菜单
Close T3a authenticated session binding via falsifiable P0 matrix. Use when: T3a, free_nonce, bridging_seal, Ed25519 arif binding, key fragmentation, forge_p0_binding_test, NEG.3, NEG.6b, authenticated_session_binding.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Produces a seven-repository federation release manifest proving tag, commit, CI, artifact, and deployed-runtime parity. Never overwrites existing tags — issues corrected tags when drift is detected. Outputs signed JSON manifest with per-repo evidence chain.
High-level governance layer for pull request review across the federation. Ensures separation of duties, required signers, and constitutional compliance before merge. This is the **policy layer** that decides who must approve. The **checklist** lives in `github-pr-review`; do not duplicate it here.
Controller skill for repository intelligence across the arifOS Federation. Exposes 9 modes (inventory, map, delta, pr_review, ci_diagnose, issue_triage, security, cross_repo_impact, release_audit) and orchestrates existing GitHub micro-skills rather than duplicating their logic. Every mode outputs a minimum evidence envelope with repo, ref, commit_sha, working_tree, tag_delta, changed_files, critical_paths, tests, ci, security, contract_impacts, runtime_probe, risk_tier, proposed_action, rollback, evidence_class, and unknowns.
End-of-session seal ritual for Grok/AAA agents: inventory done vs open, write forge_work receipt, update session-state and daily memory, hand off next-agent INIT prompt. Use when: seal session, end of turn, session seal, handoff, close session, DITEMPA seal.
Wire, verify, and operate federation Session Capability Tokens (SCT) across arifOS mint/validate and organ ingress gates (A-FORGE, GEOX, WEALTH, WELL, AAA). Use when: SCT gate, session_token, federation_sct, SCT_AMBIGUOUS, tool_authority, FORGE_SCT_REQUIRE_MUTATE, 65-case matrix, decision event.
Close remaining Seal-A gates after P0 proof/identity/SCT/T3a work. Use when: Seal-A, stage 000, SE stage engine, SOT v2, BOOT, T3a binding, free_nonce, constitutional_grade, remaining seal tasks.
| name | FORGE-t3a-binding-matrix |
| description | Close T3a authenticated session binding via falsifiable P0 matrix. Use when: T3a, free_nonce, bridging_seal, Ed25519 arif binding, key fragmentation, forge_p0_binding_test, NEG.3, NEG.6b, authenticated_session_binding. |
| version | 2026.07.17 |
| floors | ["F1","F2","F7","F11","F13"] |
SE stage stays 000 until this matrix is 13/13 PASS.
Positive path alone ≠ CLOSED.
python3 /root/scripts/forge_p0_binding_test.py
# Receipt: A-FORGE/forge_work/2026-07-17/APEX-CONCORDANCE-17072026/t3a-p0-binding-matrix.md
13 PASS / 0 FAIL — T3a CLOSED
commit arifOS 196cb5ef2
canonical key: /root/compose/sekrits/arifos_sovereign.{key,pub} fp b467c07d975a36a5
| # | Gap | Status |
|---|---|---|
| B | Key fragmentation | CLOSED — bridging_seal prefers compose sekrits |
| C | free_nonce | CLOSED — challenge_not_issued |
| D | bridging_seal | CLOSED — fresh True + single_use replay False |
Re-run matrix only if regression suspected → expect 13/13.
| Role | Path | Fingerprint note |
|---|---|---|
| Canonical private | /root/compose/sekrits/arifos_sovereign.key | → b467c07d975a36a5 |
| Canonical public | /root/compose/sekrits/arifos_sovereign.pub | b467c07d975a36a5 |
| AAA alias | /root/AAA/IDENTITY/keys/arif_public.pem | same |
| Legacy fragment | /opt/arifos/secrets/did_arifos_* | 47ae539c… — not preferred |
arifosmcp/runtime/crypto_auth.py — verify_init_identity, free_nonce labelbridging_seal mint/verifysovereign_verify.py pubkey candidatesse_stage_engine.try_advance only