v0.12.0

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/lodeline/main/install.sh | sh

Pin a version with LODELINE_VERSION, or install elsewhere with LODELINE_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/lodeline # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

lodeline doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: lodeline, lodeline-sender, lodeline-server, lodeline-sign, lodeline-mcp, lodeline-hook.

lodeline-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a lodeline-server's read API to query and reason over fleet posture. See crates/lodeline-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./lodeline-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./lodeline-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./lodeline-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./lodeline-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.11.0

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.10.0

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.9.1

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.9.0

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.8.3

v0.8.3: Graceful Shutdown and Wildcard Watch Roots

This patch includes the fixes from PR #226.

Fixed

• #225: Unix SIGINT/SIGTERM and Windows Ctrl-C now stop producers and let queued pipeline events drain. IPC stops accepting connections, gives accepted requests up to five seconds to finish, and cleans up Unix socket files. Task failures are supervised concurrently. An incomplete drain or sink error returns nonzero; the overall graceful-shutdown deadline is 30 seconds.
• #223: Nonrecursive patterns such as /Applications/*.app/Contents/Info.plist resolve matching directory ancestors and rediscover them every five seconds. Native and polling watchers recover new or replaced directories and reconcile shared roots on policy reload without recursively watching broad parent trees.

Verification

• Release PR CI and merged main CI passed all five environments. All 14 release jobs passed, including native signed-manifest and tamper-rejection checks for all five targets.
• The published macOS ARM64 archive passed SHA-256, GitHub provenance, signed-hash, version, and signature-tampering checks. Its actual daemon passed five subprocess shutdown tests plus native/polling scenarios for existing, new, and replaced wildcard directories, policy removal/readdition, filtering, state commits, and socket cleanup. Temporary daemons were stopped; no installed service was modified.
• Release preparation exposed a Windows test-fixture startup race, tracked and fixed in #228 / PR #227. Tests now await a real control response before writing files; production watcher behavior was not changed by that correction.

Scope and Limitations

• Recovery captures current files, not transient changes that disappeared before discovery. Existing access checks, rate limits, and heartbeat fallback remain. Symlink directories below a wildcard are not followed.
• Shutdown timeout or an unfinished IPC request is a failure, not a claim that every event was flushed. Runtime teardown allows one additional second for blocking workers.
• This patch does not change AI-product compatibility gates, permission interpretation, or enforcement modes.

Install

Use the existing installer and pin SIGIL_VERSION=v0.8.3 when a fixed version is required. See the installation guide and server packages.

Archives are provided for Linux x86_64/ARM64, macOS ARM64, and Windows x86_64/ARM64. Each includes sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, and sigil-hook. Linux .deb and .rpm packages are attached for both architectures.

Verify a Download

sha256sum -c SHA256SUMS
gh attestation verify <archive> --repo Ju571nK/sigil
sigil doctor --verify-self --manifest build-manifest.json

On macOS, use shasum -a 256 for archive integrity. The signed build manifest covers all 30 binaries across the five platform archives.

v0.8.2

v0.8.2: Late-created Watch Root Recovery

Fixes #219. The daemon retries missing or replaced configured watch roots every five seconds without recursively watching their ancestors. After subscribing, it streams existing regular files through the normal pipeline to cover the subscription gap. Removed targets cancel pending recovery. Windows uses file-ID handles for replacement detection and supports mixed path separators in recursive root prefixes.

Full workspace tests and five-environment PR/main CI passed. All five native release runners passed signed-manifest and tamper-rejection checks. The published macOS archive passed SHA-256, provenance, self-verification, and a real daemon test that detected a single file write in a directory created after startup.

Known Limitations

• Recovery observes current files, not transient files removed before reconciliation. Existing access checks, rate limits, and heartbeat fallback remain.
• Non-recursive targets with wildcard directory ancestors remain tracked in #223.
• Graceful shutdown can stall after SIGINT, also reproduced in v0.8.1; tracked in #225. Signal termination alone does not establish a graceful flush.

See PR #224 and release verification.

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.8.1

v0.8.1: Cross-platform Signed Manifest Fix

Fixes #221: build-manifest.json now covers all 30 binaries across Linux x64/ARM64, macOS ARM64, and Windows x64/ARM64. Windows entries use canonical names without .exe.

All five native release runners passed downloaded-agent signature/hash verification and rejected a tampered manifest before publication. The published macOS archive also passed local SHA-256, GitHub attestation, and doctor --verify-self verification.

Regression tests and the full five-job PR/main CI passed. See PR #222 and release verification. Existing v0.8.0 tags and signed assets are unchanged.

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.8.0

v0.8.0 Highlights

• Report-only AI Guard controls, with source-qualified Claude and Codex local policy observations.
• Persistent per-server MCP metadata baselines, drift/schema-change findings, and server-info scanning.
• Fixes for inherited permission rules, poisoned cache collisions, and missing default watcher targets (#216-#218).
• Includes the previously merged Claude/Codex surface refresh and verified Antigravity adapter updates.

Upgrade the server before agents. New MCP reason variants require an updated consumer. Configured controls are not runtime enforcement attestations; one-shot scan remains stateless. Remaining scope/verification work stays tracked in #199/#200; the missing-directory watcher limitation is #219.

Known verification limitation (#221): the signed build manifest currently includes Linux artifacts only. sigil doctor --verify-self fails with a missing-entry error on the published macOS binary; Windows entries are also absent (not runtime-tested here). The downloaded macOS archive passed SHA-256 and GitHub build-provenance verification and reports sigil 0.8.0. Do not interpret a missing manifest entry as a verified binary or disable verification checks to bypass it. See #221.

Validation: 1,539 local tests passed; strict Clippy, formatting, minimum-feature checks, all five PR CI jobs, and all release jobs passed. See CHANGELOG and PR #220.

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

v0.7.2

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)