AGENTS.md
+18 −3
https://raw.githubusercontent.com/ariffazil/arifOS/HEAD/AGENTS.md
− arifOS is the **Constitutional Kernel** of the federation. It is the sole authority that evaluates claims against the 13 Constitutional Floors (F1–F13) and issues binding verdicts.− * **Port 8100:** VAULT999 internal viewer (append-only immutable ledger with 342,000+ sealed records).− | **arifOS** | Judge evidence, enforce F1–F13 floors, seal immutable receipts to VAULT999, issue verdicts | **Execute code mutations**, run arbitrary shell commands, bypass human sovereign (F13) |+ arifOS is the **Constitutional Kernel** of the federation. It evaluates claims against the 13 Constitutional Floors (F1–F13) and issues binding verdicts. Floor *coverage* is a live measurement, not a claim: `curl -s http://127.0.0.1:8088/health` reports which floors have instruments. Measured 2026-10-31: 12 of 13 measured, F6 UNMEASURED, constitutional layer `partial`.+ * **Port 8100:** VAULT999 internal viewer (append-only, hash-chained ledger — tamper-evident, not tamper-proof; record counts are live measurements: run `python3 scripts/verify_vault_chain.py` from the repo root; never cite static counts).+ | **arifOS** | Judge evidence, enforce the F1–F13 floors that have live instruments (unmeasured floors return UNKNOWN/HOLD, never PASS), seal receipts to VAULT999, issue verdicts | **Execute code mutations**, run arbitrary shell commands, bypass human sovereign (F13) |+ ---+ ## 6. Runtime Source Discipline (P4, sealed 2026-10-29)+ **One declared truth:** `scripts/runtime_source.json` — canonical runtime, other trees, interpreters, shadow rules.+ - **Canonical runtime (what the kernel actually imports):** `/opt/arifos/current/venv/lib/python3.13/site-packages/arifosmcp`+ - `/opt/arifos/app` — synced source copy + deploy marker (`.git_commit`); **not** the import origin.+ - `/root/arifOS` — source of truth for code and for this declaration; **not** the import origin.+ ```bash+ # The only sanctioned way to measure the live kernel+ /opt/arifos/current/venv/bin/python /root/arifOS/scripts/probe_runtime_source.py+ # exit 0 = you measured the canonical runtime | exit 3 = you measured the wrong tree+ ```+ **Two traps the probe reports:**+ 1. `python -c` / `-m` / stdin with cwd inside `/root/arifOS` puts the **source tree** first on `sys.path`.+ 2. `/root/arifOS/.venv` is an **editable** install (`__editable__.arifos-*.pth`) and always resolves the source tree.+ A probe that reports the source tree while claiming to measure the live kernel is a failed probe, not a surprising result.