Launch posture
Sigil ships as a protocol plus libraries —sigil-core, sigil-node, sigil-wallet, sigil-integration-tests — consumed by services that anchor identity and settle compute against the chain. Canary Kubernetes manifests exist at k8s/canary/ (rpc-service, validators, namespace, configmap); mainnet manifests live under k8s/mainnet/. Dependents fail closed when Sigil is unreachable.
T3 settlement
T3 (TEE-based) compute receipt verification is disabled by default. The verifier code is complete and fully tested for AMD SEV-SNP, Intel SGX DCAP, Intel TDX, and Arm CCA. Production accept requires the operator to:- Build the relevant
tee-verify-*feature. - Populate per-vendor trust anchors via
sigil-tee-material. - Validate a real attestation fixture end-to-end.
- Flip
tee_verifier_enabled = truein genesis policy.
Currency naming
Cross-repo sweep over$SIGIL, MINT token, Sigil token, SIGIL currency, stake SIGIL, staking SIGIL, and related terms returns zero hits in tracked source outside historical plan archives and unrelated environment-variable identifiers (SIGIL_*FIXTURE_DIR). The canonical names are MINT (mainnet), BITS (canary), and test SIGIL (testnet).
Feature status
| Feature | Status | Code |
|---|---|---|
| GAL records and RPCs (HMR / MHR / ENR / OrgLineageRoot) | Live | sigil-core::transaction::Gal*, sigil-rpc::gal_* |
| OAS lineage verification (parent-signature + Merkle inclusion) | Live | oas-resolve::sigil_guard Rules 1–7 |
| DAO Work OS validators | Live | sigil-state::dao_validators |
| Compute marketplace (T1 / T2) | Live | sigil-node::executor_compute, rpc_compute |
| Compute marketplace (T3) | Code complete; gated | sigil-node::tee_verify::* |
| Compute durable state (AkashaKV) | Live | sigil-node::compute_durable |
| MACA epoch / quorum aggregation | Live | sigil-consensus Phase 12 |
| TEE SEV-SNP verifier | Code complete; T3 off | sigil-node::tee_verify::sev_snp |
| TEE SGX DCAP verifier | Code complete; T3 off | sigil-node::tee_verify::sgx_dcap |
| TEE TDX verifier | Code complete; T3 off | sigil-node::tee_verify::tdx |
| TEE Arm CCA verifier | Code complete; T3 off | sigil-node::tee_verify::arm_cca |
| Wallet, RPC helpers, CLI | Live | sigil-wallet, sigil-cli |
| Documentation site | Live | docs/mintlify/ (this site) |
Test matrix
Run fromnode/:
| Command | Pass count |
|---|---|
cargo test -p sigil-node | 183 / 0 |
cargo test -p sigil-node --features tee-verify | 201 / 0 |
cargo test -p sigil-node --features tee-verify-sev-snp | 232 / 0 |
cargo test -p sigil-node --features tee-verify-sgx-dcap | 231 / 0 |
cargo test -p sigil-node --features tee-verify-tdx | 219 / 0 |
cargo test -p sigil-node --features tee-verify-arm-cca | 215 / 0 |
cargo test -p sigil-node --features "tee-verify-sev-snp tee-verify-sgx-dcap tee-verify-tdx tee-verify-arm-cca" | 294 / 0 |
cargo test -p sigil-integration-tests | 48 / 0 |
cargo check --workspace --all-features | clean |
Operator checklist
Before flipping the chain to active:- AkashaKV pin verified:
python3 scripts/validate-launch-readiness.py akashakv-pin. - Pre-genesis features verified:
python3 scripts/validate-launch-readiness.py pre-genesis-feature-readiness. - Storage backend verified:
python3 scripts/validate-launch-readiness.py storage-backend-readiness. - Weft readiness verified:
python3 scripts/validate-launch-readiness.py weft-readiness. - At least 13 validators registered, active, and self-bonded.
- Public RPC endpoints reachable, behind the rate-limiter, and reporting healthy.
- Direct (no-middlebox) endpoints reachable and grey-cloud DNS verified.
- Status page reporting “All systems operational”.
- Snapshot publisher emitting hourly checkpoints.
- Monitoring dashboards and Alertmanager rules deployed.
- Validator on-call rota in place.
- Incident bridge tested.
Post-launch verification
See also
- Run a validator — operator handbook.
- Monitoring — dashboards and alerts.
- TEE verifier readiness — T3 settlement enablement.
- RPC endpoints — public RPC matrix.
- Status page — incident reporting.