SIGIL

Local-first audits of local LLMs. The local-AI audit artifact you can attach to a review ticket: no cloud, no LLM in the verdict path, no subprocess spawned.

SIGIL inventories the models in an Ollama store, verifies every blob against its manifest digest, records license layers, and, in observe mode, attributes the runtime's listening sockets. Every result has two parts: a verdict (PASS / WARN / FAIL) from deterministic analyzers and a policy, and a completeness that says whether everything required was actually seen. What SIGIL could not see is never reported as absent. No telemetry and no uploads: static and observe modes perform no network I/O, and the optional active API probe makes one explicitly requested connection, to a remote address only when --allow-remote is set.

What you get

• The session (sigil-session/1): every fact observed, every finding with the facts it rests on, what each check covered, and the outcome, as canonical JSON.
• Markdown of the session, for the review ticket.
• The AI-BOM v2 (sigil-aibom/2): a compact projection of the session that names it by SHA-256.
• sigil explain: why a finding fired, or how the verdict and completeness were reached.

Modes

• static (default): reads files under the model store, and with --install-dir the installation's bin/ollama and lib/ollama/, compared with the official release manifests.
• observe: also reads the allowlisted /proc entries, to attribute the runtime's listening sockets.
• active (--active api-probe, off by default): also sends one GET /api/version to a literal address.

SIGIL never executes, loads, or maps what it inspects, and never spawns a process. These contracts are checked by build-time bans and syscall tests: ADR-002.

Try it

• In the browser: the viewer renders a session or an AI-BOM v2 file locally, with the CLI's own renderers.
• On your machine:

cargo run -p sigil-cli -- inspect ollama --format md --out out/report.md

• Ollama guide: modes, outputs, options, exit codes, and CI.
• Overview and Roadmap: what SIGIL does today and what comes next.
• Compare: SIGIL next to Anchore Syft, the Ollama and Hugging Face built-ins, and the OWASP AIBOM Generator.
• State of Local AI Audit — 2026 H1: a historical report, made with SIGIL 0.1.