Identity
The identity layer of the self-hosted stack.
The identity primitive of the stack, run inside your perimeter. Issues, verifies, and revokes the cryptographic identity every autonomous actor holds — bound to principal, runtime, and lineage from the moment of instantiation. The one identity every other primitive trusts.
Sigil is a primitive of the Visca stack — it ships with the stack, versions with the stack, and audits with the stack. It is not separately purchasable.
What it is
Sigil is constitutive: there is no autonomous actor without one, and no other primitive functions without it. Every agent, robot, drone, and autonomous service receives a cryptographic identity at the moment it comes into being. The Sigil binds the actor to the human or system that authorized its existence, the runtime hosting it, and the lineage of spawning actors back to a human root. For embodied actors, the Sigil includes hardware attestation rooted in TPM, Secure Enclave, or vendor roots of trust — a verifier can determine, cryptographically, that a request originated from a specific physical robot, running a specific firmware, in a specific configuration. Warrant authorizes against it, Plexus routes on it, Chronicle keys every record to it — one identity across the whole stack, all of it inside your own walls.
The problem
Stitch the stack from a dozen projects and each layer invents its own notion of who an actor is — and most autonomous actors have no real identity at all, merely the process holding an API key. There is no shared answer to who an actor is, who authorized its existence, what its lineage is, or whether it has been revoked. Without one identity the whole estate trusts, every authorization, audit, and revocation operation is impossible.
Capabilities
Sigil structure
sigil := {
pubkey: Ed25519PublicKey,
principal: Sigil | HumanIdentityRef,
runtime: SigilRef,
lineage: [SigilRef, ...] // chain back to root principal
bundle: ContentHash, // the bundle this actor was instantiated from
issued_at: Timestamp,
not_after: Timestamp,
attestation: HardwareAttestation? // for embodied actors
revocation_endpoint: URL,
}Open and commercial
Sigil has two surfaces: an open-source reference in Lattice Runtime (MPL 2.0), and a managed delivery as part of the Visca stack on Visca Cloud. Features in the open never move behind the paywall.
Open
MPL 2.0 · self-hostable · foundation-track governance
Commercial
Your tenancy · dedicated · self-managed · air-gapped
TRUST · same plane
The authority layer of the self-hosted stack.
The authority primitive of the stack, run inside your perimeter. Brokers every access from an autonomous actor to a consequential resource against its Sigil — identity-bound, scoped, time-limited, and recorded to Chronicle. Long-lived credentials disappear.
The fabric layer of the self-hosted stack.
The fabric primitive of the stack, run inside your perimeter. Discovery, mTLS, and routing across every autonomous actor and every resource an actor reaches — rooted in the same Sigil identities, not hardcoded URLs, and never crossing your boundary.
Across the stack
The record layer of the self-hosted stack.
The record primitive of the stack, run inside your perimeter. The one audit trail every other primitive writes to — a queryable knowledge graph of every actor, plus the append-only, cryptographically chained log of every action, keyed to Sigil and Capability Grant.
The data-model layer of the self-hosted stack.
The data-model primitive of the stack, run inside your perimeter. Declare what should exist as versioned source; agents write it as source, humans edit it as a spreadsheet. Plan, apply, drift-detect — all against state that stays in your tenancy.
The packaging layer of the self-hosted stack.
The packaging primitive of the stack, run inside your perimeter. Immutable, content-addressed, Sigil-signed bundles — everything an autonomous actor needs to execute, packaged as a single attestable artifact and registered in your own registry.
The open-source runtime layer — and the foundation the whole stack runs on.
The runtime layer of the stack, and its open-source foundation (MPL 2.0). Runs autonomous workloads across cloud, edge, on-device, and on-robot — with first-class awareness of tokens, models, memory, and embodiment, routing over open-weight models so cognition stays in your walls.
The whole stack. Self-hosted. One ecosystem.
Models, identity, tools, voice, payments, runtime, and audit — as one integrated ecosystem, self-hosted, sovereign, air-gapped. Nothing stitched from vendors. Nothing leaves your perimeter. Open at the core. No license rug-pulls, ever.