POST /v1/fraggate/call { slug: "azos", op: "health" } — Liveness. Does not increment download KV.
POST /v1/fraggate/call { slug: "azos", op: "status" } — Read-only status / principles. No remote exec.
POST /v1/fraggate/call { slug: "azos", op: "invite" } — Print invite / principles markdown. Not a remote shell.
POST /v1/fraggate/call { slug: "azos", op: "principles" } — Read AZ-OS principles. exec/shell stay refuse.
POST /v1/fraggate/call { slug: "azos", op: "doctor" } — UI alias of health. Same FragGate backend as the Worker UI button.
POST /v1/fraggate/call { slug: "azos", op: "session_open" } — Open an isolate-native prefab ethics session VFS. Not a host shell.
POST /v1/fraggate/call { slug: "azos", op: "session_status" } — Preview the ethics VFS listing. Not host exec.
POST /v1/fraggate/call { slug: "azos", op: "session_close" } — Seal the ethics session. exec/shell stay refuse.
POST /v1/fraggate/call { slug: "azos", op: "session" } — Alias of session_open. Isolate ethics VFS, not a remote shell.
POST /v1/fraggate/call { slug: "azos", op: "close" } — Alias of session_close. Seals the ethics session.
POST /v1/fraggate/call { slug: "azos", op: "mode_list" } — Server, Bootstrap OS, and Full install. Not an OS yet without a kernel or userspace the machine can boot.
POST /v1/fraggate/call { slug: "azos", op: "boot_path" } — Kernel base from the AZOS principles, plus any packaged boot image. Not booted, so this is not an OS yet. A browser tab is not the OS.
POST /v1/fraggate/call { slug: "azos", op: "internet_base" } — Internet base on LAN, then Wi-Fi, then Bluetooth, then RF, then photon. Not live until a real packet on one of those carriers. Cellular is optional and refuses when no radio is present. The public door stays FG-STUB.
POST /v1/fraggate/call { slug: "azos", op: "guardian" } — Digital Guardian stays on. It audits this operator's own requests on this machine and seals a lattice receipt. It cannot be turned off. It does not watch other people.
POST /v1/fraggate/call { slug: "azos", op: "download_list" } — File list for one mode. Without a boot image the download stays incomplete. The phone web app is not the OS.
POST /v1/fraggate/call { slug: "azos", op: "download_check" } — Complete only when a real kernel or userspace hash matches. A note is not an OS. A missing image stays not complete.
POST /v1/fraggate/call { slug: "azos", op: "phone_path" } — Phone web app or bootstrap wrap. Neither is the OS. Flash stays unexecuted without a tested image. SIM is not wiped.
POST /v1/fraggate/call { slug: "azos", op: "sim_lockout" } — SIM lockout is off by default. It never erases a SIM or eSIM.
POST /v1/fraggate/call { slug: "azos", op: "cellular" } — Cellular is a packet carrier. Absent when no radio is present. No mock live.
POST /v1/fraggate/call { slug: "azos", op: "ip_mask" } — IP masking across AZOS modes. Not masked when no checked mask path exists.
POST /v1/fraggate/call { slug: "azos", op: "azcall" } — A changeable number with no fee is designed only. No call path.
POST /v1/fraggate/call { slug: "azos", op: "veillock" } — Camera and screen share stay off unless the person turns them on for a task they asked for.
POST /v1/fraggate/call { slug: "azos", op: "malware_sweep" } — Scan with the AZMail scanner. Live only when ClamAV is present. Never a mock clean.
POST /v1/fraggate/call { slug: "azos", op: "airgap" } — Airgap before use. Same scanner honesty as AZMail.
POST /v1/fraggate/call { slug: "azos", op: "human_check" } — Stop at a human check. No solver.
POST /v1/fraggate/call { slug: "azos", op: "skill" } — Return AZ-OS skill markdown. Does not increment download KV.

curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call \
  -H 'content-type: application/json' \
  -d '{"slug":"azos","op":"status","payload":{}}'