Menu
Decentralized identifier (did:web) identity management for federation organs and agents.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.
High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.
Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.
End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.
Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.
| id | FORGE-did-web-identity |
| name | FORGE-did-web-identity |
| version | 1.0.0-2026.07.17 |
| description | Decentralized identifier (did:web) identity management for federation organs and agents. |
| owner | A-FORGE |
| risk_tier | high |
| floor_scope | ["F1","F2","F11","F13"] |
| autonomy_tier | T2 |
DITEMPA BUKAN DIBERI — Forged, Not Given.
Implement and maintain /.well-known/did.json for federation organs under arif-fazil.com. Support did:web resolution, key management (verification methods), service endpoints, and rotation patterns.
did:web identity for a new federation organ subdomaindid:web identifiers from external agents or systemsgovernance-jsonldfederation-manifest| Floor | Application |
|---|---|
| F1 AMANAH | Key rotation is irreversible once published; stage new keys before activating |
| F2 TRUTH | did.json must reflect live keys and endpoints — no phantom services |
| F4 CLARITY | One verification method per key type; no redundant entries |
| F11 AUDIT | Every key rotation logged to VAULT999 with receipt |
| F13 SOVEREIGN | Key material belongs to Arif; rotation requires sovereign approval |
// /.well-known/did.json — canonical structure
{
"@context": ["https://www.w3.org/ns/did/v1"],
"id": "did:web:arif-fazil.com",
"verificationMethod": [{
"id": "did:web:arif-fazil.com#key-1",
"type": "Ed25519VerificationKey2020",
"controller": "did:web:arif-fazil.com",
"publicKeyMultibase": "z6Mkr..."
}],
"authentication": ["did:web:arif-fazil.com#key-1"],
"assertionMethod": ["did:web:arif-fazil.com#key-1"],
"service": [{
"id": "did:web:arif-fazil.com#mcp",
"type": "McpServer",
"serviceEndpoint": "https://arifos.arif-fazil.com/mcp"
}]
}
# Serve did.json via Caddy
# /etc/caddy/conf.d/did.conf
well-known {
@did path /.well-known/did.json
handle @did {
root * /var/arifos/did
file_server
}
}
did:key or did:eth when did:web is the federation standarddid:web — keep it single-controller