For machines

This site is a governed public runtime, not a brochure. Humans get pages. Agents get contracts. Irreversible action stays human-gated. When a pipe fails, numbers are withheld — not invented.

Sovereign: Muhammad Arif bin Fazil · DID did:web:arif-fazil.com · Motto: Ditempa Bukan Diberi

Operating rule

Static law · dynamic state · gated action
Constitution is bedrock; telemetry is weather. Freeze the laws; let observations move. Index: /.well-known/invariants.json

Five-layer stack

Identity — /.well-known/did.json

Ontology — territories.json (EARTH · ECONOMICS · WORLD · DOCTRINE)

Missions — /missions.json (six verbs, not 128 tools)

Permissions — agent-policy.json · risk tiers R0–R4

Telemetry — /999/verify + AAA seal-chain head

Static vs dynamic

Keep static (law)	Keep dynamic (state)
DID, floors F1–F13, veto, epistemic tags	Pipe values, health, timestamps
Territory names, mission IDs, endpoint meanings	Entity instances, counts, featured nav
Withhold-on-fail · no invented numbers	Actual measurements when pipes healthy
Redaction / public–private boundary	Published register rows after gate
R3/R4 approval gates · 888_HOLD	Live risk of a specific action instance

Specs: static-invariants · dynamic-invariants · hold-conditions · JSON schemas

Three zones

Public read — HTML dossiers, doctrine, writing, llms.txt, catalogs. Crawlers and training with RSL attribution.

Governed query — live pipes and MCP/WebMCP GET tools that return cited outputs. Compute-only organs. No silent writes.

Restricted action — mutate, publish seals, private vaults, money, deletion. R3 human required · R4 = 888_HOLD.

WAJIB machine contracts

Path	Role	Stability
`/.well-known/ai-constitution.json`	F1–F13, epistemic tags, risk tiers, escalation	semver · as_of
`/.well-known/invariants.json`	Index: static vs dynamic law	semver · as_of
`static-invariants.json`	Bedrock: identity, floors, truth, ontology, disclosure	888_HOLD to change
`dynamic-invariants.json`	What may move: pipes, registers, hypothesis, telemetry	WITHHOLD on fail
`risk-tiers.json`	R0–R4 + approval gates	static defs
`hold-conditions.json`	When 888_HOLD fires; agents never self-clear	static
`/schemas/v1/*`	JSON Schema for the above contracts	versioned
`/.well-known/agent-policy.json`	Allowed classes, rates, HARAM patterns, AUP	semver · as_of
`/.well-known/agent-registry.json`	Named tools/organs, owner, mission, risk, kill switch	semver · as_of
`/missions.json`	Six missions · intent classification only	v1.1+
`/surfaces.json`	Canonical route catalog (live HTTP truth)	v1.2+
`/llms.txt`	Guidance overview (not binding law)	voluntary
`/.well-known/webmcp.json`	Browser tools — live 2xx only (F2)	on deploy
`/.well-known/did.json`	Machine identity	stable
`/.well-known/territories.json`	World-model territories	v1.1+
`/floors.json`	Floor definitions mirror	kernel-synced
`/999/verify`	VAULT999 public proof	live
`https://mcp.arif-fazil.com/mcp`	MCP transport (scoped)	gateway

Risk tiers (approval gates)

Tier	Meaning	Gate
`R0_read`	Public static / catalog	auto
`R1_query`	Live read pipes / compute-only	auto if read-only
`R2_publish`	Emit public content or seals	human or sealed pipeline
`R3_mutate`	Change production state	human_required
`R4_irreversible`	Delete / force / money / secrets	888_HOLD

Agent skills expected

Retrieval discipline — cite a pipe or canonical register; withhold on fail
Schema discipline — prefer typed JSON contracts over free prose alone
Tool restraint — load only the mission-needed tools
Uncertainty tagging — CLAIM / PLAUSIBLE / HYPOTHESIS / ESTIMATE / UNKNOWN
Approval routing — R3/R4 to human, not symbolic rubber-stamp
Runtime auditability — action-level logs; kill switch is real

Acceptable use

Read openly; AI training allowed with rsl.xml attribution
Respect robots.txt and polite rate limits
No mass email / spam to contacts in security.txt
No irreversible actions without human F13 consent
Do not treat llms.txt as law — use constitution + policy + registry

HARAM

One shared credential across multiple agents
Hidden write behind “read” tools
Silent endpoint changes without versioning
Unscoped autonomy across public and private data
Inventing numbers when pipes fail
Wrong or generated human portrait under sovereign identity — identity_image_policy=human_verified_only; wrong media = immediate remove

World-model territories

EARTH — basins, wells, plates, quakes · /earth · GEOX

ECONOMICS — markets, FX, commodities, vitals · /economics · WEALTH

WORLD — civic BM, politics, public intelligence · /world

DOCTRINE — floors, veto, missions · /doctrine · arifOS

Disclaimer

Personal site of Muhammad Arif bin Fazil. Not an official PETRONAS publication. Views are personal/sovereign, not corporate policy.

Ditempa Bukan Diberi · contracts versioned 2026-08-04 · kill_switch: true