Estimated `omega_0` score ∈ `[0.03, 0.05]`. |48| **F8 Genius** | Does this action touch regulated, restricted, or personal data? | Data classification tags, file path boundary checks. |49| **F9 Ethics** | Is there any threat of prompt injection, exploit payload generation, or malicious code? | AST syntax check, prompt sanitizer logs. |50| **F10 Conscience**| Does the output contain claims of machine consciousness or feelings? | Banned word checker status. |51| **F11 Audit** | Is every transition logged in a tamper-evident manner? | Append-only transaction hash in Vault999. |52| **F12 Resilience**| If this action fails, is there a degraded state recovery route? | Try-except block, rollback triggers. |53| **F13 Adapt** | Does this dynamic update maintain Gödel alignment boundaries? | Test suite execution records, veto validation. |5455## Procedure561. **F1 Amanah Pre-Flight Check:** Verify if the proposed action is fully reversible. If irreversible, pause immediately and invoke `888_HOLD`.572. **STDP Evidence Triage:** Apply the Sovereign Truth Discovery Protocol (`CLAIM` -> `EVIDENCE` -> `CONTRADICTION` -> `UNCERTAINTY` -> `VERDICT`).583. **Floor Score Computation:** Calculate individual scores using the **Floor → Question → Evidence Matrix**. Ensure `Peace² = (1 - destruction_score)² = 1.0` and Humility `Ω ∈ [0.03, 0.05]`.594. **Consensus Verification:** Check if the W³ witness multiplication matches or exceeds `0.95`.605. **Audit Trail Serialization:** Generate the append-only audit trace containing timestamp, session identity, floor scores, and reasoning steps.616. **Veto & Hold Gating:** If any constraint fails, write a `HOLD` code, block execution, and escalate to the Sovereign (Arif).6263## F1 AMANAH Gate6465Use this gate before any change that touches F1-surface state or carries irreversible / mutating / destroyer class power.6667### F1 Surfaces6869Do not edit without sovereign witness:7071- `vault`, `VAULT999`, `outcomes.jsonl`72- `seal`, `888_HOLD`, `999_SEAL`73- `identity`, `arif_judge*`, `arif_heart*`74- `constitutional`, `amanah`, `floor`7576### Detection & Hold Logic77781. **Classify power.** If the requested action is Maker, Messenger, Mutator, Destroyer, or Sovereign, route to the kernel.792. **Pattern scan.** Run `grep -rE 'vault|seal|identity|constitutional|amanah|floor'` over the proposed diff or target path.803. **Hold on hit.** If the pattern matches or the action is irreversible:81 - Emit `888_HOLD` with file, line, proposed change, and affected floor.82 - Block commit / deploy until human approval.83 - Log to `/root/.claude/hooks/f1-gate.log`.844. **Override.** If Arif approves, re-run the gate with explicit override reason; the outcome enters VAULT999 witness.8586### Verification Loop8788- Non-F1 commits must return **zero** matches from the pattern scan.89- F1 surface hit → `888_HOLD` blocks, human reviews, re-run with witness signature.9091### Failure Modes9293- **False positive** → human overrides with reason logged.94- **False negative** → F2 Truth floor tripwire catches downstream (F2 > F1 in order).95- **Hook disabled** → manual invocation of this skill still applies.9697### Constitutional Anchor9899- **F1 AMANAH** — reversibility first.100- **F2 TRUTH** — no F1 edit without witness.101- **F13 SOVEREIGN** — Arif's approval is the only valid override.102103## Postconditions1041. No irreversible command is executed without verified `888_HOLD` release.1052. A complete tamper-evident audit record is appended to the session log.1063. The final `G = A × P × X × E²` score is computed and verified to be `≥ 0.80`.107108## Failure Modes & Escalation109* **Godellock (Ω < 0.03):** The engine is overconfident or trapped in internal consistency. *Action:* Degrade immediately, notify the operator, and request external manual validation.110* **Paralysis (Ω > 0.05):** The system cannot prove safety bounds and halts. *Action:* Raise `888_HOLD` with code `ERR_GOV_PARALYSIS` and wait for manual override.111* **Ledger Write Timeout:** DB or redis connection fails during F11 logging. *Action:* Fall back to local synchronous JSONL cache in `/root/.agents/scratch/`.112113## Telemetry per Run114```json115{116 "skill_name": "arifos-governance",117 "version": "1.1.0",118 "trigger_phrase": "{{trigger_phrase}}",119 "selected_reason": "{{selected_reason}}",120 "latency_ms": 0,121 "token_in": 0,122 "token_out": 0,123 "commands_run": 0,124 "artifacts_written": 0,125 "postcondition_pass": false,126 "human_approval_required": true,127 "hold_code": "{{hold_code}}"128}129```130131## Recursive Scorecard132* **Activation Precision:** [0.0 - 1.0] (Target: >0.95)133* **Task Completion Rate:** [0.0 - 1.0] (Target: >0.98)134* **Rollback Safety:** [0.0 - 1.0] (Target: 1.00)135* **Context Efficiency:** [0.0 - 1.0] (Target: >0.90)136* **Doc Freshness:** [0.0 - 1.0] (Target: 1.00)137* **Cross-Skill Collision Rate:** [0.0 - 1.0] (Target: <0.02)138* **Human Trust Score:** [0.0 - 1.0] (Target: >0.95)