Sigillion

Remember everything. Read almost nothing. Prove all of it.

Website | PyPI | Releases | Changelog | Privacy | Terms | Security | For agents

Sigillion is memory for AI agents, made by Steddy Nova SRL. It keeps the whole record of what an agent and a person did, word for word, on your own computer; compressed, so that a model can skim weeks of work in a few hundred tokens and open the full text only where it needs it; sealed, so that every record can be checked to show it was not altered. No telemetry: Sigillion itself sends nothing anywhere. What it hands the agent becomes part of your session, which Claude Code sends to Anthropic and Cursor to the models it uses, as each does with the rest.

One engine, in order

1. Claude Code and Cursor first. Today Sigillion works in Claude Code and in Cursor: every session is kept after compaction and after Claude Code deletes its transcripts. Claude searches and reopens its own history while it works. Both agents keep their sessions in one store on your computer: in the same project, Cursor's agent can recall what Claude Code did. Claude can recall what you did in Cursor. Claude Code is where every feature is built, measured and proved on real work. It is the first step, not the whole idea.
2. Every AI model and agent tool next. The engine does not depend on one model. The same sealed memory will sit under other models and the tools people already use (coding agents, agent frameworks, assistants), with an SDK for anyone who builds agents.
3. Then the fields where the record must stand: legal and finance. The same store, with a pack for each field: its citations and terms, its redaction rules and receipts that show what the model did and when, for work a client, a regulator or a court may ask about.

Each step comes after the one before has proved itself with other people's numbers, not before.

Install

Sigillion 0.1.3 is on PyPI. It fixes sessions that could stop saving at a Windows path. 0.1.2 added the Mac with Apple silicon; 0.1.1 added Cursor and took the trial out. What each release changed: CHANGELOG.md.

You need:

• Windows or Linux on a 64-bit Intel or AMD processor (x86_64); or a Mac with Apple silicon (M1 or later) and macOS 11 or later. Not yet: a Mac with an Intel processor, Windows on ARM, ARM Linux, Alpine Linux.
• Python 3.10 to 3.14. Python 3.15 needs a C compiler until zstandard, which Sigillion uses, publishes a package for it; with 3.14 installed beside it, pipx install --include-deps --python 3.14 sigillion needs none (on Linux with a pipx older than 1.6: --python python3.14).
• Claude Code 2.1.287 or later. To update it: claude update; installed with WinGet: winget upgrade Anthropic.ClaudeCode; installed with Homebrew: brew upgrade claude-code.
• Or Cursor (measured on Cursor 3.27 on Windows).
• pipx, then a new terminal:
  • Windows: py -m pip install --user pipx, then py -m pipx ensurepath.
  • Ubuntu 23.04 or later, Debian 12 or later: sudo apt install pipx, then pipx ensurepath.
  • Other Linux: python3 -m pip install --user pipx, then python3 -m pipx ensurepath.
  • macOS: brew install pipx, then pipx ensurepath.
  • Anything else: pipx's installation page.

Then the commands:

pipx install --include-deps sigillion
sigillion install
sigillion install cursor

sigillion install is for Claude Code and sigillion install cursor for Cursor. Use one of them or both. After sigillion install cursor, restart Cursor once.

To upgrade from 0.1.0, 0.1.1 or 0.1.2: close every Claude Code session and every Cursor window first. Then run pipx install --include-deps --force sigillion, then sigillion install again (and sigillion install cursor if you use Cursor). 0.1.0 stops reading your memory back 30 days after its first use; 0.1.1 and later have no trial and read everything you kept.

sigillion status shows what is kept; sigillion --help lists every command. To take it out: sigillion uninstall (in Cursor: sigillion uninstall cursor), then pipx uninstall sigillion; what was kept stays in ~/.sigillion until you delete it.

• Search by meaning is being worked on: today recall finds words, a prefix or a handle. This page says so as soon as it lands.
• Privacy: PRIVACY.md. The terms: LICENSE. Security reports: SECURITY.md, by e-mail, never in an issue.

Free for users, not for companies

• Sigillion is free for personal, non-commercial use. Recording, the brief at a session's start, search and recall, receipts and export: all of it, with no trial and no licence key to ask for.
• What will be paid, from a later version. Encryption of what Sigillion keeps; tamper-proofing: each record signed on your computer and anchored so that it can be proved outside your computer, with sigillion prove to make the proof of one turn for you to hand to someone; and a third agent tool or more on the same memory. Everything you use today stays free for personal use: any two agent tools on one memory (today Claude Code and Cursor), recording, the brief, search and recall, receipts and export. Checking stays free in every version: sigillion verify and sigillion-reader check hashes, signatures, anchors and receipts, so anyone you give a proof to can check it with no licence. sigillion-reader also lists and extracts everything kept, with or without a licence. A version you already installed keeps the terms it came with. Founder licence holders get the paid features free.
• Not for companies. Use for or within a company or another organisation needs our written permission first. So does use for work you are paid for. Write to [email protected].
• Not open source and not open core. There is one Sigillion: closed and free for personal use. We keep it closed because what comes next is built on engines and methods that are not on the market yet.
• How it ships: the engine compiled; the storage format and the capture (what touches your transcripts) as readable source, so you can see exactly what happens to your data. All rights are reserved by Steddy Nova SRL: free to use does not mean free to copy, change or resell. The terms: LICENSE.
• Already have a founder licence? You will hear from us by e-mail as the project moves forward.
• To hear about new releases: Watch this repository > Custom > Releases.

Join the waitlist

Open a new issue and choose "Join the Sigillion waitlist".

Issues are public: do not write e-mail addresses, client names, code or anything private.

Rather not sign up in public? Write to [email protected] with your GitHub username: you join the same list.

If you want, tick that you'd share Sigillion's results: once a week you paste the counts Sigillion prints about what it did for you (sigillion status --actions: how many answers came from memory, how much of your history they read and the like). Numbers only, never the text of your sessions; only what you choose to paste. It helps us show what Sigillion does.

If you write to us, we use your address only to answer you and to tell you how the project moves forward. We delete it when you ask.

The code is not in this repository: the packages are on PyPI (sigillion, sigillion-capture, sigillion-format). This repository holds the waitlist, the releases, the privacy note, the terms and the website (docs/, served at sigillion.com).

Questions: Discussions. Private matters: [email protected]. Sigillion is made by Steddy Nova SRL.