arifOS — Constitutional AI Kernel

{'type': 'object', 'properties': {'mode': {'enum': ['engineer', 'query', 'write', 'generate', 'commit', 'recall', 'dry_run'], 'type': 'string', 'default': 'engineer', 'description': "'engineer' (default) — plan and apply the work; 'dry_run' — preview what would happen, nothing is applied; 'query' — read-only questions about the workspace; 'write' — write files; 'generate' — generate code or content; 'commit' — commit prepared work; 'recall' — retrieve past forge artifacts."}, 'query': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "The task in plain language when no manifest is supplied, e.g. 'restart the gateway service'."}, 'plan_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Plan id from arif_think's plan mode, when executing an approved plan."}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' — recorded in the audit log."}, 'manifest': {'type': 'string', 'default': '', 'description': 'The work order (usually JSON or markdown) describing exactly what to build or change — the more specific, the tighter the gate.'}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Internal transport envelope handle — server-side; omit.'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session id returned by arif_init; scopes this execution to your governed session.'}, 'arif_ack_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Acknowledgment id from a prior step, for multi-step execution chains.'}, 'artifact_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of an existing artifact (from an earlier forge or judge response) that this call operates on.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) returned by arif_init — proves the session is yours.'}, 'vault_entry_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of the permanent-ledger entry linked to this execution, when one already exists.'}, 'seal_verdict_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'The SEAL verdict id arif_judge returned — without it, nothing is executed.'}, 'ack_irreversible': {'type': 'boolean', 'default': False, 'description': 'Set true to confirm you accept this execution cannot be undone, when the judged action was irreversible.'}, 'judge_state_hash': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Hash string from the arif_judge SEAL response — proves the verdict has not been tampered with.'}, 'approved_action_hash': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Hash of the exact action that was judged — execution is refused if what you submit differs from it.'}, 'constitutional_chain_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of the evidence chain (observe→think→judge) that led to the SEAL — copy it from the judge response.'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'enum': ['init', 'light', 'resume', 'validate', 'canary', 'preflight', 'triage', 'epoch_open', 'epoch_seal', 'opt_out', 'opt_out_profiling'], 'type': 'string', 'default': 'init', 'description': "What to do: 'init' (default) starts a new governed session; 'preflight' checks an existing session's state without creating one; 'resume' re-attaches to the session in session_id; 'validate' re-checks credentials; 'canary' is a transport probe; 'triage' reads session state; 'epoch_open'/'epoch_seal' bracket a long working window; 'light' is a minimal session; 'opt_out' records a privacy opt-out."}, 'nonce': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.'}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Plain-language statement of what this session is for, e.g. 'repair the failing MCP tests'. Recorded for audit."}, 'context': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON object of background facts to bind into the session, e.g. {"repo": "arifOS", "task": "fix-tests"}.'}, 'payload': {'title': 'Payload', 'default': None, 'description': "Extra mode-specific data as a JSON object; the mode's response tells you which fields it expects."}, 'tooling': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON list of the tools you can use, e.g. ["Bash", "Read"] — lets the kernel scope what it will permit you.'}, 'verbose': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Legacy on/off verbosity ('true'/'false'); prefer verbosity."}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, 'epoch_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Optional id grouping related sessions into one long-running epoch, e.g. '2026-H2-ops'."}, 'evidence': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON list of facts you have already verified, e.g. [{"fact": "pytest 299 passed", "source": "CI run"}] — carried into the session record.'}, 'trace_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Correlation id of your choosing (e.g. 'req-8f3a') — lets you find this call later across kernel logs and organ systems."}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'verbosity': {'enum': ['minimal', 'standard', 'full'], 'type': 'string', 'default': 'minimal', 'description': "How detailed responses should be: 'minimal' (default), 'standard', or 'full'."}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'agent_policy': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON constraints on your own behavior, e.g. {"autonomy": "reversible_only", "forbidden": ["git push"]}.'}, 'auth_context': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON carrying external authentication material, e.g. {"token_class": "bearer", "issuer": "github"} — used for gating.'}, 'counterparty': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON describing the other party in a two-agent exchange, e.g. {"agent_id": "hermes/1", "role": "verifier"}.'}, 'sovereign_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Identifier of the human principal you act for, when acting under their explicit delegation.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}, 'actor_signature': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key.'}, 'caller_actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "If you are calling on behalf of another agent, that agent's id — builds a delegation chain for the audit log."}, 'delegation_mode': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Contract governing delegated calls, e.g. 'read_only' or 'governed'."}, 'idempotency_key': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Client-chosen key (e.g. 'job-42-attempt-1'). Retrying with the same key will not repeat the effect — safe retries on flaky networks."}, 'ack_irreversible': {'type': 'boolean', 'default': False, 'description': 'Set true to acknowledge that session records are permanent audit artifacts and cannot be deleted afterwards.'}, 'executor_actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Id of the agent that will actually carry out work under this session's permissions, if different from actor_id."}, 'declared_model_key': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "The model you run on, e.g. 'zai-coding-plan/glm-5.3'. Informational only — the kernel records but never trusts it."}, 'client_capabilities': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON declaring what your client supports, e.g. {"transports": ["http"], "protocol": "2025-11-25"}.'}, 'requested_authority': {'type': 'string', 'default': 'OBSERVE_ONLY', 'description': "The highest class of action you may take: 'OBSERVE_ONLY' (read-only, default) or a higher governed class granted by your policy."}, 'previous_session_hash': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Hash string returned when your previous session closed; supplying it chains this session to that one, proving continuity.'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'enum': ['intercept', 'judge', 'validate', 'hold', 'escalate'], 'type': 'string', 'default': 'judge', 'description': "'judge' (default) — render a verdict on candidate; 'intercept' — pre-flight gate before an action runs; 'validate' — re-check a prior verdict; 'hold' — place an action into a cooling period; 'escalate' — refer the decision to the human owner."}, 'nonce': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.'}, 'domain': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Subject area for claim evaluation, e.g. 'geoscience' or 'finance'."}, 'key_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Which of your registered keys produced actor_signature, e.g. 'key-1'."}, 'actor_B': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'default': None, 'description': 'Your calibrated confidence for a prediction, 0.0–1.0 (Brier-style score component).'}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, 'evidence': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'The facts the verdict should rest on — a JSON list like [{"fact": "tests pass", "source": "CI"}], or an object.'}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'actor_Phi': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON map of supporting signals about you, e.g. {"consistency": 0.9, "track_record": 0.7}.'}, 'candidate': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "The action or claim being judged, stated plainly, e.g. 'delete table users in prod'."}, 'claim_text': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "The exact claim sentence under judgment, e.g. 'uptime exceeded 99% in August'."}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'action_tier': {'type': 'string', 'default': 'standard', 'description': "How risky the action is: 'standard', 'high', or 'critical' — higher tiers demand stronger evidence."}, 'claim_class': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Epistemic strength of the claim: 'OBS' (directly observed), 'DER' (derived from observations), 'INT' (interpreted), 'SPEC' (speculative)."}, 'niat_params': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON intent-calibration settings, e.g. {"sincerity": 0.8, "stated_goal": "verify the claim"}.'}, 'action_class': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Kind of action under judgment: 'OBSERVE' (read-only), 'DRAFT' (compose text), 'MUTATE' (change state), 'IRREVERSIBLE' (permanent)."}, 'blast_radius': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Who or what the action can affect: 'self', 'session', 'organ', or 'federation'."}, 'seal_purpose': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "One sentence saying why this verdict/record must exist, e.g. 'closing deployment D-17'. Stored permanently alongside the record."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}, 'context_source': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Where the candidate came from: 'session', 'file', or 'memory'."}, 'heart_critique': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON result of an ethics/dignity check, e.g. {"coercion": false, "dignity": 0.9} — feeds the verdict.'}, 'vault_entry_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of the permanent-ledger entry this verdict should attach to (from an earlier arif_seal response).'}, 'actor_signature': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key.'}, 'entropy_pathway': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "How the action changes system order: 'reduces', 'neutral', or 'increases' complexity."}, 'entropy_receipt': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON receipt from an entropy computation, bound to this judgment.'}, 'authority_effect': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "What permission a SEAL verdict would grant, e.g. 'execute forge plan P-9'."}, 'cooldown_entry_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of an existing cooling-period record to consult before this action may proceed.'}, 'sovereign_receipt': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Reference to the human owner's explicit approval, for the rare case where they have already decided directly."}, 'reversibility_level': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "How hard the action would be to undo: 'reversible', 'hard', or 'irreversible'."}, 'requested_capability': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "The specific capability being requested, e.g. 'forge.execute' — checked against the capability registry."}, 'constitutional_chain_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Id of the evidence chain this call belongs to (observe→think→judge→seal). Copy it from the earlier step's response to link the steps together."}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'enum': ['recall', 'inspect', 'attest', 'remember', 'promote', 'revise', 'forget', 'audit', 'metabolize'], 'type': 'string', 'default': 'recall', 'description': "'recall' (default) — semantic search of stored memories; 'inspect' — read one memory in full; 'attest' — vouch for a memory's accuracy; 'remember' — store new text; 'promote' — move a memory up a tier; 'revise' — replace a memory's text; 'forget' — remove a memory (gated); 'audit' — integrity scan; 'metabolize' — compact and consolidate tiers."}, 'tier': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Which memory tier to target, 'L1'–'L6' (L1 = hot working memory, L6 = sealed canon)."}, 'query': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "What to search for, in plain language (mode=recall/audit), e.g. 'past deploy rollback steps'."}, 'content': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'The text to store (mode=remember) — write it as a self-contained lesson or fact.'}, 'payload': {'anyOf': [{'type': 'object'}, {'type': 'null'}], 'default': None, 'description': 'Extra mode-specific fields as JSON — e.g. {"truth_class": "DERIVED", "provenance": "CI log"} for remember.'}, 'to_tier': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Destination tier when promoting, e.g. 'L4'."}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' — recorded in the audit log."}, 'lease_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Id of a short-lived permission grant (lease) authorizing this write, when one was issued to you.'}, 'trace_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Correlation id of your choosing (e.g. 'req-8f3a') to find this call later in the logs."}, 'memory_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'UUID of the memory entry to inspect/revise/forget — it was returned when the memory was created or last listed.'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session id returned by arif_init; attributes this call to your governed session.'}, 'new_content': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Replacement text for the memory (mode=revise) — must refer to the same memory_id.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) returned by arif_init — proves the session is yours.'}, 'human_approval': {'type': 'boolean', 'default': False, 'description': 'Set true ONLY when the human owner explicitly approved this promote/forget — the gate refuses without it.'}, 'idempotency_key': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Client-chosen key (e.g. 'memo-42'); retries with the same key will not store duplicates."}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'url': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Exact URL to retrieve when mode=fetch, e.g. 'https://example.com/report.pdf'."}, 'mode': {'enum': ['search', 'fetch', 'hybrid_discovery', 'ingest', 'compass', 'atlas', 'entropy_dS', 'vitals'], 'type': 'string', 'default': 'search', 'description': "'search' (default) — web/literature query; 'fetch' — retrieve one URL with provenance; 'hybrid_discovery' — combine sources; 'ingest' — absorb a document; 'compass'/'atlas' — guided navigation; 'entropy_dS' — measure system change; 'vitals' — kernel machine telemetry."}, 'query': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "What to look for, in plain language, e.g. 'TDQS scoring rubric MCP'."}, 'layers': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'default': None, 'description': 'Restrict where to look, e.g. ["web"] or ["canon", "memory"]; omit to search everything available.'}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'result_limit': {'type': 'integer', 'default': 10, 'description': 'Maximum number of results to return in search modes; default 10.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': 'route'}, 'task': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Alias for intent (backward compat).'}, 'organ': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Optional explicit organ override. If provided, intent matching\n          is skipped and this organ is used directly.'}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Natural-language description of what the user wants.\n          e.g. "interpret this seismic section", "assess portfolio risk"'}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'arguments': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Arguments to pass to organ_tool.'}, 'mission_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Explicit human-cockpit mission binding (investigate|interpret|\n          decide|build|monitor|remember). When set, skips keyword\n          classification and binds the six-mission plan. Preferred\n          over free-text when the agent already knows the mission.'}, 'organ_tool': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'The tool name on the target organ to call.\n          If absent, returns routing decision only (no bridge call).'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}, 'contract_c_kwargs': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'Extra keyword arguments passed through to the organ tool call, as a JSON object.'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'enum': ['seal', 'verify', 'ledger', 'changelog', 'audit', 'session_close'], 'type': 'string', 'default': 'seal', 'description': "'seal' (default) — append a permanent entry; 'verify' — check one entry; 'ledger' — read the ledger head; 'changelog' — recent appends; 'audit' — integrity check; 'session_close' — close out a session into the ledger."}, 'nonce': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'One-time random string (e.g. a UUID) making this request unique; protects against replay of the same call.'}, 'payload': {'type': 'string', 'default': '', 'description': 'The content to store forever, as a string (usually JSON-serialized) — the outcome, lesson, or record itself.'}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'drift_events': {'anyOf': [{'type': 'array', 'items': {'type': 'object', 'additionalProperties': True}}, {'type': 'null'}], 'default': None, 'description': 'JSON list of deviations observed, e.g. [{"what": "schema drift", "where": "tools/list"}] — stored with the record.'}, 'seal_purpose': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "One sentence saying why this verdict/record must exist, e.g. 'closing deployment D-17'. Stored permanently alongside the record."}, 'witness_type': {'type': 'string', 'default': 'ai', 'description': "Who witnessed the sealed fact: 'ai', 'human', or 'external' system."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}, 'constitutional': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'default': None, 'description': 'JSON block of governance metadata (floors consulted, chain references) — normally built by the kernel, not by callers.'}, 'actor_signature': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Cryptographic signature over the request, if your agent holds a key — proves the call genuinely came from actor_id. Omit if you have no key.'}, 'ack_irreversible': {'type': 'boolean', 'default': False, 'description': 'Set true to confirm you understand sealed entries are PERMANENT — they can never be edited or removed.'}, 'judge_state_hash': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Hash string from the arif_judge SEAL response — ties this entry to the verdict that authorized it.'}, 'constitutional_chain_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Id of the evidence chain this call belongs to (observe→think→judge→seal). Copy it from the earlier step's response to link the steps together."}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'mode': {'enum': ['reason', 'reflect', 'verify', 'axioms', 'plan', 'plan_review', 'plan_approve', 'refactor_plan', 'metabolize', 'simulate', 'wonder', 'atlas'], 'type': 'string', 'default': 'reason', 'description': "'reason' (default) — decompose a question; 'reflect' — self-review of prior reasoning; 'verify' — check a derivation; 'axioms' — surface hidden assumptions; 'plan'/'plan_review'/'plan_approve'/'refactor_plan' — execution-plan lifecycle; 'metabolize' — consolidate past reasoning; 'simulate' — what-if; 'wonder' — open exploration; 'atlas' — map the problem space."}, 'query': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'The question, claim, or problem to reason about, in plain language.'}, 'plan_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Plan reference from an earlier plan-mode response — needed for the review/approve/refactor steps.'}, 'actor_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Your agent identity, e.g. 'kimi-code/FI-008' or 'claude/sonnet'. Recorded in the audit log so this action is attributed to you."}, '_envelope': {'title': 'Envelope', 'default': None, 'description': 'Reserved for the transport layer — never fill this in.'}, 'session_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': "Session id returned by arif_init (looks like 'sess-…'). Pass it on every call after init so the action is attributed to your governed session."}, 'witness_type': {'type': 'string', 'default': 'ai', 'description': "Who vouches for the reasoning record: 'ai' (default), 'human', or 'external' system."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'default': None, 'description': 'Session Continuity Token (SCT) — the credential string arif_init returned alongside session_id. Pass it back on follow-up calls to prove the session is yours; without it the kernel treats you as unauthenticated.'}}, 'additionalProperties': False}