arifos-constitutional-judge (LOAD-BEARING · GÖDEL · STRANGE-LOOP ZEN)
Forged: 2026-08-01 · Zen: 2026-08-09 (real isolate apex-judge)
Doctrine:/root/AAA/governance/GODEL_LOCK_STRANGE_LOOP.md
Status: Single canonical entry. DITEMPA BUKAN DIBERI.
The problem (two layers)
- Free-text SEAL — agent writes
888-APEX JUDGMENTwithoutarif_judge. - Strange loop — agent audits itself; logs may be true, conclusion is not independent.
Hermes audits Hermes → report says "fake" → report is also Hermes
→ GÖDEL LOOP (even with correct log evidence)
Independence ladder
| Class | Meaning |
|---|---|
STRANGE_LOOP_VOID |
doer == judge; rejected exit 6 |
ACTOR_SEPARATED |
different actor_id (still AI) |
KERNEL_ARBITER |
effective_verdict from arifOS only |
F13_REQUIRED |
human sovereign for critical |
Only F13 is true external. Kernel is independent of the chat; F13 is independent of the system.
Iron rules
| # | Rule |
|---|---|
| G1 | Never free-text a constitutional verdict. |
| G2 | Verdict source = arifOS.kernel.arif_judge only. |
| G3 | Quote effective_verdict + call_hash + session_id + independence_class. |
| G4 | status=completed ≠ SEAL. |
| G5 | Kernel down → HOLD. |
| G6 | doer ≠ judge_actor — use apex-judge isolate. |
| G7 | Evidence = OBS/DER only; no smuggled SEAL prose. |
| G8 | Critical/self-federation → --critical → F13_REQUIRED. |
Procedure — default (all harnesses)
Path A — ISOLATE (mandatory for self-audit / T2+ gates)
apex-judge isolate \
--doer HERMES \
--candidate "<action or claim under judgment>" \
--evidence-file /tmp/ev.json \
--pretty --human
# critical self-federation
apex-judge isolate --doer HERMES --critical -c "…"
Strange-loop only:
apex-judge --check-loop --doer HERMES --candidate "audit myself"
Path B — Isolated subagent
Prompt: /root/AAA/prompts/APEX_JUDGE_SUBAGENT.md
Parent passes evidence package only (no chat). Subagent runs Path A.
Path C — MCP (judge actor ≠ doer)
arif_initas judge lane (e.g. OPENCLAW), not as the doer.arif_judgewithevidence.in_band=true.- Parent quotes receipt only.
Path D — Audit prose
apex-judge --audit-text - <<'EOF'
…draft…
EOF
Separation table
| Role | Who | May produce |
|---|---|---|
| DOER | Hermes / Grok / OpenCode / … | work + OBS evidence |
| JUDGE LANE | different actor (OPENCLAW default) |
no free text SEAL |
| KERNEL | arifOS :8088 |
effective_verdict |
| F13 | Arif | critical approve |
Reporting template (only valid form)
### Kernel judgment (not agent opinion)
- independence_class: KERNEL_ARBITER
- doer: <X>
- judge_actor: <Y≠X>
- judge_persona: 888-APEX
- effective_verdict: <from receipt>
- session_id: …
- call_hash: …
- reasons: …
Option backlog
- Option 2: A2A →
888-APEXagent card (persona mesh). - Do not wait for Option 2 to stop self-certify — isolate is live.
DITEMPA BUKAN DIBERI.