feat(kernel): F1 MCP Governance Wrapper — 3 patches executed

Patch 1: capability_registry.json
- 8 capabilities with arifos_governance block (4 fields each)
- Derivation from existing fields (mutation/irreversible/authority)
- Missing governance defaults to BLOCKED (impact_radius=5, requires_888_hold=true)
- Semantic hash UNCHANGED — governance is metadata overlay

Patch 2: kernel_abi.py + arifos_kernel_wiring.py
- get_governance(): extract governance block with strict defaults
- evaluate_governance(): 5-check decision tree (not-found/role/write/hold/approved)
- filter_tools_for_role(): role-scoped tool visibility
- Pre-filter runs BEFORE OPA evaluation in dispatch pipeline
- _last_hash persistence: chain resumes from audit file on restart

Patch 3: Audit JSONL trail
- 16 flat fields, Rust serde_json compatible
- chain_hash + previous_hash tamper-evident append-only
- /root/AAA/governance/audit/mcp-governance-audit.jsonl

All 6 test suites PASS (registry load, governance extraction,
default fallback, 9-subtest decision tree, role filtering,
audit chain integrity + persistence).

DITEMPA BUKAN DIBERI

Author: kimi-code/FI-008

arifos_kernel/__init__.py

@@ -0,0 +1 @@
+"""arifOS kernel module."""

arifos_kernel/abi/__init__.py

@@ -0,0 +1 @@
+"""arifOS kernel module."""

arifos_kernel/abi/capability_registry.json

@@ -0,0 +1,207 @@
+{
+  "$schema": "arifos://schema/kernel-capability-registry/v1",
+  "abi_version": "2026.07.24",
+  "governance_version": "1.0.0",
+  "governance_description": "arifOS MCP Governance Wrapper — F1-MCP-Governance-Wrapper RFC fields. Default for missing: is_reversible=false, impact_radius=5, requires_888_hold=true, allowed_roles=[].",
+  "capabilities": [
+    {
+      "capability_id": "session.bind",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:2a947992f413a8c969df2383c230f665c374f761de7618f5cf8f7a0e4299a5a5",
+      "input_schema_ref": "tool://arif_init/input",
+      "output_schema_ref": "tool://arif_init/output",
+      "action_class": "OBSERVE",
+      "mutation": false,
+      "irreversible": false,
+      "authority_required": "ANONYMOUS",
+      "evidence_required": false,
+      "idempotency": "conditional",
+      "receipt_policy": "session",
+      "constitutional_floors": ["F1", "F2", "F4", "F11", "F13"],
+      "provider": {"type": "mcp", "tool": "arif_init"},
+      "tier": "gated",
+      "arifos_governance": {
+        "is_reversible": true,
+        "impact_radius": 0,
+        "requires_888_hold": false,
+        "allowed_roles": ["333-AGI", "555-ASI", "888-APEX", "A-FORGE"]
+      }
+    },
+    {
+      "capability_id": "reality.observe",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:6bb61ee140a9e784ccdd6d3cafeabc34b20390e59cddece0c1d95076df0bce7",
+      "input_schema_ref": "tool://arif_observe/input",
+      "output_schema_ref": "tool://arif_observe/output",
+      "action_class": "OBSERVE",
+      "mutation": false,
+      "irreversible": false,
+      "authority_required": "OBSERVER",
+      "evidence_required": false,
+      "idempotency": "safe",
+      "receipt_policy": "optional",
+      "constitutional_floors": ["F2", "F4", "F7", "F9", "F12"],
+      "provider": {"type": "mcp", "tool": "arif_observe"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": true,
+        "impact_radius": 0,
+        "requires_888_hold": false,
+        "allowed_roles": ["333-AGI", "555-ASI", "888-APEX"]
+      }
+    },
+    {
+      "capability_id": "cognition.think",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:88dcc1c39b6f59f9a0ef3b2f028b6891a0cb8f751915c948846820e95a527546",
+      "input_schema_ref": "tool://arif_think/input",
+      "output_schema_ref": "tool://arif_think/output",
+      "action_class": "PREPARE",
+      "mutation": false,
+      "irreversible": false,
+      "authority_required": "OBSERVER",
+      "evidence_required": true,
+      "idempotency": "safe",
+      "receipt_policy": "optional",
+      "constitutional_floors": ["F2", "F3", "F4", "F7", "F8", "F9"],
+      "provider": {"type": "mcp", "tool": "arif_think"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": true,
+        "impact_radius": 0,
+        "requires_888_hold": false,
+        "allowed_roles": ["333-AGI", "555-ASI", "888-APEX"]
+      }
+    },
+    {
+      "capability_id": "intent.route",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:a0d24c437488bc1521d1f0170071665177b7a55a80c5e96e79b5a4cba4ff04bd",
+      "input_schema_ref": "tool://arif_route/input",
+      "output_schema_ref": "tool://arif_route/output",
+      "action_class": "PREPARE",
+      "mutation": false,
+      "irreversible": false,
+      "authority_required": "OBSERVER",
+      "evidence_required": false,
+      "idempotency": "safe",
+      "receipt_policy": "optional",
+      "constitutional_floors": ["F2", "F4", "F8", "F10", "F12"],
+      "provider": {"type": "mcp", "tool": "arif_route"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": true,
+        "impact_radius": 0,
+        "requires_888_hold": false,
+        "allowed_roles": ["333-AGI", "555-ASI", "888-APEX"]
+      }
+    },
+    {
+      "capability_id": "memory.govern",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:9fd0dae38007619f6f2092e2bdb0d55ddf4327018c940052fd0c436e8dc810af",
+      "input_schema_ref": "tool://arif_memory/input",
+      "output_schema_ref": "tool://arif_memory/output",
+      "action_class": "MATERIAL",
+      "mutation": true,
+      "irreversible": false,
+      "authority_required": "TRUSTED_AGENT",
+      "evidence_required": true,
+      "idempotency": "keyed",
+      "receipt_policy": "required_on_write",
+      "constitutional_floors": ["F1", "F2", "F4", "F11", "F13"],
+      "provider": {"type": "mcp", "tool": "arif_memory"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": false,
+        "impact_radius": 3,
+        "requires_888_hold": true,
+        "allowed_roles": ["333-AGI", "888-APEX"]
+      }
+    },
+    {
+      "capability_id": "authority.judge",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:b1c58a6eeeeacb8ed8dd771295c24aeb28649b8dd4b8c3aa251cf4cd6a759abd",
+      "input_schema_ref": "tool://arif_judge/input",
+      "output_schema_ref": "tool://arif_judge/output",
+      "action_class": "MATERIAL",
+      "mutation": false,
+      "irreversible": false,
+      "authority_required": "TRUSTED_AGENT",
+      "evidence_required": true,
+      "idempotency": "keyed",
+      "receipt_policy": "required",
+      "constitutional_floors": ["F1", "F2", "F3", "F4", "F11", "F13"],
+      "provider": {"type": "mcp", "tool": "arif_judge"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": true,
+        "impact_radius": 1,
+        "requires_888_hold": false,
+        "allowed_roles": ["333-AGI", "888-APEX"]
+      }
+    },
+    {
+      "capability_id": "action.execute",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:3ce5463279351e0c8c371dc046cc4062c796540516bb1f31c79c712299db07f3",
+      "input_schema_ref": "tool://arif_forge/input",
+      "output_schema_ref": "tool://arif_forge/output",
+      "action_class": "MATERIAL",
+      "mutation": true,
+      "irreversible": false,
+      "authority_required": "EXECUTOR",
+      "evidence_required": true,
+      "idempotency": "keyed",
+      "receipt_policy": "required",
+      "constitutional_floors": ["F1", "F2", "F3", "F4", "F7", "F11", "F13"],
+      "provider": {"type": "mcp", "tool": "arif_forge"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": false,
+        "impact_radius": 3,
+        "requires_888_hold": true,
+        "allowed_roles": ["A-FORGE"]
+      }
+    },
+    {
+      "capability_id": "history.seal",
+      "version": "1.0.0",
+      "semantic_hash": "sha256:22ecfcb626b9c4fe1bedb8e9c31dbf79862588736177149c8492a8d35f2e4119",
+      "input_schema_ref": "tool://arif_seal/input",
+      "output_schema_ref": "tool://arif_seal/output",
+      "action_class": "IRREVERSIBLE",
+      "mutation": true,
+      "irreversible": true,
+      "authority_required": "SOVEREIGN",
+      "evidence_required": true,
+      "idempotency": "keyed",
+      "receipt_policy": "required",
+      "constitutional_floors": ["F1", "F2", "F3", "F4", "F11", "F13"],
+      "provider": {"type": "mcp", "tool": "arif_seal"},
+      "tier": "open",
+      "arifos_governance": {
+        "is_reversible": false,
+        "impact_radius": 5,
+        "requires_888_hold": true,
+        "allowed_roles": []
+      }
+    }
+  ],
+  "compatibility_aliases": {
+    "arif_session_init": {"capability_id": "session.bind"},
+    "arif_sense_observe": {"capability_id": "reality.observe"},
+    "arif_fetch": {"capability_id": "reality.observe", "mode": "fetch"},
+    "arif_evidence_fetch": {"capability_id": "reality.observe", "mode": "fetch"},
+    "arif_critique": {"capability_id": "cognition.think", "mode": "critique"},
+    "arif_bridge_connect": {"capability_id": "intent.route", "mode": "bridge"},
+    "arif_memory_recall": {"capability_id": "memory.govern", "mode": "recall"},
+    "arif_judge_deliberate": {"capability_id": "authority.judge"},
+    "arif_forge_execute": {"capability_id": "action.execute"},
+    "arif_reply_compose": {"capability_id": "cognition.think", "mode": "compose"},
+    "arif_vault_seal": {"capability_id": "history.seal"}
+  },
+  "tier_doctrine": "arifOS canon = 8 capabilities in 2 public tiers: 7 open (observe, think, route, memory, judge, forge, seal) · 1 acknowledgment-gated (session.bind — F1 Amanah, binding creates durable state). Governance fields enforce per-tool reversibility, impact radius, and sovereign hold requirements.",
+  "tier_doctrine_en": "Anonymous external probing must reproduce the public claim exactly: tools/list returns 7 unconditionally + 1 with ack_irreversible = 8 total. Governance layer adds deterministic enforcement: missing arifos_governance defaults to BLOCKED (impact_radius=5, requires_888_hold=true, allowed_roles=[])."
+}