Skip to content

v0.6.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jun 15:24
v0.6.1
00d5dd5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new in v0.6.1

A correctness + docs patch on top of v0.6.0.

Fixes

  • AI Guard / Antigravity — refreshed the static parser against the verified agy 1.0.8 reality (#158, #167):
    • flags the real permissive toolPermission modes — always-proceed (auto-execute, unsandboxed) and proceed-in-sandbox (auto-execute, sandboxed)
    • stops false-positiving the literal auto-approve, which 1.0.8 rejects and replaces with request-review at load (so a file carrying it is safe at runtime)
    • confirmed sandbox_mode is not a settings-file key (silently ignored); enableTerminalSandbox remains the only sandbox knob

Docs

  • README now leads with a What it detects capabilities banner (TrustFall-style attack detection + covered agents + built-in capabilities) (#166)

Install (macOS / Linux)

curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Ju571nK/sigil/main/install.sh | sh

Pin a version with SIGIL_VERSION, or install elsewhere with SIGIL_INSTALL_DIR.

Verify a download

sha256sum -c SHA256SUMS                              # integrity
gh attestation verify <archive> --repo Ju571nK/sigil # provenance

If build-manifest.json is attached, an installed agent can verify itself
against it:

sigil doctor --verify-self --manifest build-manifest.json

Windows

Download the .zip for your architecture (x86_64 for most PCs,
aarch64 for Arm devices such as Surface Pro X) and add it to your PATH.

Every archive contains all six binaries: sigil, sigil-sender, sigil-server, sigil-sign, sigil-mcp, sigil-hook.

sigil-mcp is the read-only fleet MCP server — point an MCP client (Claude Desktop/Code) at a sigil-server's read API to query and reason over fleet posture. See crates/sigil-mcp/README.md.

Server + agent (Linux, x86_64 and aarch64)

Prebuilt .deb / .rpm packages (static binaries — work on RHEL/Rocky and
Debian/Ubuntu, on both x86_64 and ARM64). See docs/install-server.md.

sudo dnf install ./sigil-server-*.x86_64.rpm     # RHEL / Rocky / Fedora (x86_64)
sudo dnf install ./sigil-server-*.aarch64.rpm    # … ARM64
sudo apt  install ./sigil-server_*_amd64.deb     # Debian / Ubuntu (x86_64)
sudo apt  install ./sigil-server_*_arm64.deb     # … ARM64

Each package ships a hardened, disabled-by-default systemd unit + config example.
(armv7 is supported by packaging/build.sh --target armv7-unknown-linux-gnueabihf
but is not built in CI.)

Assets 25
Loading