⚒️ Federation Manifest — arifOS Topology
DITEMPA BUKAN DIBERI — Forged, Not Given.
Purpose
Build and maintain /.well-known/arifos-federation.json — the machine-readable federation topology describing all 7 organs, their ports, transports, MCP/A2A surfaces, capability graphs, and edge relationships.
When to Use
- Initializing or updating the federation manifest for a new organ or subdomain
- Adding transport endpoints (MCP stdio, MCP HTTP, A2A)
- Defining organ → organ capability edges (which organ calls which)
- Publishing for external agents to discover the federation topology
- Drift detection between manifest and live
tools/list
When NOT to Use
- Individual organ identity (DID) — use
did-web-identity
- Constitutional ontology — use
governance-jsonld
- Runtime health probes — use organ
/health endpoints
Constitutional Floor Alignment
| Floor |
Application |
| F1 AMANAH |
Manifest versioned; old manifests archived, never deleted |
| F2 TRUTH |
Every declared tool must match live tools/list — drift = F2 violation |
| F4 CLARITY |
One manifest, one topology — no stale copies in random locations |
| F11 AUDIT |
Manifest changes logged to VAULT999 with diff receipt |
| F13 SOVEREIGN |
New organ registration requires F13 approval |
Commands & Patterns
// /.well-known/arifos-federation.json
{
"@context": "https://arifos.arif-fazil.com/schema/federation/v1",
"federation": "arifOS",
"version": "2026.07.16",
"nodes": [
{
"id": "arifos",
"name": "arifOS Constitutional Kernel",
"port": 8088,
"transport": "http",
"mcpEndpoint": "/mcp",
"healthEndpoint": "/health",
"capabilities": ["judge", "seal", "session", "attest", "route", "think"]
},
{
"id": "aforge",
"name": "A-FORGE Execution Shell",
"port": 7071,
"transport": "http",
"mcpEndpoint": "/mcp",
"capabilities": ["execute", "docker", "git", "filesystem", "browser"]
}
// geox, wealth, well, aaa follow same structure
],
"edges": [
{ "from": "aaa", "to": "arifos", "type": "a2a", "protocol": "a2a-v1" },
{ "from": "arifos", "to": "aforge", "type": "mcp", "protocol": "mcp-v2025-03-26" }
// remaining 9 edges
]
}
Refusal Surface
- ❌ Including secrets, keys, or internal IPs in the manifest
- ❌ Declaring capabilities that aren't verified by live probe
- ❌ Outdated port/transport info — must be synced with actual systemd config
- ❌ Duplicate node IDs or conflicting edge definitions
1---2id: FORGE-federation-manifest3name: forge-federation-manifest4version: 1.0.0-2026.07.175description: "Federation topology manifest — arifOS organ registry and inter-organ contract specification."6owner: A-FORGE7risk_tier: high8floor_scope: ['F1', 'F2', 'F11', 'F13']9autonomy_tier: T210capability_tier: fed-agent-subagent11ecology_state: WARM12---1314# ⚒️ Federation Manifest — arifOS Topology1516> **DITEMPA BUKAN DIBERI** — Forged, Not Given.1718## Purpose19Build and maintain `/.well-known/arifos-federation.json` — the machine-readable federation topology describing all 7 organs, their ports, transports, MCP/A2A surfaces, capability graphs, and edge relationships.2021## When to Use22- Initializing or updating the federation manifest for a new organ or subdomain23- Adding transport endpoints (MCP stdio, MCP HTTP, A2A)24- Defining organ → organ capability edges (which organ calls which)25- Publishing for external agents to discover the federation topology26- Drift detection between manifest and live `tools/list`2728## When NOT to Use29- Individual organ identity (DID) — use `did-web-identity`30- Constitutional ontology — use `governance-jsonld`31- Runtime health probes — use organ `/health` endpoints3233## Constitutional Floor Alignment3435| Floor | Application |36|-------|-------------|37| F1 AMANAH | Manifest versioned; old manifests archived, never deleted |38| F2 TRUTH | Every declared tool must match live `tools/list` — drift = F2 violation |39| F4 CLARITY | One manifest, one topology — no stale copies in random locations |40| F11 AUDIT | Manifest changes logged to VAULT999 with diff receipt |41| F13 SOVEREIGN | New organ registration requires F13 approval |4243## Commands & Patterns4445```jsonc46// /.well-known/arifos-federation.json47{48 "@context": "https://arifos.arif-fazil.com/schema/federation/v1",49 "federation": "arifOS",50 "version": "2026.07.16",51 "nodes": [52 {53 "id": "arifos",54 "name": "arifOS Constitutional Kernel",55 "port": 8088,56 "transport": "http",57 "mcpEndpoint": "/mcp",58 "healthEndpoint": "/health",59 "capabilities": ["judge", "seal", "session", "attest", "route", "think"]60 },61 {62 "id": "aforge",63 "name": "A-FORGE Execution Shell",64 "port": 7071,65 "transport": "http",66 "mcpEndpoint": "/mcp",67 "capabilities": ["execute", "docker", "git", "filesystem", "browser"]68 }69 // geox, wealth, well, aaa follow same structure70 ],71 "edges": [72 { "from": "aaa", "to": "arifos", "type": "a2a", "protocol": "a2a-v1" },73 { "from": "arifos", "to": "aforge", "type": "mcp", "protocol": "mcp-v2025-03-26" }74 // remaining 9 edges75 ]76}77```7879## Refusal Surface80- ❌ Including secrets, keys, or internal IPs in the manifest81- ❌ Declaring capabilities that aren't verified by live probe82- ❌ Outdated port/transport info — must be synced with actual systemd config83- ❌ Duplicate node IDs or conflicting edge definitions
ariffazil 