arif-a2a-call — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited arif-a2a-call (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when OPENCLAW needs 888 JUDGMENT or A2A federation with APEX (port 3002).
OPENCLAW
├── MCP ──── arifOS MCP ──── arif_judge_deliberate (888 JUDGMENT)
└── A2A ──── APEX (direct) ──── 888 JUDGMENT (fallback/deliberation)Use the arifOS MCP tool arif_judge_deliberate for constitutional judgment:
Tool: arif_judge_deliberate
mode: judge
candidate: <action text>
session_id: <current session>
actor_id: openclawReturns: SEAL / HOLD / VOID with floor compliance proof.
If arifOS MCP is unavailable, route to APEX via A2A:
# Direct to APEX (port 3002)
curl -X POST http://localhost:3002/tasks \
-H "Content-Type: application/json" \
-H "Authorization: Bearer apex-prime-token-dev" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tasks/send",
"params": {
"message": {
"parts": [{"kind": "text", "text": "<candidate_action>"}]
}
}
}'| Verdict | Meaning | OPENCLAW Action |
|---|---|---|
SEAL | Approved — all F1-F13 satisfied | Execute freely |
HOLD_888 | Paused — needs human confirmation | Pause, ask Arif |
VOID | Forbidden — constitutional violation | Do not execute, announce |
pending-human-review | AAA 888_JUDGE gate triggered | Wait for Arif verdict |
| Service | URL | Auth |
|---|---|---|
| APEX (direct) | http://localhost:3002 | Bearer: apex-prime-token-dev |
| AAA Gateway | http://localhost:3001 | Bearer: aaa-a2a-token-dev |
# Test APEX directly
curl -X POST http://localhost:3002/tasks \
-H "Content-Type: application/json" \
-H "Authorization: Bearer hermes-agent-token-dev" \
-d '{"jsonrpc":"2.0","id":1,"method":"tasks/send","params":{"message":{"parts":[{"kind":"text","text":"write checkpoint after session seal"}]}}}'
# Test AAA Gateway
curl -X POST http://localhost:3001/a2a/message/send \
-H "Content-Type: application/json" \
-H "Authorization: Bearer aaa-a2a-token-dev" \
-H "x-a2a-key: aaa-a2a-apikey-dev" \
-d '{"jsonrpc":"2.0","id":1,"method":"message/send","params":{"skill":"status-query","message":{"parts":[{"kind":"text","text":"federation status"}]}}}'
# Check federation charter
curl http://localhost:3001/.well-known/arifos-federation.json| Action | Endpoint | Method |
|---|---|---|
| Send task to APEX | /tasks | POST |
| Get task status | /tasks/{id} | GET |
| Stream task | /tasks/{id}/stream | GET |
| Cancel task | /tasks/{id}/cancel | POST |
| Agent card | /.well-known/agent-card.json | GET |
DITEMPA BUKAN DIBERI — Forged, Not Given.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.