一键在 Manus 中运行任何 Skill

forge-sct-federation-ingress

星标2

分支1

更新时间2026年7月17日 17:22

Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

ariffazil

ariffazil/AAA

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

FORGE — SCT Federation Ingress

Canonical: /root/AAA/governance/federation_sct.py
Authority registry: /root/AAA/registries/tool_authority.py (tools.yaml)
A-FORGE: src/infrastructure/governance/sctIngress.ts

SEALED foundation (do not re-implement)

PR	Law	Commit
PR1	Collect-all sources; identical→normalize; distinct→SCT_AMBIGUOUS	AAA `056a8c9`
PR2	action_class from tools.yaml only; no caller self-declare	AAA `57217da`
A-FORGE	Same AMBIGUOUS + production `FORGE_SCT_REQUIRE_MUTATE=0` → exit(1)	`1f1779b`

Law

SCT present     → verify fail-closed (claims required)
No SCT + OBSERVE → allow (registry-owned OBSERVE)
No SCT + MUTATE → SCT_REQUIRED
Conflicting tokens → SCT_AMBIGUOUS, execute nothing
Log fingerprint only (sha256) — never raw SCT
Production mutate bypass → startup FATAL

Mint + gate

import sys; sys.path.insert(0, "/root/AAA")
from governance.federation_sct import gate_tool_ingress
# gate_tool_ingress(tool, args, organ="geox")  # registry sets require_sct

PARKED — next block (after T3a + R4)

PR	Scope
3	Decision-event schema formal seal (scaffold may exist)
4	`trace_id` across 5 organs
5	Cockpit filter by trace_id
6	13×5 = 65 adversarial matrix, one shared trace_id
7	VAULT999 rollup receipt

Do not

First-token-wins
Trust caller action_class
Mock arifOS in production gates
Advance SE stage from this skill — T3a matrix first (FORGE-t3a-binding-matrix)

同仓库更多 Skills

同仓库

federation-release-attestation

ariffazil/AAA

Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.

2026-07-172

forge-pr-governance

ariffazil/AAA

High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.

2026-07-172

forge-repo-intelligence

ariffazil/AAA

Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.

2026-07-172

asi-session-seal

ariffazil/AAA

End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.

2026-07-172

forge-seal-a-close

ariffazil/AAA

Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.

2026-07-172

forge-t3a-binding-matrix

ariffazil/AAA

Close T3a authenticated session binding via falsifiable P0 matrix. Use when: T3a, free_nonce, bridging_seal, Ed25519 arif binding, key fragmentation, forge_p0_binding_test, NEG.3, NEG.6b, authenticated_session_binding.

2026-07-172

name	FORGE-sct-federation-ingress
description	Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
version	2026.07.17b
floors	["F1","F2","F11","F12","F13"]

FORGE — SCT Federation Ingress

Canonical: /root/AAA/governance/federation_sct.py
Authority registry: /root/AAA/registries/tool_authority.py (tools.yaml)
A-FORGE: src/infrastructure/governance/sctIngress.ts

SEALED foundation (do not re-implement)

PR	Law	Commit
PR1	Collect-all sources; identical→normalize; distinct→SCT_AMBIGUOUS	AAA `056a8c9`
PR2	action_class from tools.yaml only; no caller self-declare	AAA `57217da`
A-FORGE	Same AMBIGUOUS + production `FORGE_SCT_REQUIRE_MUTATE=0` → exit(1)	`1f1779b`

Law

SCT present     → verify fail-closed (claims required)
No SCT + OBSERVE → allow (registry-owned OBSERVE)
No SCT + MUTATE → SCT_REQUIRED
Conflicting tokens → SCT_AMBIGUOUS, execute nothing
Log fingerprint only (sha256) — never raw SCT
Production mutate bypass → startup FATAL

Mint + gate

import sys; sys.path.insert(0, "/root/AAA")
from governance.federation_sct import gate_tool_ingress
# gate_tool_ingress(tool, args, organ="geox")  # registry sets require_sct

PARKED — next block (after T3a + R4)

PR	Scope
3	Decision-event schema formal seal (scaffold may exist)
4	`trace_id` across 5 organs
5	Cockpit filter by trace_id
6	13×5 = 65 adversarial matrix, one shared trace_id
7	VAULT999 rollup receipt

Do not

First-token-wins
Trust caller action_class
Mock arifOS in production gates
Advance SE stage from this skill — T3a matrix first (FORGE-t3a-binding-matrix)