Sealed thinking, signed proof

Abstract

Sigil is an AI agent that turns a goal into a plan, carries the plan out with live tools, and signs a record of every run. Today it answers with free models on OpenRouter, names the model on every answer, and closes each agent run with a SHA-256 hash chain signed with Ed25519. $SIGIL, on Robinhood Chain, is the token planned to power holder credit and burns.

Vision

AI is becoming the place where people think: plans, research, decisions and drafts. That thinking deserves the protection of a private notebook and the power of the best models available.

Sigil starts with what can be shown today: an agent that does real multi-step work, says which model wrote each answer, and signs what it did. The roadmap adds sealed runs in hardware enclaves and frontier models.

Architecture today

1. 1
   Client

   The browser keeps the chat history, streams each answer, shows every tool call and checks receipt signatures.

2. 2
   Chat route

   A Next.js server route applies hourly limits per visitor and sends each request to OpenRouter.

3. 3
   Model router

   Sigil Auto picks a free model by how much reasoning the task needs, with backups when one is busy.

4. 4
   Agent loop

   Up to 8 model turns and 14 tool calls per run: web pages, CoinGecko, DefiLlama, Robinhood Chain and exact maths.

5. 5
   Receipt signer

   When a run ends, the server hashes every step into a chain and signs the final hash with its Ed25519 key.

Proof of run

Every agent run produces a receipt: a SHA-256 hash chain over the task, each tool call's input and output, and the answer, signed with the server's Ed25519 key. The public key is published at /api/receipt, and anyone holding a receipt can check its signature there.

Receipts make agent work shareable: a research brief or an on-chain read can travel with a record that shows it has not been edited since the run.

$SIGIL economy · Planned

Sigil's token, $SIGIL, is live on Robinhood Chain. The mechanisms below are planned and start after launch.

Roadmap

Planned work. Each item moves to the transparency page as Live the day it ships.

1. 1
   Planned · Sealed runs

   The browser checks a hardware enclave's remote attestation (AMD SEV-SNP or NVIDIA confidential compute) against Sigil's open-source build, then seals the task with HPKE (RFC 9180) to a key only the enclave holds.

2. 2
   Planned · Enclave-signed receipts

   Receipts signed inside the enclave, binding the measured build, the models and the hash chain of every step.

3. 3
   Planned · Premium models

   Claude Opus 5.5, GPT-6.1 Sol Pro, Gemini 4 Argon, Grok 4.7, Kimi K3.1 Pro, DeepSeek V4 Pro, GLM 5.3 Prime, Qwen3.8 Max Prime, beside the free models.

4. 4
   Planned · Scheduled agents and watchers

   Tasks that run on a schedule, and rules that watch a wallet, contract or price on Robinhood Chain.

5. 5
   Planned · Holder credit

   Daily vouchers for holders, paid as blind-signed notes (RFC 9474), with a bonus for paying in $SIGIL.

6. 6
   Planned · Buyback and burn

   $SIGIL paid for credit and a share of revenue, burned on-chain. Every burn will show on the holder dashboard with its transaction.

7. 7
   Planned · Passkey backups

   Encrypted backups of your runs under your own passkey.

8. 8
   Planned · API and SDK

   An OpenAI-compatible API with the same agent and receipts.

Conclusion

Sigil gives everyone an agent that thinks things through and signs its work, and it is open about how each answer is made. $SIGIL is planned to make the people who use it the people who benefit from it.

Sealed thinking. Signed proof.