A whole tier of system software landed this week — a database engine, a secrets manager, and a security monitor — and the remarkable part isn't just that they exist. It's that each one reaches parity with the industry-standard tool it replaces, in a fraction of the footprint, written entirely in Sigil, and capability-native from the ground up.
SigQL — a database engine
The stack came together in three commits. A parser (83464e0, 37/37 tests, 48 KB) turns SQL text into a tokenizer → query plan: SELECT/INSERT/UPDATE/DELETE/CREATE/DROP, WHERE, six comparison operators, case-insensitive. On top of it, the Full Database Engine Suite (4f69aff) — five engines reaching PostgreSQL / MSSQL / Oracle parity in ~119 KB. And a client suite (9fc8c90, 4 modules, 97/97 tests, 77 KB): a wire protocol, a connection manager over six transports (TCP/Unix/Pipe/Shmem/IPC/TLS), and a cursor-API client library.
Sigil Vault — secrets, capability-native
A capability-native secrets engine (ae9dd37, 201 modules), then a Full Engine Suite (e4f4bda) — six engines at HashiCorp Vault parity in ~138 KB. "Capability-native" is the difference that matters: a secret isn't guarded by an ambient ACL you might forget to set — it's reachable only through an unforgeable capability handed to exactly the code that needs it, and to nothing else.
Warden — the security monitor
Warden (428e7ce, 22/22 tests, 21 KB) watches the system by consuming the kernel's capability audit ring directly (capaudit.sg): policy rules, rate limiting, anomaly detection. Because every privileged action in sigilOS flows through a capability, the audit ring is a complete, tamper-evident record of what touched what — and Warden turns that stream into enforcement.
The four pillars, in a data tier
FAST
Native cc0 arm-EL0 builds — no interpreter, no VM between the query and the metal.
EFFICIENT
Full Postgres/Oracle parity in ~119 KB and Vault parity in ~138 KB — an order of magnitude smaller than what they match.
SECURE
Capability-native throughout: secrets gated by unforgeable handles, Warden enforcing on the kernel cap-audit ring. No ambient authority anywhere.
STABLE
Every piece shipped green — 37/37, 97/97, 22/22 — before it landed. Tests are the gate, not an afterthought.
Put together, this is the data and security substrate the rest of the OS builds on: a real SQL database, a real secrets manager, and a real-time security monitor — all small, all tested, all capability-native, all Sigil.