Run any Skill in Manus with one click

forge-sct-federation-ingress

Stars2

Forks1

UpdatedJuly 17, 2026 at 17:22

Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

ariffazil

ariffazil/AAA

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

SKILL.md

readonly

name	FORGE-sct-federation-ingress
description	Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
version	2026.07.17b
floors	["F1","F2","F11","F12","F13"]

FORGE — SCT Federation Ingress

Canonical: /root/AAA/governance/federation_sct.py
Authority registry: /root/AAA/registries/tool_authority.py (tools.yaml)
A-FORGE: src/infrastructure/governance/sctIngress.ts

SEALED foundation (do not re-implement)

PR	Law	Commit
PR1	Collect-all sources; identical→normalize; distinct→SCT_AMBIGUOUS	AAA `056a8c9`
PR2	action_class from tools.yaml only; no caller self-declare	AAA `57217da`
A-FORGE	Same AMBIGUOUS + production `FORGE_SCT_REQUIRE_MUTATE=0` → exit(1)	`1f1779b`

Law

SCT present     → verify fail-closed (claims required)
No SCT + OBSERVE → allow (registry-owned OBSERVE)
No SCT + MUTATE → SCT_REQUIRED
Conflicting tokens → SCT_AMBIGUOUS, execute nothing
Log fingerprint only (sha256) — never raw SCT
Production mutate bypass → startup FATAL

Mint + gate

import sys; sys.path.insert(0, "/root/AAA")
from governance.federation_sct import gate_tool_ingress
# gate_tool_ingress(tool, args, organ="geox")  # registry sets require_sct

PARKED — next block (after T3a + R4)

PR	Scope
3	Decision-event schema formal seal (scaffold may exist)
4	`trace_id` across 5 organs
5	Cockpit filter by trace_id
6	13×5 = 65 adversarial matrix, one shared trace_id
7	VAULT999 rollup receipt

Do not

First-token-wins
Trust caller action_class
Mock arifOS in production gates
Advance SE stage from this skill — T3a matrix first (FORGE-t3a-binding-matrix)

More from this repository

same repository

federation-release-attestation

ariffazil/AAA

Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.

2026-07-172

forge-pr-governance

ariffazil/AAA

High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.

2026-07-172

forge-repo-intelligence

ariffazil/AAA

Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.

2026-07-172

asi-session-seal

ariffazil/AAA

End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.

2026-07-172

forge-seal-a-close

ariffazil/AAA

Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.

2026-07-172

forge-t3a-binding-matrix

ariffazil/AAA

Close T3a authenticated session binding via falsifiable P0 matrix. Use when: T3a, free_nonce, bridging_seal, Ed25519 arif binding, key fragmentation, forge_p0_binding_test, NEG.3, NEG.6b, authenticated_session_binding.

2026-07-172

name	FORGE-sct-federation-ingress
description	Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
version	2026.07.17b
floors	["F1","F2","F11","F12","F13"]

FORGE — SCT Federation Ingress

Canonical: /root/AAA/governance/federation_sct.py
Authority registry: /root/AAA/registries/tool_authority.py (tools.yaml)
A-FORGE: src/infrastructure/governance/sctIngress.ts

SEALED foundation (do not re-implement)

PR	Law	Commit
PR1	Collect-all sources; identical→normalize; distinct→SCT_AMBIGUOUS	AAA `056a8c9`
PR2	action_class from tools.yaml only; no caller self-declare	AAA `57217da`
A-FORGE	Same AMBIGUOUS + production `FORGE_SCT_REQUIRE_MUTATE=0` → exit(1)	`1f1779b`

Law

SCT present     → verify fail-closed (claims required)
No SCT + OBSERVE → allow (registry-owned OBSERVE)
No SCT + MUTATE → SCT_REQUIRED
Conflicting tokens → SCT_AMBIGUOUS, execute nothing
Log fingerprint only (sha256) — never raw SCT
Production mutate bypass → startup FATAL

Mint + gate

import sys; sys.path.insert(0, "/root/AAA")
from governance.federation_sct import gate_tool_ingress
# gate_tool_ingress(tool, args, organ="geox")  # registry sets require_sct

PARKED — next block (after T3a + R4)

PR	Scope
3	Decision-event schema formal seal (scaffold may exist)
4	`trace_id` across 5 organs
5	Cockpit filter by trace_id
6	13×5 = 65 adversarial matrix, one shared trace_id
7	VAULT999 rollup receipt

Do not

First-token-wins
Trust caller action_class
Mock arifOS in production gates
Advance SE stage from this skill — T3a matrix first (FORGE-t3a-binding-matrix)