# FORGE-federation-manifest

> Federation topology manifest — arifOS organ registry and inter-organ contract specification.

- Skill: `ariffazil/forge-federation-manifest` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add ariffazil/forge-federation-manifest`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ariffazil/forge-federation-manifest/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: ariffazil (https://skillmd.com/u/ariffazil)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/ariffazil/forge-federation-manifest

---

# ⚒️ Federation Manifest — arifOS Topology

> **DITEMPA BUKAN DIBERI** — Forged, Not Given.

## Purpose
Build and maintain `/.well-known/arifos-federation.json` — the machine-readable federation topology describing all 7 organs, their ports, transports, MCP/A2A surfaces, capability graphs, and edge relationships.

## When to Use
- Initializing or updating the federation manifest for a new organ or subdomain
- Adding transport endpoints (MCP stdio, MCP HTTP, A2A)
- Defining organ → organ capability edges (which organ calls which)
- Publishing for external agents to discover the federation topology
- Drift detection between manifest and live `tools/list`

## When NOT to Use
- Individual organ identity (DID) — use `did-web-identity`
- Constitutional ontology — use `governance-jsonld`
- Runtime health probes — use organ `/health` endpoints

## Constitutional Floor Alignment

| Floor | Application |
|-------|-------------|
| F1 AMANAH | Manifest versioned; old manifests archived, never deleted |
| F2 TRUTH | Every declared tool must match live `tools/list` — drift = F2 violation |
| F4 CLARITY | One manifest, one topology — no stale copies in random locations |
| F11 AUDIT | Manifest changes logged to VAULT999 with diff receipt |
| F13 SOVEREIGN | New organ registration requires F13 approval |

## Commands & Patterns

```jsonc
// /.well-known/arifos-federation.json
{
  "@context": "https://arifos.arif-fazil.com/schema/federation/v1",
  "federation": "arifOS",
  "version": "2026.07.16",
  "nodes": [
    {
      "id": "arifos",
      "name": "arifOS Constitutional Kernel",
      "port": 8088,
      "transport": "http",
      "mcpEndpoint": "/mcp",
      "healthEndpoint": "/health",
      "capabilities": ["judge", "seal", "session", "attest", "route", "think"]
    },
    {
      "id": "aforge",
      "name": "A-FORGE Execution Shell",
      "port": 7071,
      "transport": "http",
      "mcpEndpoint": "/mcp",
      "capabilities": ["execute", "docker", "git", "filesystem", "browser"]
    }
    // geox, wealth, well, aaa follow same structure
  ],
  "edges": [
    { "from": "aaa", "to": "arifos", "type": "a2a", "protocol": "a2a-v1" },
    { "from": "arifos", "to": "aforge", "type": "mcp", "protocol": "mcp-v2025-03-26" }
    // remaining 9 edges
  ]
}
```

## Refusal Surface
- ❌ Including secrets, keys, or internal IPs in the manifest
- ❌ Declaring capabilities that aren't verified by live probe
- ❌ Outdated port/transport info — must be synced with actual systemd config
- ❌ Duplicate node IDs or conflicting edge definitions