How Signet Works
Signet gives AI agents persistent memory, portable identity, and encrypted secrets — all running locally on your machine, across every platform you use.
Memory Pipeline
- Harness hook fires (session-start, user-prompt, or session-end)
- Connector calls daemon HTTP API
- /api/hooks/remember enqueues extraction job
- Extraction worker: LLM decomposes raw input into discrete facts and entity triples
- Decision worker: evaluates each fact against existing memories (add / skip / bounded repair)
- Controlled writes: new memories inserted with dedup and safety gates
- Knowledge graph + embeddings: structured memory substrate persisted for later recall
- Embeddings computed and stored alongside each memory
- /api/memory/recall builds a bounded candidate pool (graph + BM25 + vector)
- Predictive scorer reranks when available, and fails open to baseline ordering when it is not
Config Sync
- User edits ~/.agents/AGENTS.md (or any identity file)
- File watcher detects the change via chokidar
- 2-second debounced sync: regenerate CLAUDE.md, .cursorrules, etc.
- 5-second debounced git commit: version-control the change automatically
- All connected harnesses receive updated config on next session
Extraction
A local LLM decomposes raw conversation content into discrete facts and entity triples. Each fact is a standalone piece of knowledge; each triple captures a relationship between entities. No data leaves your machine.
Decision
Every extracted fact is evaluated against your existing memory store. The decision worker determines the right action — add a new memory, update an existing one, mark one for deletion, or skip entirely. No duplicates, no noise.
Controlled Writes
Safety gates and deduplication logic ensure only meaningful changes reach the database. Writes are atomic — partial failures never corrupt your memory. Each write is versioned for full audit history.
Knowledge Graph
Entities and their relationships are persisted as a graph structure alongside flat memories. This enables graph-augmented search — finding connections between concepts that keyword or vector search alone would miss.
Retention
Automatic cleanup of expired or low-value data keeps the memory store lean. Retention policies are configurable — you control how aggressively stale memories decay and when they get pruned.
Shadow Mode
Observe exactly what the pipeline would do before enabling writes. Shadow mode runs the full extraction and decision pipeline but commits nothing. Useful for tuning, debugging, and building trust in the system.
Claude Code
Generates and maintains CLAUDE.md from your identity files. Session hooks fire on start, prompt, and end — feeding conversations into the memory pipeline automatically.
OpenCode
Syncs AGENTS.md into your OpenCode configuration. The runtime plugin handles session lifecycle and memory injection without manual setup.
OpenClaw
Patches OpenClaw config for harness integration. The runtime adapter calls the Signet daemon for memory search and secret injection during active sessions.
More Platforms
Cursor, Windsurf, and other editors are on the roadmap. The connector architecture is designed for new platforms to be added with minimal effort.
~/.agents/. The daemon handles syncing to every connected platform.
Signet is more than a memory layer. It is a foundation for agent identity that no single entity controls. Your agent is a reflection of your expertise — its memory, skills, and personality belong to you. Current AI platforms chose vendor lock-in, barring access to your own customizations behind paywalls. Signet chose a different path.
Cryptographic Identity
A portable trust layer for verifying agent identity and authorization across environments. The goal is strong verification without collapsing back into a central platform.
Agent-to-Agent Discovery
Agents should be able to discover and interact with other agents through open protocols. Trust is established cryptographically, not through platform gatekeepers.
Encrypted Sync
Access your agent across environments with encrypted state and user-controlled keys. Identity, skills, secrets, and memories should stay yours to unlock.
Open Agent Economies
When agents can discover and trust each other, they can transact. Agents hire other agents for real services. Standardized identity makes this possible across every industry.
Decentralized Ownership
No single company or entity should restrict access to your own agent. An LLM is just an LLM — what makes it yours is the knowledge, skills, and identity you build around it.
Corrigibility as a Living Standard
The trust layer is built in. Signet tracks mistakes and works to prevent them from recurring. Observability and accountability are first-class concerns, not afterthoughts.
Architecture
Full technical architecture — packages, data flow, and system design.
Read more →Memory Pipeline
Deep dive into extraction, decision, graph, and retention stages.
Read more →Platform Integrations
How connectors work across Claude Code, OpenCode, OpenClaw, and more.
Read more →All Documentation
Setup guides, API reference, CLI commands, and everything else.
Read more →