AAA

Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.

High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.

Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.

End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.

Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.

Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.

Close T3a authenticated session binding via falsifiable P0 matrix. Use when: T3a, free_nonce, bridging_seal, Ed25519 arif binding, key fragmentation, forge_p0_binding_test, NEG.3, NEG.6b, authenticated_session_binding.

Audit whether every constitutional floor and federation organ has code enforcement, tests, bypass resistance, and trace coverage. Use for read-only F1-F13 audits, organ boundary reviews, cascade-risk checks, or governance gap analysis.

Detect conflicting or parallel source-of-truth claims across federation repositories and resolve the canonical owner. Use after repository reorganization, when instructions conflict, or during federation authority audits.

Evaluate a proposed action against the arifOS F1-F13 constitutional floors and identify any failed gate. Use for governance changes, destructive operations, production deployment, secret handling, federation charter edits, or constitutional verdict review.

Test whether a proposed change touching vault, seal, identity, constitutional, or other F1 surfaces has a valid rollback and sovereign witness path. Use before committing or deploying changes whose reversibility is uncertain.

Check whether a proposed action stays within its declared task, organ, and constitutional scope. Use before cross-organ work, policy changes, production operations, secret handling, or any action whose blast radius or boundaries are unclear.

Gate and route tool use across federation MCP servers according to authority, risk, and fallback policy. Use for multi-organ tool sequences, cross-server coordination, registry audits, or degraded-server fallback decisions.

Apply the constitutional HOLD path when authority, evidence, system health, reversibility, or blast radius is insufficient. Use before irreversible actions, external communications, deployments, deletions, seals, or any tool call that must stop pending sovereign review.

Verify the complete ART-to-kernel-to-ACT evidence path before a SEAL-grade conclusion, without granting seal authority. Use when a proposed verdict claims readiness after all constitutional, witness, reversibility, and system-health gates have passed.

Archived monolith-edit region contract retained for audit provenance. Do not use as the active editing workflow; use the current spatial or visual verification skill for region-preserving page changes.

Archived live-content verification law retained for audit provenance. Do not use as the active deployment verifier; use the current runtime verification skill for HTTP body, content-type, handler, redirect, and region checks.

Archived skill artifacts and quarantine records. Retained for audit trace and civilizational memory.

Archived infrastructure cron skill retained only for audit provenance. Do not use for active cron or scheduler work; use the current FORGE infrastructure skills instead.

Quarantined chaos artifacts and resolved entropy events. Read-only reference. Retained for audit trace.

Archived WELL boundary-repair skill retained only for audit provenance. Do not use for active WELL changes; use the current federation boundary-repair skill instead.

Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.

Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.

Formal constitutional encoding — superseded by arifOS kernel F1-F13 runtime enforcement.

Self-critique and epistemic humility protocol before SEAL-grade or high-confidence claims. Meta-critique, confidence bands, explicit unknowns. F2, F7 enforced. BIJAKSANA: XML-tagged for Claude, numbered steps for Codex, imperative for Hermes.

Use when the task is about eureka, contradiction, insight generation, cross-domain synthesis, structured memory, explorer routing, or converting unresolved tension into a governed artifact for AAA warga. Everyday quantum runtime discipline lives in quantum-kernel-runtime (v1.0.0-2026.07.09); this skill is the high-energy collapse path when contradiction survives compression.

Class-level skill for designing sovereign agentic agents. 9-skill spine, 3-agent model (Architect→Engineer→Auditor), 4 powers per agent, deterministic/isolation principles, VPS management spine. BIJAKSANA: XML-tagged for Claude, numbered steps for Codex, imperative for Hermes.

Cross-discipline self-argument for non-trivial claims before they enter reasoning or irreversible decisions.

Real-time drift detection across tool manifests, agent cards, and skill registries. Compares live state against saved baselines and reports mismatches. Runs as a periodic audit or on-demand before SEAL operations. USE WHEN: "check drift", "verify registry", "detect manifest drift", "tool surface audit".

Causal inference bridge — PyWhy/DoWhy integration for 555-ASI causal reasoning.

Reference documentation for AAA skill system. Not an executable skill.

Provision nodes into the arifOS sovereign Headscale mesh and federate MCP clients to remote organs.

Build GitHub Actions CI/CD pipelines, Docker multi-stage builds, and deploy-verify patterns for VPS af-forge.

Decentralized identifier (did:web) identity management for federation organs and agents.

FastAPI API builder for organ bridge middleware and federation REST endpoints.

Federation topology manifest — arifOS organ registry and inter-organ contract specification.

Governance JSON-LD — constitutional ontology and semantic governance context definitions.

Six-step incident response playbook with structured logging, backoff/circuit-breaker for restart loops, and verification-as-terminal-state. Lower machine entropy.

MCP + A2A protocol integration — agentic inter-agent communication and task delegation.

Next.js App Router engineering — server components, streaming, and edge patterns.