Offline context and injection defense
Discover local sources, apply policy and token budgets, compile a provenance-bearing bundle, and keep untrusted source content from becoming instruction authority.
CIGAR Honey · 0.9.1 alpha
Run the CIGAR workflow locally.
Compile governed context, coordinate two agents, recover ambiguous effects, and replay evidence with a deterministic, credential-free developer preview built for Apple-silicon macOS.
Honey is the first bounded CIGAR profile for hands-on local evaluation.
Honey archive release pending
Alpha developer preview. Unsupported evaluation software; not production-qualified, signed, or notarized.
RELEASE FACTS
Exact identifiers. Explicit boundaries.
- Product
- CIGAR Honey 0.9.1 alpha
- Product version
- 0.9.1-honey.1
- Python package
- hol-cigar==0.9.1
- Python import
- cigar_sdk
- Context ABI
- cigar.context.v1
- Release tag
- v0.9.1-honey.1
- Target
- Apple-silicon macOS (aarch64-apple-darwin)
- Deployment
- Embedded or local sidecar
- Trust boundary
- One local OS user with explicit agent principals
- Default network requirement
- None
- Support
- Unsupported evaluation software
WHY 0.9.1
A repair release informed by real workflow pressure.
Honey 0.9.1 incorporates issues discovered during a 200-iteration proof of concept on a working security testing platform—100 runs with CIGAR and 100 without. The release focuses on persistence, restart behavior, retrieval, duplicate-content handling, correlation, and bounded local storage behavior.
The experiment informed engineering work; it did not establish a general efficacy benchmark.
WHAT DEVELOPERS CAN EVALUATE
Four complete local stories.
Two-agent coordination
Fork private work, issue a signed and attenuated handoff, accept it once, record a typed result, and merge against an exact base.
Effect recovery and replay
Record intent before dispatch, preserve ambiguity as UNKNOWN, reconcile or compensate, and replay retained observations without repeating the effect.
Local MCP and Claude Code integration
Connect a local agent workflow through the packaged MCP server and Claude Code adapter while retaining CIGAR's policy and evidence boundaries.
- INTENT
- AUTHORIZED
- DISPATCHED
- UNKNOWN
- RECONCILED
INCLUDED SURFACES
The bounded profile, end to end.
Honey selects the local capabilities needed to evaluate CIGAR's core operating model without presenting experimental or deferred work as release functionality.
- Deterministic filesystem and Git discovery and ingestion.
- Versioned catalog, exact, path, symbol, graph, and lexical retrieval, plus context planning.
- Policy enforcement, token lanes, deterministic compilation, manifests, provenance, and deltas.
- Context spaces, checkpoints, signed handoffs, typed child results, conflicts, and merge.
- Effect intent, approval, dispatch, UNKNOWN recovery, reconciliation, and compensation.
- Observational replay and content-safe operational signals.
- cigar, cigard, cigar-mcp, and cigar-claude-hook.
- Python wheel and source distribution, TypeScript tarball, and Rust local-registry kit.
- Deterministic installed-artifact demos that require no model-provider credential.
The experimental dashboard, Go SDK, vector retrieval, public npm package, and public crates.io package are not selected Honey features.
PUBLISHED PYTHON SDK
Install hol-cigar from PyPI.
The developer-preview SDK is available for Python 3.14. The distribution name is hol-cigar; application code imports the cigar_sdk namespace. The full Honey desktop archive remains a separate release.
python3.14 -m pip install "hol-cigar==0.9.1"
python3.14 -c 'import cigar_sdk; print(cigar_sdk.__version__)'QUALIFICATION
Qualified for a bounded alpha release—not for production.
The 0.9.1 cut binds one clean source commit and tag to an exact 13-file Honey inventory. The release contracts, checksums, documentation, Python SDK checks, release-tool tests, Rust workspace tests, and warnings-denied Clippy passed. The public artifact verifier returned passed-artifact-integrity. The exact hol-cigar wheel and source distribution passed strict metadata validation and clean offline Python 3.14 installs in a disconnected, non-admin Apple-silicon macOS VM, including the 45-operation surface, shared fixture, and both entry points.
Verification identities and SHA-256 values
- Source commit
- 44647de877352f076ba3168009d265f0fb06f39e
- Source tree
- 8ae32e3299143ac486a3295331a716e488a607c3
- Tag
- v0.9.1-honey.1
- Release manifest SHA-256
- bb1aa2a1668c3dfa70f9620865f2b6dd01155d58b42c838841ed22c25f898d31
- Python wheel SHA-256
- 6bfed3fea55b740a53e95b1b0e6b7df59af58a1f638aaccdde9f9522b1b364d5
- Python source distribution SHA-256
- c343f7bcd637a779ecaaff999979579d78dbc08054ca5c77f14bd09fe01e8eac
Artifact integrity and installability do not establish production readiness, security certification, or a general token-efficiency or accuracy improvement.
LIMITATIONS
Deliberately bounded for local evaluation.
Honey does not claim release support for the deferred capabilities and platforms below.
- Linux, Windows, or Intel macOS.
- Remote multi-tenancy or shared PostgreSQL and S3 deployment.
- Containers, Kubernetes, OCI, Homebrew, or a public npm or crates.io release.
- Arbitrary extensions, HTTPS effects, live-provider replay, or remote OTLP export.
- Vector retrieval in the selected release profile.
- Hostile-process isolation inside the same local OS user.
- Signing, Apple notarization, production support, or general availability.
- Conclusive accuracy, efficacy, latency, or token-efficiency gains.
One local-user trust boundary
Honey's authority and integrity controls operate within one local-user trust boundary. They are not process isolation between mutually hostile programs running as that user.
HONEY FAQ
The alpha boundary, made explicit.
Why is the package called hol-cigar but imported as cigar_sdk?
hol-cigar is the Python distribution name used by package tooling. cigar_sdk is the stable Python module imported by application code.
Does Honey require an external model or API key?
No for the packaged deterministic demos. They are designed to exercise CIGAR without model-provider credentials or network access.
Is Honey production-ready?
No. Honey 0.9.1 is unsupported alpha evaluation software and is not production-qualified, signed, or notarized.
Does Honey use a vector database?
Vector retrieval is not selected for this release profile. Exact, path, symbol, graph, and lexical retrieval remain available.
Is the dashboard part of Honey?
No. Dashboard work may exist in proof-of-concept environments, but it is not selected, packaged, or advertised as a Honey 0.9.1 release capability.
Can Honey run on Linux or Windows?
Those platforms are not qualified for this release. The selected target is Apple-silicon macOS.
CIGAR UPDATES
Stay current on CIGAR.
Join the HOL email list for CIGAR release notes, SDK updates, and new developer resources.