Ju571nK/sigil](https:

What's new in v0.6.0

Features

• assess — callable pre-flight risk check, both a CLI subcommand and an MCP tool, so an agent can vet an action before running it (#150)
• OpenClaw skill + Hermes toolset glue wiring the assess pre-flight into the MCP surface (#152)
• TrustFall — AI Guard detects project-scope MCP servers configured to auto-execute (#153)
• AI Guard now scans agent instruction files for injection directives (#155)
• Antigravity install is static-posture-only by default (agy 1.0.7+ doesn't fire command hooks; --force gates enforce) (#157)
• Windows enforce works — sigil-hook hook-decide now serves over a named pipe, so block decisions take effect on Windows (#163)

Fixes

• rule-packs.yaml watcher re-arm + transient empty-read handling (#142)
• non-root sigil run: XDG fallback for state-db / events / policy paths (was a hard Permission denied) (#160)
• newcomer-UX papercuts: clean-machine doctor exits 0, path-named startup errors, --version on sigil-hook / sigil-mcp (#164)

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)