Menú
Decentralized identifier (did:web) identity management for federation organs and agents.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.
High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.
Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.
End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.
Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.
| id | FORGE-did-web-identity |
| name | FORGE-did-web-identity |
| version | 1.0.0-2026.07.17 |
| description | Decentralized identifier (did:web) identity management for federation organs and agents. |
| owner | A-FORGE |
| risk_tier | high |
| floor_scope | ["F1","F2","F11","F13"] |
| autonomy_tier | T2 |
DITEMPA BUKAN DIBERI — Forged, Not Given.
Implement and maintain /.well-known/did.json for federation organs under arif-fazil.com. Support did:web resolution, key management (verification methods), service endpoints, and rotation patterns.
did:web identity for a new federation organ subdomaindid:web identifiers from external agents or systemsgovernance-jsonldfederation-manifest| Floor | Application |
|---|---|
| F1 AMANAH | Key rotation is irreversible once published; stage new keys before activating |
| F2 TRUTH | did.json must reflect live keys and endpoints — no phantom services |
| F4 CLARITY | One verification method per key type; no redundant entries |
| F11 AUDIT | Every key rotation logged to VAULT999 with receipt |
| F13 SOVEREIGN | Key material belongs to Arif; rotation requires sovereign approval |
// /.well-known/did.json — canonical structure
{
"@context": ["https://www.w3.org/ns/did/v1"],
"id": "did:web:arif-fazil.com",
"verificationMethod": [{
"id": "did:web:arif-fazil.com#key-1",
"type": "Ed25519VerificationKey2020",
"controller": "did:web:arif-fazil.com",
"publicKeyMultibase": "z6Mkr..."
}],
"authentication": ["did:web:arif-fazil.com#key-1"],
"assertionMethod": ["did:web:arif-fazil.com#key-1"],
"service": [{
"id": "did:web:arif-fazil.com#mcp",
"type": "McpServer",
"serviceEndpoint": "https://arifos.arif-fazil.com/mcp"
}]
}
# Serve did.json via Caddy
# /etc/caddy/conf.d/did.conf
well-known {
@did path /.well-known/did.json
handle @did {
root * /var/arifos/did
file_server
}
}
did:key or did:eth when did:web is the federation standarddid:web — keep it single-controller