eclipse-bazaar 0.1.0__py3-none-any.whl

eclipse_bazaar/data/catalog.json

@@ -0,0 +1 @@
+{"built":"2026-10-27","catalog":"Eclipse Bazaar — agent-facing catalog","products":[{"capabilities":["Create agent wallets owned by a named human","Grant written spending policy: per-transaction cap, daily cap, recipient allowlist, approval threshold, expiry","Dry-run payment check against policy (allow / approve / deny with reason)","Execute payments inside the granted scope (sandbox simulated USDC)","Human approval queue for over-threshold payments","Instant kill switch (revoke) freezing all spending","Append-only audit log of grants, payments, approvals, revocations"],"categories":["Agent Payments","Agent Governance"],"certification":{"bench_verdict":"CERTIFIED(sandbox)","certified":true,"certified_scope":"Test Bench v0.1.0, 2026-10-24, sandbox environment: policy enforcement (no-policy/over-cap/off-allowlist denied), approval queue, kill switch, append-only audit, schema and error handling — 12 pass, 1 na of 13 checks","not_tested":["Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)","Production payment rails — bench ran against simulated test USDC only; x402/production rails not yet wired (x402_ready: false)"],"scorecard_ref":"test-bench/results/eclipse-agent-wallet-mcp-2026-10-24-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-agent-wallet-mcp-2026-10-24-2.json"},"icon":"agent-wallet-mcp/icon-512.png","id":"eclipse-agent-wallet-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-agent-wallet-mcp.png","name":"Eclipse Agent Wallet MCP","platforms":["MCP over stdio"],"pricing_model":"Free sandbox / open reference implementation; hosted tier planned","problem_statements":["I need to give an AI agent spending limits so it can pay for things without spending freely","My agent needs to make payments but only to approved recipients and only up to a cap","I need a kill switch that stops my agent's spending immediately","I need proof of exactly what my agent was authorized to spend, for liability","Payments above a threshold should wait for a human approval before executing"],"source_refs":["agent-wallet-mcp/bazaar-manifest.json","test-bench/results/eclipse-agent-wallet-mcp-2026-10-24-2.json"],"status":"in-development","tagline":"The agent wallet where responsibility follows scope — caps, allowlists, human approvals, kill switch, full audit trail.","tools":["create_wallet","get_wallet","set_policy","fund_wallet","check_payment","pay","approve_payment","deny_payment","audit_log","revoke"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Audit any public storefront URL for AI-agent readiness (8 public-surface checks)","Probe UCP profile at /.well-known/ucp and live MCP endpoints","Check llms.txt, robots.txt AI-crawler policy, sitemap","Verify Product structured data with price and availability","Fingerprint commerce platform (Shopify, WooCommerce, Wix, BigCommerce, custom)","Return 0-100 score, letter grade, per-check observed evidence, and top fixes"],"categories":["Commerce Readiness","Audits"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/agentready.py.","not_tested":["Authenticated checkout verification (out of scope by design: public-surface audit only)","Live storefront grades — bench audits ran against bench-owned localhost fixtures; the product's own live-target smoke results (3 targets, 2026-10-24) were reported, not re-graded"],"scorecard_ref":"test-bench/results/agent-ready-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/agent-ready-mcp-2026-10-25.json"},"icon":"agent-ready-mcp/icon-512.png","id":"agent-ready-mcp","listing_class":"mcp","logo":"branding/logos/agent-ready-mcp.png","name":"AgentReady MCP","platforms":["MCP over stdio"],"pricing_model":"Free local audit (open reference implementation); hosted monitoring tier planned at $99-$199/mo (not yet launched)","problem_statements":["I need to know if a store is ready for AI shopping agents","Is my storefront discoverable and purchasable by AI agents?","Audit a store for agent readiness: UCP profile, MCP endpoint, structured product data","Why can't shopping agents complete a purchase from this store?"],"source_refs":["agent-ready-mcp/bazaar-manifest.json","agent-ready-mcp/results/","test-bench/results/agent-ready-mcp-2026-10-25.json"],"status":"in-development","tagline":"Can an AI agent actually buy from your store? Score it, see the evidence, fix the gaps.","tools":["audit_storefront","list_checks"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Full ACME (RFC 8555) certificate lifecycle: account, order, authorization","HTTP-01 challenge computation and placement","Finalize orders and download PEM chains (Let's Encrypt primary, ZeroSSL via EAB)","Parse any certificate for expiry and renewal-due status (<=30 days)","Staging always labelled; append-only audit log of every step"],"categories":["TLS Certificates","Hosting Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(staging)","certified":true,"certified_scope":"Test Bench v0.1.0, 2026-10-24, Let's Encrypt STAGING environment: end-to-end staging order, byte-exact challenge placement, staging/production labelling, renewal-due detection, audit completeness — 12 pass, 1 na of 13 checks","live_state_note":"Live issuance PROVEN by dogfood run 2026-10-25 — real Let's Encrypt production certificate issued end-to-end for eclipsebazaar.com + www.eclipsebazaar.com (test-bench/results/certbridge-mcp-dogfood-2026-10-25.md). NOT a bench scorecard: bench verdict remains CERTIFIED(staging); the §7 production label is withheld (cPanel install, public repo, named support outstanding).","not_tested":["Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)","cPanel UAPI install — declared in the server, returns explicit not-live errors; not scored by the bench. Live production issuance itself was proven separately by dogfood (see live_state_note)","Production CA account on the BENCH run (bench created a staging account only); the dogfood run created a production account outside the bench"],"scorecard_ref":"test-bench/results/certbridge-mcp-2026-10-24-2.json","scorecard_url":"https://eclipsebazaar.com/cards/certbridge-mcp-2026-10-24-2.json"},"icon":"certbridge-mcp/icon-512.png","id":"certbridge-mcp","listing_class":"mcp","logo":"branding/logos/certbridge-mcp.png","name":"CertBridge MCP","platforms":["MCP over stdio"],"pricing_model":"Free local / open reference implementation; hosted renewal-watch tier planned (per site/mo)","problem_statements":["My site's TLS certificate expired and the host wants me to buy paid SSL","I need to issue or renew a Let's Encrypt certificate without the cPanel dashboard","An agent needs to manage SSL certificates and watch for renewal deadlines","AutoSSL is hidden or broken on my shared hosting"],"source_refs":["certbridge-mcp/bazaar-manifest.json","test-bench/results/certbridge-mcp-2026-10-24-2.json"],"status":"in-development","tagline":"The padlock, without the paywall — agent-native ACME issuance, challenge placement, install, and renewal watching for shared-hosting sites.","tools":["register_account","request_certificate","get_challenges","place_challenge","complete_validation","download_certificate","install_certificate","certificate_status","audit_log"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Probe which deploy channels a host accepts (UAPI 2083, SSH 22, FTPS 990, FTP 21, WHM 2087, webmail 2096) with transport-level caveats","Bind a connection to ONE site's document root (scope binding)","Deploy zip packages: integrity check, manifest + diff, snapshot before deploy, plain-language receipt","One-call rollback restoring the previous package byte-exactly","Real HTTP smoke tests against live URLs","Append-only audit log of probes, deploys, rollbacks"],"categories":["Hosting Infrastructure","Deployment"],"certification":{"bench_verdict":"CERTIFIED(local-real)","certified":true,"certified_scope":"CERTIFIED(local-real) — Test Bench v0.1.0, 2026-10-27 (card hostbridge-mcp-2026-10-27.json, superseding the 2026-10-24 simulator card): real filesystem docroot served by a real HTTP server process; scope binding, dry-run touches nothing, deploy pipeline byte-exact on disk AND served live over HTTP, rollback exact on disk + live HTTP, real-HTTP smoke tests, probe caveat (local listener + live host cetech.ai), corrupt-zip rejection, append-only audit completeness — 15 pass, 1 na of 16 checks. Scope boundary (load-bearing): the deploy TRANSPORT is still the product's 'simulate' transport — this verdict certifies NO remote-host deploy.","not_tested":["Remote-host deploy — NOT in v0.1.0: no SFTP or cPanel UAPI transport is built; the sftp transport returns an explicit declared-not-live error (bench H7)","Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)"],"scorecard_ref":"test-bench/results/hostbridge-mcp-2026-10-27.json","scorecard_url":"https://eclipsebazaar.com/cards/hostbridge-mcp-2026-10-27.json"},"icon":"hostbridge-mcp/icon-512.png","id":"hostbridge-mcp","listing_class":"mcp","logo":"branding/logos/hostbridge-mcp.png","name":"HostBridge MCP","platforms":["MCP over stdio"],"pricing_model":"planned — free local reference implementation v0.1.0; hosted tier on roadmap (multi-site registry, scheduled deploys)","problem_statements":["I need an agent to deploy a website to shared hosting (cPanel/GoDaddy) without the dashboard bot wall","Deploy a website package to a shared hosting docroot safely, with rollback","The hosting dashboard blocks my agent; I need token/key auth deploys instead of SSO","I need a deploy receipt and audit trail for what an agent published to my site"],"source_refs":["hostbridge-mcp/README.md","test-bench/results/hostbridge-mcp-2026-10-27.json"],"status":"in-development","tagline":"Scoped deploys, snapshots, rollback, deploy receipts — CERTIFIED(local-real): the deploy pipeline is proven against a real local filesystem docroot served by a real HTTP server. v0.1.0 has NO remote-host deploy: SFTP and cPanel UAPI transports are not built and return explicit declared-not-live errors.","tools":["probe_channels","register_site","deploy_package","rollback","smoke_test","audit_log"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Hosted OAuth relay: owner authorizes once in a browser; the relay stores the grant encrypted (AES-256-GCM) and issues a revocable agent key","Upload owner-approved YouTube Shorts (multipart video + title/description/tags/privacy)","Public visibility gated on an explicit approval flag; visibility flip endpoint","Fail-closed key auth, instant revoke, per-call audit entries with no token values logged","Status endpoint reporting grant state and quota","Its MCP facade (catalog: eclipse-connect-mcp) is a distinct surface with its own bench card, CERTIFIED(dogfood-facade)"],"categories":["Agent Infrastructure","Media Publishing"],"certification":{"bench_verdict":"CERTIFIED(dogfood)","certified":true,"certified_scope":"Test Bench v0.1.0, 2026-10-24, dogfood environment (simulator-verified, 14 tests): fail-closed auth, upload validation, public-approval gating, revoke, audit hygiene, authorize/callback grant flow — 14 pass, 1 na of 15 checks","not_tested":["MCP schema surface (bench U2 = na: Eclipse Connect is an HTTP relay, not an MCP server)","Multi-user / production scale — P1 scope is a single user, single channel (@TheWhiteReport)"],"scorecard_ref":"test-bench/results/eclipse-connect-2026-10-24-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-connect-2026-10-24-2.json"},"connector":{"facade_mcp_id":"eclipse-connect-mcp","grant_model":"tenant-oauth","hosting":"hosted-relay","metering":"per-connection","upstream_service":"YouTube","wall_type":"app-approval"},"icon":"eclipse-connect-mcp/icon-512.png","id":"eclipse-connect","listing_class":"connector","logo":"branding/logos/eclipse-connect.png","name":"Eclipse Connect","platforms":["HTTPS relay (hosted)"],"pricing_model":"planned — not yet productized; P1 dogfood in live use for The White Report uploads","problem_statements":["My agent needs to upload videos to YouTube but I don't want it holding my Google credentials","OAuth for agents is fragmented across domains; I need a relay that holds the grant and takes scoped uploads","Upload only the exact approved content pack, nothing else, with an audit trail"],"source_refs":["eclipse-connect-relay/README.md","eclipse-connect-p1-spec.md","test-bench/results/eclipse-connect-2026-10-24-2.json"],"status":"dogfood","tagline":"Hosted OAuth bridge that lets an agent upload owner-approved YouTube Shorts without ever holding the channel's credentials.","tools":[],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Apply to jobs only inside a human-granted written policy: target roles, salary floor, locations, company allowlist + blocklist, daily cap, approval threshold, expiry, kill switch","Live job discovery against the public Greenhouse / Lever / Ashby / Workable JSON feeds","Review-first by design: matches land as prepared applications for human approval","Tailored resumes re-order verbatim real experience only — every tailoring ships with a machine-verifiable diff proving zero invented facts","Append-only, hash-chained receipt ledger for every grant, preparation, approval, refusal and submission","v0.1 submissions are DRY-RUN ONLY: the Greenhouse payload is built, validated and recorded — nothing is transmitted to any employer"],"categories":["Career / Job Search"],"certification":{"bench_verdict":"CERTIFIED(sandbox)","certified":true,"certified_scope":"Test Bench v0.1.0, 2026-10-25, SANDBOX environment: policy refusals (blocklist, salary floor, daily cap, expired policy), pause/kill switch, zero-fact tailoring diff, fabrication catch, hash-chained receipt ledger, dry-run transmits nothing, delete_my_data purge — 17 pass, 1 na of 18 checks","not_tested":["Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)","Live job boards — bench jobs are synthetic fixtures seeded into bench state in /tmp; no live boards fetched, no employer contacted","Live submission — v0.1 is DRY-RUN ONLY by design; A7 truthfulness check ran logic-level (verify_truthful() in-process), all other checks over MCP"],"scorecard_ref":"test-bench/results/eclipse-apply-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-apply-mcp-2026-10-25.json"},"icon":"eclipse-apply-mcp/icon-512.png","id":"eclipse-apply-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-apply-mcp.png","name":"Eclipse Apply MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; paid tiers per concept spec (monthly pricing printed plainly; no weekly framing) — hosted tier planned","problem_statements":["I want help applying to jobs, but only to roles I actually want, at or above my salary floor","Auto-apply tools invent experience on resumes — I need proof mine never does","Anything applying in my name needs a blocklist, a daily cap, and a kill switch","I want a receipt for every application prepared, approved, refused, or submitted in my name"],"source_refs":["eclipse-apply-mcp/bazaar-manifest.json","autoapply-concept-20261025.md","test-bench/results/eclipse-apply-mcp-2026-10-25.json"],"status":"in-development","tagline":"The auto-apply tool that shows its work — policy-scoped autonomy, review-first, receipts for everything, and a resume it can prove it never embellished.","tools":["ingest_resume","set_policy","get_policy","search_jobs","match_jobs","prepare_application","approve_application","reject_application","list_receipts","get_tracker","pause","resume","delete_my_data"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Search MyFloridaMarketPlace vendor ads from dated local snapshots (read-only)","Deadline truth: document-parsed deadlines outrank the portal's misleading grid End dates","Competitive-vs-notice mix, agency buying cadence, due-date clustering","Agency decision / single-source notice feed","Transparent fit score against a NAICS/commodity profile, with component breakdown","Fields the portal does not expose are reported as not exposed, never guessed"],"categories":["Opportunity Intelligence","Government Contracting"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/florida.py.","not_tested":["Live portal pull — no live-pull code path exists (F3 source assertion); v0.1.0 reads dated local snapshots from attended pulls only","Multi-snapshot run-over-run deltas beyond baseline (both stores hold a single snapshot; delta=baseline is the tested case)"],"scorecard_ref":"test-bench/results/florida-bid-intel-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/florida-bid-intel-mcp-2026-10-25.json"},"icon":"florida-bid-intel/icon-512.png","id":"florida-bid-intel-mcp","listing_class":"mcp","logo":"branding/logos/florida-bid-intel-mcp.png","name":"Florida Bid Intel MCP","platforms":["MCP over stdio"],"pricing_model":"P0 free dogfood (CETech internal); P1 Bazaar listing planned at $49/mo (owner pick, not live)","problem_statements":["I need to find Florida state contract opportunities that fit my company","The MyFloridaMarketPlace portal grid shows misleading end dates; I need real proposal deadlines","Track Florida agency decisions and single-source notices in my commodity codes"],"source_refs":["florida-bid-intel/bazaar-manifest.json","florida-bid-intel-spec.md","test-bench/results/florida-bid-intel-mcp-2026-10-25.json"],"status":"in-development","tagline":"Florida bid intelligence with honest deadlines — real competitions, real due dates, gaps stated not guessed.","tools":["mfmp_search","mfmp_ad","mfmp_pulse","mfmp_deadlines","mfmp_decisions","mfmp_digest"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Get the latest White Report articles (newest first)","Search articles by keyword with headline matches scored first","Get full article text by slug (per-article JSON twins)","Get the markets ticker snapshot (crypto + stocks + metrics)","Get the scoreboard of falsifiable calls with grades as they resolve","Connect from Muse as a custom connector — one-paste setup prompt and OpenAPI spec at thewhitereport.com/agents"],"categories":["News & Data","Crypto"],"certification":{"bench_verdict":"CERTIFIED(live)","certified":true,"certified_scope":"Test Bench v0.1.0, 2026-10-25, LIVE host environment: all 5 tools verified over real HTTP JSON-RPC against the production endpoint (article search + full text, ticker, scoreboard, contract surface, read-only behavior, no-secrets scan) — 10 pass, 1 na of 11 checks","not_tested":["Auth enforcement (bench U1 = na: public read-only tier by design, no auth on the public tier)"],"scorecard_ref":"test-bench/results/white-report-mcp-2026-10-25-11.json","scorecard_url":"https://eclipsebazaar.com/cards/white-report-mcp-2026-10-25-11.json"},"icon":"https://thewhitereport.com/assets/icon-512.png","id":"white-report-mcp","listing_class":"mcp","logo":"branding/logos/white-report-mcp.png","name":"The White Report MCP","platforms":["HTTPS (hosted, thewhitereport.com/mcp.php)"],"pricing_model":"Free (read-only public tier) stays free, and free self-host stays free. PRICED — metered reads $0.01/read (PC-1) via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product.","problem_statements":["I need to search crypto news and get article text an agent can read","Give my agent structured crypto and AI news, not scraped HTML","What are the latest market numbers and how did this source's past calls grade out?"],"source_refs":["test-bench/results/white-report-mcp-2026-10-25-11.json","mcp-product-slate-20261023.md (product zero)"],"status":"live","tagline":"Free read-only crypto + AI news for agents: search articles, get full article text, live ticker, and a graded prediction scoreboard. Also a Muse custom connector — one-paste setup at thewhitereport.com/agents.","tools":["get_latest","search_articles","get_article","get_ticker","get_scoreboard"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Search products by keyword across names, capabilities, and categories, with transparent match reasons","Find solutions by problem statement, ranked with fit explanations and status/certification badges","Full product detail including certification block and what was NOT tested","Side-by-side comparison of products","Certification lookup returning the latest Test Bench verdict and scorecard summary","Category listing with counts by status"],"categories":["Marketplace Discovery","Agent Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bazaar.py. Standing card is run 4 (-4.json); runs 1-3 FAILED retained (bench-suite defects, disclosed in card notes).","not_tested":["Third-party listings (P2) — v0.1.0 covers the CETech catalog only","Purchasing / x402 flows — no purchasing surface exists in v0.1.0 (B7)"],"scorecard_ref":"test-bench/results/eclipse-bazaar-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-bazaar-mcp-2026-10-26-2.json"},"icon":"bazaar-mcp/icon-512.png","id":"eclipse-bazaar-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-bazaar-mcp.png","name":"Eclipse Bazaar MCP","platforms":["MCP over stdio"],"pricing_model":"Free discovery (v0.1.0, CETech catalog only); marketplace economics are P2 — no purchasing in v0.1.0","problem_statements":["I need to find an MCP tool that solves a specific problem","Which agent tools are actually tested and certified, and what was not tested?","Search a product catalog by capability, not just by product name","Compare MCP products side by side: status, pricing, certification"],"source_refs":["bazaar-mcp/bazaar-manifest.json","bazaar-mcp/catalog.json","test-bench/results/eclipse-bazaar-mcp-2026-10-25.json","test-bench/results/eclipse-bazaar-mcp-2026-10-25-4.json","test-bench/results/eclipse-bazaar-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Agents discover TESTED tools by the problem they need solved — every listing carries its Test Bench verdict or says plainly that it has none.","tools":["search_products","find_solutions","get_product","compare_products","get_certification","list_categories"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Shred a caller-supplied solicitation into an evidence-bound compliance matrix: every requirement row carries a verbatim source quote plus its locator (section + line span) — nothing is paraphrased into existence","Completeness pass with a SILENT_EMPTY gap report: solicitation sections present in the document that yielded zero extracted requirements are flagged by name, never silently dropped","Requirements checklist and set-aside summary (set-aside types with verbatim quotes, NAICS codes, size standard verbatim)","Deadline extraction under strict date formats only: unparseable or relative deadline text is flagged by name (UNPARSEABLE_DATE / RELATIVE_DATE_UNRESOLVED), never fabricated into a date","Local and stateless v0.1: input is raw text or a local file path — there is no live SAM.gov fetch, no PDF parsing, and no network call"],"categories":["Government Contracting","Document Analysis"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 25 pass, 1 na of 26 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bidmatrix.py. Runs 1–2 FAILED and the run-3 harness flake are retained append-only; run 4 is the standing card — defects D1–D6 fixed and verified on bench-built fixtures independent of the builder's tests. N-CHECK: NOVELTY_PROVEN — evidence-bound rows (every requirement a verbatim substring of the source with a section + line locator) plus the SILENT_EMPTY completeness pass; with D4 fixed, the completeness limb holds under repeated section ids.","not_tested":["Live SAM.gov fetch / URL ingestion — NOT built in v0.1; the caller supplies raw text or a local file path, and no fetch verb exists on the surface","PDF parsing — NOT built; text input only","Hosted / multi-tenant surface and payments — NOT built; local stdio only","Backlog D7 (minor, non-gating, from the standing card): NAICS lists separated only by ' / ' extract the first code only, and the unanchored phrasing 'Applicable NAICS codes are …' extracts none — outside the engine's declared anchored scope, logged for the next fix wave"],"scorecard_ref":"test-bench/results/eclipse-bidmatrix-mcp-2026-10-26-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-bidmatrix-mcp-2026-10-26-4.json"},"id":"eclipse-bidmatrix-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-bidmatrix-mcp.png","name":"Eclipse BidMatrix MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; planned PAID: per-shred credits + $49-$99/mo subscription tier (slate sketch, not launched)","problem_statements":["I need to shred an RFP into a compliance matrix without doing it by hand","Extract requirements, deadlines, and set-asides from a SAM.gov solicitation","Tell me exactly what a proposal must contain to be compliant"],"source_refs":["eclipse-bidmatrix-mcp/bazaar-manifest.json","test-bench/results/eclipse-bidmatrix-mcp-2026-10-26-4.json"],"status":"in-development","tagline":"Drop in a solicitation, get back the compliance matrix — Section L/M extraction, requirements checklist, deadlines, set-aside summary.","tools":["solicitation_shred","compliance_matrix","requirements_checklist","deadline_extract","set_aside_summary"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Statically audit caller-supplied HTML against WCAG 2.1 A/AA as incorporated by Revised Section 508: 22 statically decidable checks (alt text, form labels, heading order, page lang and title, duplicate ids, ARIA validity, link/button names, positive tabindex, data-table headers, iframe titles, contrast for inline-declared colors, and more)","Evidence-bound findings: every finding carries its WCAG criterion id, a verbatim snippet of the supplied markup, and an element locator (DOM path + line), verifiable against the exact bytes that produced it","ACR/VPAT-ready evidence report in VPAT table shape (criterion → conformance level → evidence/remarks)","NOT_STATICALLY_DECIDABLE honesty: 15 criteria that static markup cannot decide are reported with reasons on every audit, never silently passed — a zero-failure audit still claims conformance NONE, and 1.4.3 renders Partially Supports when stylesheet contrast is unknowable, never a clean Supports","Fail-closed named refusals on malformed input; v0.1 audits one supplied document per call — no rendered DOM, no browser, no multi-page crawl"],"categories":["Accessibility Compliance","Audits"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/section508.py. Runs 1–2 FAILED on bench-suite defects (a locator regex, then a corpus threshold) — no product code was touched between runs; run 3 is the standing card. N-CHECK: NOVELTY_PROVEN — the evidence binding (criterion id + verbatim snippet + element locator, programmatically verified on every bound finding) plus NOT_STATICALLY_DECIDABLE honesty: partially-decidable 1.4.3 renders Partially Supports, never a clean Supports, and a zero-failure audit still claims conformance NONE.","not_tested":["Rendered-DOM / browser auditing — NOT built in v0.1 and not attempted: this environment has no headless browser. Only static analysis of caller-supplied HTML text is in scope.","External-CSS / cascade contrast beyond inline-declared colors — classified NOT_STATICALLY_DECIDABLE in-product, never approximated or passed.","Multi-page / site-level audits — v0.1 audits one supplied document per call.","Formal VPAT 2.x edition exports (INT / Section 508 edition) and completed/signed ACR generation — v0.1 emits ACR/VPAT-ready evidence in VPAT table shape only.","WCAG 2.2-only criteria — the Section 508-incorporated standard audited is WCAG 2.1 A/AA.","Backlog D1 (minor, non-gating, house-pattern, from the standing card): an unparseable raw line on stdio returns -32603 with raw exception text where JSON-RPC reserves -32700 for parse errors; recorded for a house-wide fix wave."],"scorecard_ref":"test-bench/results/eclipse-section508-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-section508-mcp-2026-10-26-3.json"},"icon":"eclipse-section508-mcp/icon-512.png","id":"eclipse-section508-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-section508-mcp.png","name":"Section 508 Evidence MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Planned — PAID: per-audit report $29-$99 + subscription for continuous checks (slate sketch, not launched); free local v0.1","problem_statements":["I need a Section 508 / WCAG audit of a website with evidence I can hand to a federal buyer","Generate an ACR/VPAT-ready accessibility report","Prove accessibility compliance for a federal contract deliverable"],"source_refs":["eclipse-section508-mcp/bazaar-manifest.json","test-bench/results/eclipse-section508-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"WCAG + Section 508 audits that produce the deliverable federal buyers actually require: ACR/VPAT-ready evidence.","tools":["audit_html","acr_report","checks_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Read-only search over caller-supplied / bundled LOCAL datasets in SAM.gov-opportunity shape — dataset in, answers out; no live network call and no API key exists in v0.1","Deterministic fit scoring that always decomposes into named factors with per-factor points and reasons (naics_match 35, set_aside_eligibility 25, deadline_runway 20, past_performance_fit 10, place_of_performance 10) — a score without its breakdown is a defect","A separate newcomer axis rating realism for a firm with no past performance, from its own five named factors — never folded into fit","Plain-language summaries built from record fields only: summary_basis names every field a sentence traces to; absent facts become named flags (DEADLINE_UNPARSEABLE / DEADLINE_NAIVE_NO_OFFSET / DEADLINE_PASSED), never invented agency, contact, deadline, or value text","Fail-closed named refusals throughout (EMPTY_DATASET, PROFILE_REQUIRED, PROFILE_INVALID, per-record RECORD_MALFORMED quarantine — one bad record never kills a search); exactly 4 read-only tools, no fetch/submit/write verb"],"categories":["Government Contracting","Opportunity Intelligence"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fedscope.py. Runs 1–3 FAILED retained append-only (runs 1–2 carried bench-suite defects; run 3 was the pre-fix product card); run 4 is the post-fix re-bench — D1–D3 verified fixed, scoring snapshot byte-identical. N-CHECK: NOVELTY_PROVEN, re-earned in run 4 — deterministic fit + newcomer scoring with every point hand-recomputed by the bench (~58 cases) and traced summaries that name their field basis and flag absent facts instead of inventing them; no fetch or live verb exists on the surface.","not_tested":["Live SAM.gov fetch — NOT built in v0.1 and no API key exists; search runs over caller-supplied / bundled LOCAL datasets in SAM.gov-opportunity shape only","Hosted / multi-tenant operation — NOT built; local stdio only"],"scorecard_ref":"test-bench/results/eclipse-fedscope-mcp-2026-10-26-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-fedscope-mcp-2026-10-26-4.json"},"icon":"eclipse-fedscope-mcp/icon-512.png","id":"eclipse-fedscope-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-fedscope-mcp.png","name":"FedScope MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1 (authority + funnel into CETech services and BidMatrix)","problem_statements":["Search federal contract opportunities with a fit score for my company","Summarize SAM.gov opportunities in plain language","Which new opportunities are realistic for a newcomer firm?"],"source_refs":["eclipse-fedscope-mcp/bazaar-manifest.json","test-bench/results/eclipse-fedscope-mcp-2026-10-26-4.json"],"status":"in-development","tagline":"Federal + state opportunity search with fit and newcomer scoring and plain-language summaries — not a raw API wrapper.","tools":["opportunity_search","opportunity_score","opportunity_summarize","validate_dataset"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Static security scan of a local MCP server directory or agent configuration (file or inline object): 23 checks in 7 categories (auth, secrets, SSRF, dangerous tool surfaces, transport, dependencies, runtime)","Evidence-bound findings: every finding cites the exact file and line (or json_path for config findings) and the snippet that triggered it, with severity and fix text bound to the check definition — never free-generated","A decomposed score: the overall score is a weighted mean of per-category scores and is never emitted without its decomposition — a clean scan is a full 23-check report shape, not an absence of findings","Checks that static evidence cannot decide report NOT_STATICALLY_DECIDABLE with the reason, never a silent pass","Safe by construction: targets are read only — never executed, imported, or probed; no network; credential values are masked in emitted snippets (bench-verified at N2, run 3)"],"categories":["Security","Audits"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/healthcheck.py. Runs 1–2 FAILED retained append-only; run 3 is the standing card — B-HC-1 (credential masking not global, HIGH) and B-HC-2 (-32603 escapes on the tool surface, HIGH) fixed and verified pass at N2/H3. N-CHECK: NOVELTY_PROVEN — evidence-bound findings whose file+line citations the bench opened and verified verbatim, severity/fix byte-bound to the check catalog, NOT_STATICALLY_DECIDABLE as a first-class result, and a score never emitted without its decomposition.","not_tested":["Live probing / runtime posture — no live probing exists in this tier by design; runtime checks (HC-AUTH-03 / SSRF-02 / SSRF-03 / RUN-01 / RUN-02) are certified only as enumerated NOT_STATICALLY_DECIDABLE with reasons, never as passes","Hosted / multi-tenant operation — NOT built; local stdio only","Residual LOW backlog from the standing card: B-HC-3 (a target root that is itself a symlink is followed — caller's explicit target; disclose resolved-root behaviour in v0.2), B-HC-4 (absence/config evidence uses line=0 + json_path — the file+line claim should carve this out explicitly), B-HC-6 (malformed-JSON envelope handling at the transport layer)"],"scorecard_ref":"test-bench/results/eclipse-health-check-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-health-check-mcp-2026-10-26-3.json"},"icon":"eclipse-health-check-mcp/icon-512.png","id":"eclipse-health-check-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-health-check-mcp.png","name":"Eclipse Health Check MCP","platforms":["MCP over stdio (static local targets only; no live probing, no network)"],"pricing_model":"Free local v0.1 (authority builder; dogfoods on CETech's own servers first)","problem_statements":["Is my MCP server secure? Check it for SSRF exposure and missing auth","Scan an agent configuration for security problems and tell me the fixes","Audit MCP servers before I trust them with my agent"],"source_refs":["eclipse-health-check-mcp/bazaar-manifest.json","test-bench/results/eclipse-health-check-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"Scan an MCP server or agent configuration for security posture — evidence-bound findings, decomposed score, fixes.","tools":["health_scan","health_scan_config","health_checks_list","health_explain_check"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Read-only static recon of a local codebase: architecture map (languages, packages, entry points, layering signals, file/size distribution)","Dependency + end-of-life risk list: manifest parsing plus an explicit versioned-in-code EOL rules table — every EOL claim cites its rule id","Modernization estimate INPUTS (LOC by language, test presence/ratio, manifest age signals, coupling hotspots by fan-in) — raw inputs, never an estimate","Evidence-bound recon at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md): Positive DECLARED, OBSERVED, and INFERRED reports only within CLAIM-SCOPE.md, with evidence or basis carried in the output; OBSERVED is not exhaustive. The three lists are never blended, and anything not statically determinable reports UNKNOWN with the reason","Safety: target code is never executed or imported, symlinks are never traversed (escapes are reported), binary files are skipped and counted, and size/file-count caps surface as named truncation flags"],"categories":["Code Analysis","Modernization"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md): Positive DECLARED, OBSERVED, and INFERRED reports only within CLAIM-SCOPE.md, with evidence or basis carried in the output; OBSERVED is not exhaustive. Withdrawn by name — W1 JS_TS_MULTILINE_BLOCK_COMMENT_CONTINUATION_AFTER_SPLIT_NO_CLOSE_SPAN · W2 JS_TS_CHAINED_NO_CLOSING_SLASH_REGEX_SPANS_ON_ONE_LINE · W3 B_LR_14_INVALID_LINE_NONINVENTORY_IDENTIFIER_FOLLOW · W4 EXHAUSTIVE_OBSERVED_RECALL · W5 DYNAMIC_IMPORT_OBSERVATION_OR_SPECIFIC_UNKNOWN · W6 MTS_CTS_OBSERVED_EXTRACTION · W7 PERMISSION_DENIED_SUBTREE_COMPLETENESS · W8 SELF_REFERENTIAL_SYMLINK_REPORT_AND_SKIP · W9 HOSTED_AUTHENTICATED_OR_MULTI_TENANT_OPERATION. Scoped re-bench card -11 (2026-10-26): 30 pass, 0 na of 30 checks.","not_tested":["Manifest ecosystems beyond the v0.1 parsers listed in README (no Gradle dependency extraction, no lockfile parsing)","Hosted / multi-tenant operation and auth beyond the stdio process boundary (withdrawn W9)","Withdrawn W1: JS/TS multiline block-comment continuation after a split no-closing-slash regex-like span (card -10 X1)","Withdrawn W2: JS/TS chained no-closing-slash regex-like spans on one physical line (card -10 X1)","Withdrawn W3: B-LR-14 non-inventory identifier follow on invalid JS/TS lines only","Withdrawn W4: exhaustive OBSERVED recall — B-LR-5 (JS), B-LR-6 (Python), and B-LR-15 / template-${} over-masking recall limits","Withdrawn W5: dynamic-import OBSERVED entries and a dedicated dynamic-import UNKNOWN (B-LR-3)","Withdrawn W6: .mts/.cts OBSERVED extraction (suffixes absent from EXT_LANG)","Withdrawn W7/W8: completeness over permission-denied subtrees and report-and-skip treatment of self-referential symlink loops (B-LR-7)","B-LR-12 remains a cosmetic bench-suite wording item, not a product claim"],"scorecard_ref":"test-bench/results/eclipse-legacy-recon-mcp-2026-10-26-11.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-legacy-recon-mcp-2026-10-26-11.json","verdict_note":"CERTIFIED(local) — Eclipse Bazaar Test Bench card -11, 2026-10-26, scoped re-bench at the narrowed claims: 30/30 checks pass (mechanical consistency M1–M8, inside-fence boundary attacks B1–B5, withdrawn-class labelling W1–W9, regression split R1–R3, Python P1–P4; no original failing shape falls inside the narrowed scope). History, not softened: cards -1..-10 retained append-only; card -10 FAILED (22/25) at the former universal JS/TS claim. Owner disposition was NARROW — claims cut to bench-observed scope in CLAIM-SCOPE.md (commit bb7eb3e), no lexer fix round; the re-bench certifies the narrowed claims only, and withdrawn classes W1–W9 are labelled in every output via the structured claim_scope object, never silently full-strength. N-CHECK: PASS at the narrowed scope (evidence-bound limb true as claimed; universality withdrawn, not failed). Builder suite 97/97 and smoke pass at bb7eb3e."},"id":"eclipse-legacy-recon-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-legacy-recon-mcp.png","name":"Eclipse Legacy Recon MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1 (services-led assessment funnel into CETech modernization work)","problem_statements":["Map the architecture of a legacy codebase an agent can analyze","List dependency and end-of-life risks in an old codebase","Assess a codebase before a modernization project"],"source_refs":["eclipse-legacy-recon-mcp/bazaar-manifest.json","test-bench/results/eclipse-legacy-recon-mcp-2026-10-26-8.json","test-bench/results/eclipse-legacy-recon-mcp-2026-10-26-10.json","test-bench/results/eclipse-legacy-recon-mcp-2026-10-26-11.json"],"status":"in-development","tagline":"Point an agent at a codebase: narrowed-scope architecture map, dependency/EOL risk list, modernization estimate inputs.","tools":["recon_scan","architecture_map","dependency_risk_list","modernization_inputs"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Scoped agent mailbox identity: grants carry send/read/search only, an owner kill switch (revoke) that fails closed across every surface at once, and per-correspondent freeze with snippet suppression","Review-first sending: draft → owner approval of the exact draft (hash-bound) → send; the owner-set signature is part of the approved text and changing it invalidates the approval; template sends require template AND recipient allowlist (to + cc), both owner-pre-approved","Anti-fraud envelope engine: per-message SPF/DKIM/DMARC verdicts with alignment — fail, absent, or temperror drops the message to the lowest trust tier; no valid Herald signed envelope means never agent-tier, even from a registered agent domain","Lookalike detection a lookalike's own passing DMARC does not save: edit distance, homoglyph/IDN confusables, TLD swaps, and subdomain/substring tricks — flagged, tier 0, operator alerted","The §5 fraud firewall BY CONSTRUCTION: payment, credential, trust, and disclosure instructions from email are non-actionable — no tool can adopt them; detection opens an out-of-band verification workflow keyed to the registry number-of-record, never a number from the email (F-BEC leaves protected state bit-identical)","Herald RS256 signed envelopes with thread hash-chaining: inserted or unsigned messages verify as not part of the chain; inbound content renders as quarantined data with provenance — injection-shaped content is a signal about the sender and satisfies no gate, including the send approval","Append-only hash-chained audit with exactly one entry per call — refusals and crashed calls included; the attachment ledger is truthful about hashing (body_hash is the SHA-256 of content bytes only when content exists; the metadata-only path carries a separate metadata_hash and says so)"],"categories":["Agent Infrastructure","Email"],"certification":{"bench_verdict":"CERTIFIED(local / fixture-only)","certified":true,"certified_scope":"CERTIFIED(local / fixture-only) — Eclipse Bazaar Test Bench 2026-10-25, 48 pass, 0 na of 49 checks (score 99/100: 48 pass / 1 partial / 0 fail). Run by W-003 (Verity), independent re-bench of the P0 fix round; the original NOT CERTIFIED card (68/100, test-bench/results/eclipse-mail-mcp-2026-10-25.json) is retained append-only, and this -2 card is the standing verdict basis. Scope is LOCAL / FIXTURE-ONLY: the §8 anti-fraud corpus, the signed-envelope/tier engine, the review-first send gate, the §5 fraud firewall, and the audit/kill-switch discipline, all over a synthetic fixture transport. NO live mailbox exists; NO live sending is possible in v0.1; parent-spec dogfood acceptance has NOT run and is NOT certified. The one PARTIAL (D-4): the §5 detector's detection prong catches canonical paraphrases (4/4 on the bench's fresh primary set; benign controls clean) but remains pattern-bounded on an extended evasion set (7/12 detected) — bounded by the by-construction firewall: an evasion loses the flag/workflow only, never protected state, because no tool can adopt a §5 instruction (forbidden surface refused 23/23 by name). A semantic detector pass is required before any live claim. N-CHECK: NOVELTY_PROVEN — fraud-firewall-by-construction plus detection-triggered out-of-band verification keyed to the registry number-of-record, Herald signed-envelope thread hash-chaining, and automatic auth→tier consequences including the D1 envelope-tier law (no valid envelope → never agent-tier).","not_tested":["Live mailbox IMAP/SMTP — NOT built. v0.1 ships the fixture transport only; parent-spec dogfood acceptance (live mailbox, send/receive/reply, 7-day run) requires the owner-created cetech.ai mailbox and a separate go — NOT certified.","Live sending of any kind — no live mailbox exists in v0.1 and no real credential exists in the package; the certified send gate ran over the fixture transport only.","§5 detector semantic depth — extended evasion set 7/12 (D-4 PARTIAL, disclosed in certified_scope); a semantic detector pass is required before any live deployment claim.","AES-256-GCM credential custody — live design only; v0.1 hashes and discards the synthetic fixture credential (fingerprint only).","cetech.ai DNS posture (§7.1) — not audited, not changed (D2 audit-first, owner-approved).","Network Herald card lookup / Envoy registry — v0.1 uses local fixture JWKS + Envoy-shaped local registry; migration lands with Envoy E0.","Attachment content retrieval, delete tool, Gmail/Outlook OAuth, hosted relay — parent-spec P2.","Operator-channel authentication beyond the stdio process boundary (by_owner flags are the v0.1 owner-surface marker; standing U1 class)."],"scorecard_ref":"test-bench/results/eclipse-mail-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-mail-mcp-2026-10-25-2.json"},"icon":"eclipse-mail-mcp/icon-512.png","id":"eclipse-mail-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-mail-mcp.png","name":"Eclipse Mail MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; pricing TBD at P2 per spec (no numbers set, quoted, or implied)","problem_statements":["My agent needs its own business email address to send and receive mail","Let an agent read and reply to email without handing it my own mailbox","Agent email sending should be review-first, with a kill switch and an audit trail","An email told my agent to change payment details — that class of instruction should be non-actionable, not just flagged"],"source_refs":["eclipse-mail-spec-20261024.md","eclipse-mail-antifraud-addendum-20261025.md","test-bench/results/eclipse-mail-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Governed agent email identity — review-first sending, signed envelopes, and a fraud firewall that makes money instructions non-actionable from email alone.","tools":["grant_issue","fixture_load","list_inbox","read_message","search_messages","ingest_message","draft_create","draft_approve","send_message","reply_message","get_grant_status","revoke","audit_list","fraud_list","registry_list","signature_set","template_register","allowlist_add","freeze_correspondent","unfreeze_correspondent"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Build and sign A2A Agent Cards (JWS/RS256) for hireable services; JWKS export carries public material only","Verify foreign cards: signature, body and skill tamper, unsigned cards rejected","Policy-gated delegation gateway: certify-check before any hire","AP2-shaped mandates with budget caps and expiry; expired or over-budget delivery refused","Receipt-on-delivery settlement in a hash-chained ledger (zero-value test credits in v0.1)","Security Law #1 in code: foreign-agent output is quarantined data, never instructions"],"categories":["Agent-to-Agent Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/herald.py.","not_tested":["Live A2A task endpoints (H2 scope — v0.1 delegates to local stub agents only)","External counterparty cards / remote JWKS fetch (no network in v0.1)"],"scorecard_ref":"test-bench/results/eclipse-herald-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-herald-mcp-2026-10-25.json"},"icon":"eclipse-herald-mcp/icon-512.png","id":"eclipse-herald-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-herald-mcp.png","name":"Eclipse Herald MCP","platforms":["MCP over stdio"],"pricing_model":"Free local reference implementation; hosted gateway + certify-before-you-hire service planned (Bazaar P3)","problem_statements":["I need to verify another agent's identity before I hire its service","I need proof a delegated agent actually delivered before any payment settles","Instructions embedded in another agent's output must never reach my agent as commands","Delegation spending should be capped by a written mandate with an expiry"],"source_refs":["eclipse-herald-mcp/bazaar-manifest.json","test-bench/results/eclipse-herald-mcp-2026-10-25.json"],"status":"in-development","tagline":"Signed Agent Cards, policy-gated delegation, certification before hire.","tools":["card_build","card_sign","card_verify","gateway_delegate","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Ingest declarations pages (JSON or text) into a policy graph with per-field provenance","Propose-only merges: unconfirmed ingests write nothing to the graph","Expiry radar: renewals, premium dues, grace-period ends, escrow proof deadlines, enrollment windows","Gap report: uncovered assets, duplicate coverage, premium spikes","Alert windows may only tighten, never loosen (the Vigil rule, encoded and tested)"],"categories":["Insurance / Personal Finance Watch"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/beacon.py.","not_tested":["Phases B1+ (gap expansion, lapse guard, renewal shopping prep, mandate-gated actions) — not built in v0.1, not benched","Agency edition — not built (counsel/licensing gate per spec); not benched"],"scorecard_ref":"test-bench/results/eclipse-beacon-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-beacon-mcp-2026-10-25.json"},"icon":"eclipse-beacon-mcp/icon-512.png","id":"eclipse-beacon-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-beacon-mcp.png","name":"Eclipse Beacon MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I need to know before a household policy lapses, not after","I cannot tell which of our assets are actually covered","Every policy fact should be traceable to the document it came from"],"source_refs":["eclipse-beacon-mcp/bazaar-manifest.json","test-bench/results/eclipse-beacon-mcp-2026-10-25.json"],"status":"in-development","tagline":"The insurance watcher — signals your policies' expiries before they happen. It does not insure, bind, or advise.","tools":["policy_ingest","policy_list","policy_get","radar_report","gap_report"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Resolve an image's digest from its registry with a read-only OCI client (digest computed over served bytes)","Verify cosign-style signatures (ECDSA P-256, Ed25519, RSA) with a pure-stdlib gate","Verify DSSE / in-toto provenance against a written policy and local trust bundle","Per-check PASS/FAIL verdict (10 gate checks), fail-closed on every error","Wrong-signer failures distinguished: forgery fails the signature, an unauthorized signer fails policy"],"categories":["Container Security"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Simulator scope: local stub registry, openssl-signed fixtures. Run by W-003 (Verity), suites/cluster.py.","not_tested":["Runtime/orchestration phases K1-K3 not built — v0.1 is the K0 verification gate only","Keyless/Fulcio certificate signatures not accepted by design in v0.1 (key-based trust bundles only)"],"scorecard_ref":"test-bench/results/eclipse-cluster-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-cluster-mcp-2026-10-25.json"},"icon":"eclipse-cluster-mcp/icon-512.png","id":"eclipse-cluster-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-cluster-mcp.png","name":"Eclipse Cluster MCP","platforms":["MCP over stdio"],"pricing_model":"Free / open reference implementation","problem_statements":["I need to prove a container image was signed by the signer my policy names before it runs anywhere","A signature gate must fail closed when a registry or key cannot be reached, and say why"],"source_refs":["eclipse-cluster-mcp/bazaar-manifest.json","test-bench/results/eclipse-cluster-mcp-2026-10-25.json"],"status":"in-development","tagline":"Signed images, governed runtimes — the gate runs first: no verified signature and provenance, no workload.","tools":["verify_image","policy_show","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Ingest Jira-DC-shaped REST exports, SARIF findings, VectorCAST-shaped coverage and XMI-lite model exports into one artifact graph","Typed trace links with provenance {source tool, version, run id, source ref} on every artifact","Gap-first trace analysis: unlinked requirements, untested code, findings without tickets, per-layer coverage","Deterministic, hash-chained evidence packages (same graph, same package identity)","Standalone evidence verification: artifact substitution and link removal detected and named"],"categories":["Defense / Safety-Critical Software Engineering Toolchain"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/thread.py.","not_tested":["Any real tool instance: no Jira Data Center, Coverity, Cameo, or VectorCAST instance was available or contacted. All targets are fixtures/mocks — the (simulator) qualifier applies to the whole v0.1 scope.","Live bridge behavior against a real Jira Data Center (auth, per-version REST surface, rate behavior) — bridge exercised only against the bundled stdlib stub over localhost HTTP."],"scorecard_ref":"test-bench/results/eclipse-thread-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-thread-mcp-2026-10-25.json"},"icon":"eclipse-thread-mcp/icon-512.png","id":"eclipse-thread-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-thread-mcp.png","name":"Eclipse Thread MCP","platforms":["MCP over stdio (local; enclave deployment shape)"],"pricing_model":"Free local v0.1 (simulator); licensing model TBD per spec (product license + services attach, after T1)","problem_statements":["My requirements, tests and findings live in four separate tools and nothing joins them","I need a traceability package an auditor can verify independently","I need to know which requirements have no test and which findings have no ticket"],"source_refs":["eclipse-thread-mcp/bazaar-manifest.json","test-bench/results/eclipse-thread-mcp-2026-10-25.json"],"status":"in-development","tagline":"On-prem bridges for the legacy software-engineering toolchain, plus the Evidence Weaver that joins their records into one traceable thread. v0.1: simulator scope, honestly labeled.","tools":["ingest_fixture","graph_query","trace_gaps","evidence_build","evidence_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Declared-target registry: undeclared machines are invisible to every tool","Policy engine transposed from Agent Wallet: per-desk and fleet quotas with refusal arithmetic, image and network allowlists, TTL + purpose discipline","Mechanical snapshot-before-mutation precondition (stale snapshot receipt denies again)","Tier-3 destructive operations approval-gated; in observe-only v0.1 they deny even with a snapshot","Read-only probes over fixed command templates only — no free-form remote execution","Append-only hash-chained ledger in which refusals are receipts too"],"categories":["Infrastructure / VM Fleet Governance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/constellation.py.","not_tested":["SSH channel live execution — untested by design: no sshd runs on this host, v0.1 declares no ssh target, and the Eclipse Connect droplet migration is owner-gated per spec. Probes were exercised over the declared 'local' channel only.","All execution adapters (lifecycle, exec, console) — v0.1 is observe-only by design; no mutation code paths exist. Tier-3 evaluations cannot ALLOW in v0.1 (human approval channel not wired) — verified as designed in check K5."],"scorecard_ref":"test-bench/results/eclipse-constellation-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-constellation-mcp-2026-10-25.json"},"icon":"eclipse-constellation-mcp/icon-512.png","id":"eclipse-constellation-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-constellation-mcp.png","name":"Eclipse Constellation MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["My agents can reach VMs across clouds and hypervisors and I need one policy over all of them","Destructive fleet actions should require a fresh snapshot and human approval, mechanically enforced","The audit trail must include the refusals, not just the actions"],"source_refs":["eclipse-constellation-mcp/bazaar-manifest.json","test-bench/results/eclipse-constellation-mcp-2026-10-25.json"],"status":"in-development","tagline":"The governed, vendor-neutral VM fleet layer for agents: one policy, one receipt ledger, every cloud and hypervisor underneath.","tools":["target_list","policy_evaluate","probe_target","fleet_snapshot","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Per-database policy with table allowlists: unlisted tables are indistinguishable from nonexistent ones","Read-only by default; single-statement classifier blocks writes smuggled inside string literals","EXPLAIN cost gate refuses full scans before execution; indexed reads pass","Row caps on every read; PII columns masked (hash / partial / null) before results leave the tool","Writes only inside scoped, capped, expiring mandates: dry-run with before-image, then execute","Hash-chained receipts for every query — blocked ones carry the SQL hash only, never raw SQL"],"categories":["Data Infrastructure / Governed Database Access"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 2: 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run 1 FAILED card retained in results/ — both failures were bench-suite assertion bugs (schema key name; hash assertion over schema_read receipts, which take no SQL), fixed in the suite, no product code touched. Run by W-003 (Verity), suites/deepfield.py.","not_tested":["Postgres LIVE path NOT tested — no Postgres server binary, psql, or Python driver exists on this host; the bench verified only the fail-closed posture (all tools return ERROR verdicts). The adapter is implemented behind a driver interface and was tested by its own suite against a recording-fake transport only. Live verification is spec phase P1 and is NOT claimed.","MySQL/MariaDB, SQL Server, MongoDB, Redis, warehouse (Snowflake/BigQuery), and vector adapters — roadmap phases P1–P4, not built.","Automated rollback tool — v0.1 retains before-images under a rollback handle; restore is a documented operator procedure (P1)."],"scorecard_ref":"test-bench/results/eclipse-deepfield-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-deepfield-mcp-2026-10-25-2.json"},"icon":"eclipse-deepfield-mcp/icon-512.png","id":"eclipse-deepfield-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-deepfield-mcp.png","name":"Eclipse Deep Field MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I want an agent to query my database without ever seeing tables I did not allowlist","PII must be masked before query results reach the agent","Blocked queries belong on the audit record, not just the ones that ran"],"source_refs":["eclipse-deepfield-mcp/bazaar-manifest.json","test-bench/results/eclipse-deepfield-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The governed database layer for agents — every store in one look, under policy: read-only by default, writes only under mandate, every query receipted.","tools":["db_list","schema_read","query_read","query_explain","write_dryrun","write_execute","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Fail-closed DEX/UCS ingest: malformed files rejected whole, at the offending line","PCI law in code: a PAN-shaped string anywhere in an export rejects it, and the digits appear in no error, state or receipt","Per-selection inventory reads with staleness flags and full provenance","Sales summaries reconciled against hand-computed totals, cash vs cashless split","Days-to-empty stock-out forecasts (labeled heuristics from measured velocity)","Fault reads from DEX event records; unenrolled machines invisible"],"categories":["Unattended Retail / Vending Telemetry"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/pantry.py.","not_tested":["Live platform routes (Cantaloupe Seed / Nayax APIs or scheduled exports) — C0 ingests local DEX/UCS-style export files only; per-platform export formats are [verify] per the addendum and untested against real platform output.","Multi-read velocity on real fleets — forecast delta method is implemented and unit-tested with a synthetic second read; no real route history has been run."],"scorecard_ref":"test-bench/results/eclipse-pantry-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-pantry-mcp-2026-10-25.json"},"icon":"eclipse-pantry-mcp/icon-512.png","id":"eclipse-pantry-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-pantry-mcp.png","name":"Eclipse Pantry MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I run vending machines and learn about stock-outs from customers","Fleet sales totals must reconcile to the cent","Card data must never enter my telemetry pipeline"],"source_refs":["eclipse-pantry-mcp/bazaar-manifest.json","test-bench/results/eclipse-pantry-mcp-2026-10-25.json"],"status":"in-development","tagline":"The unattended-retail module — reads vending fleets' own telemetry and predicts stock-outs. It never touches card data.","tools":["dex_ingest","inventory_read","sales_summary","stockout_forecast","fault_read","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Normalized event discovery preserving section, row and seat semantics across feed shapes","Face value and every fee stay separate fields forever; watcher ceilings compare the all-in per-ticket price only","Price Watcher that may only tighten: ceiling down, sections narrower, expiry no later — loosening rejected by name","Expired watches cannot alert, however deep the price dips","Alerts and evaluations receipted into first-party price history with per-source provenance","No purchase, checkout or transfer tools exist in v0.1 (capability denylist enforced in code)"],"categories":["Live Events / Ticket Price Watch"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/marquee.py.","not_tested":["Live Ticketmaster Discovery or SeatGeek Platform calls — no API keys exist (owner Wave-2 item) and v0.1 contains no live marketplace code path; all discovery and prices come from shipped local stub fixtures.","F1 buy-under-mandate — not built in v0.1; no purchase, checkout, transfer, or resale tools exist.","F2 group logistics, chain-of-custody ticket receipts, and entry-day readiness — not built in v0.1.","Organizer/venue side — not built; partner-gated per spec."],"scorecard_ref":"test-bench/results/eclipse-marquee-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-marquee-mcp-2026-10-25.json"},"icon":"eclipse-marquee-mcp/icon-512.png","id":"eclipse-marquee-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-marquee-mcp.png","name":"Eclipse Marquee MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["Ticket face prices mislead — I need alerts on the all-in price including fees","A price watcher must not be quietly loosened after I set it","I want price history for events I follow, with sources attached"],"source_refs":["eclipse-marquee-mcp/bazaar-manifest.json","test-bench/results/eclipse-marquee-mcp-2026-10-25.json"],"status":"in-development","tagline":"The live-events agent: it finds the event, watches the price, buys only inside your mandate, and keeps the receipt for every ticket. It does not scalp, bypass, or bet.","tools":["event_search","listing_read","watch_create","watch_list","watch_evaluate","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["One canonical, versioned, hash-bound draft: any post-approval edit invalidates the approval by name","Syndication as per-platform drafts via sanctioned-API-shaped adapters (beehiiv, Ghost)","Read-only platforms (Substack) get a paste pack, never a write; the beehiiv adapter has no publish method","Unified analytics with per-source metric definitions: differing definitions flagged DEFINITIONS_DIFFER, never blended","Hash-chained receipts over drafts, approvals, syndications and analytics runs"],"categories":["Publishing / Newsletters"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/dispatch.py.","not_tested":["Live platform wiring: adapters run against fixtures and local stub HTTP servers shaped like the real APIs. beehiiv signup is an owner Wave-2 item; no Ghost instance runs here; Substack live reads (official MCP analytics) not exercised."],"scorecard_ref":"test-bench/results/eclipse-dispatch-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-dispatch-mcp-2026-10-25.json"},"icon":"eclipse-dispatch-mcp/icon-512.png","id":"eclipse-dispatch-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-dispatch-mcp.png","name":"Eclipse Dispatch MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I write once and re-post the same newsletter to every platform by hand","Platforms define the same metric differently and my reports blend them silently","Edits made after approval should void the approval automatically"],"source_refs":["eclipse-dispatch-mcp/bazaar-manifest.json","test-bench/results/eclipse-dispatch-mcp-2026-10-25.json"],"status":"in-development","tagline":"Drafts once, syndicates drafts everywhere sanctioned, unifies the analytics. Never publishes without approval; never scrapes.","tools":["draft_create","draft_preview","draft_approve","syndicate_drafts","analytics_report","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Canonical content object: versioned, SHA-256 hash-bound (masters, claims with sources, rights, accessibility, disclosures, destinations, schedule)","Per-adapter native variants with classified diffs; a rewrite that drops a canonical number is flagged substantive","Hash-bound approvals: any change to media, copy, links, order, disclosure, schedule or destination invalidates approval for that variant","Engagement policy as product law: house caps evaluated per action, action-block means stop","Mode registry per adapter capability with probe-failure downgrades (never workarounds)","Per-account and family kill switches; every check receipted"],"categories":["Social Publishing Governance / Shared Core"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/social_core.py.","not_tested":["Live adapter execution — the core performs no platform action by design; adapters (Aperture formalization, Zephyr reads) carry their own benches.","Unified analytics envelope (spec SS6) — specified, not built in S0 core v0.1."],"scorecard_ref":"test-bench/results/eclipse-social-core-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-social-core-mcp-2026-10-25.json"},"icon":"eclipse-social-core-mcp/icon-512.png","id":"eclipse-social-core-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-social-core-mcp.png","name":"Eclipse Social Core MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["The same post goes to many platforms and I cannot prove what was approved","Engagement limits should be enforced as policy, not remembered","An adaptation that quietly changes a number should be caught before posting"],"source_refs":["eclipse-social-core-mcp/bazaar-manifest.json","test-bench/results/eclipse-social-core-mcp-2026-10-25.json"],"status":"in-development","tagline":"One canonical, hash-bound package behind every Eclipse social adapter. It publishes nothing itself — it makes sure nothing unapproved moves.","tools":["account_set","account_inventory","content_ingest","content_get","adapt_preview","adaptation_diff","variant_revise","approval_pack","approve_variant","approval_check","policy_check","engagement_log","engagement_report","adapter_kill_switch","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Static capability declaration fixture (dated, [verify]-flagged, states live_calls_made: false)","Native variant builder: Feed 4:5, Carousel, Story and Reel variants from one approved package","Preview pack rendering the exact native preview an approval binds, hash-matched to the variant","Simulated probe failure downgrades modes and the downgrade flows into built variants","Formalization only: the sanctioned house connector is referenced, never duplicated — no token path, session or posting code exists"],"categories":["Social Adapter / Instagram"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 11/12 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/aperture.py.","not_tested":["Live Graph API behavior — v0.1 makes NO live calls by design; the capability record is a static declaration and every row is [verify] against a dated Meta record before external reliance.","Publish/container/insights tooling (ig_media_stage, ig_container_verify, ig_insights_read, ig_own_comment_queue) — roadmap only, not built."],"scorecard_ref":"test-bench/results/eclipse-aperture-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-aperture-mcp-2026-10-25.json"},"icon":"eclipse-aperture-mcp/icon-512.png","id":"eclipse-aperture-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-aperture-mcp.png","name":"Eclipse Aperture MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I need Instagram variants built from one approved package with every difference classified","I need to know exactly which native preview an approval binds"],"source_refs":["eclipse-aperture-mcp/bazaar-manifest.json","test-bench/results/eclipse-aperture-mcp-2026-10-25.json"],"status":"in-development","tagline":"The Instagram adapter, formalized: capability-declared, hash-bound native variants for Feed, Carousel, Story, and Reel. The descriptor travels with the mode.","tools":["capability_probe","variant_build","preview_pack","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Real public reads over the AT Protocol public API, no auth: profile, actor search, author feed, thread reads","Normalized output with per-item source endpoints","Every read receipted into a hash-chained ledger — failed reads receipted as errors","No write tools exist (surface asserted by test)","CERTIFIED(live-read): the catalog's first live scope, earned under independent bench drive"],"categories":["Social Adapter / Bluesky (AT Protocol)"],"certification":{"bench_verdict":"CERTIFIED(live-read)","certified":true,"certified_scope":"CERTIFIED(live-read) — Eclipse Bazaar Test Bench 2026-10-25, 12/13 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zephyr.py. Standing card is run 2 (-2.json); run 1 FAILED is retained in results/ — its Z5 failure was a defect in this bench probe (the tamper set a receipt field to its existing value, a no-op the verifier correctly accepted), fixed and disclosed here; no product defect.","not_tested":["Posting / record staging (bsky_record_stage, bsky_thread_verify, bsky_label_preflight) — not built; owner account is a Wave-2 gate.","COMMUNITY_API_PILOT — spec-eligible for Zephyr only after S2, a dated terms record, and separate owner enable; not built, not enabled."],"scorecard_ref":"test-bench/results/eclipse-zephyr-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-zephyr-mcp-2026-10-25-2.json"},"icon":"eclipse-zephyr-mcp/icon-512.png","id":"eclipse-zephyr-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-zephyr-mcp.png","name":"Eclipse Zephyr MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I need Bluesky reads inside the same governed workflow as my other channels","Failed lookups belong on the audit record too"],"source_refs":["eclipse-zephyr-mcp/bazaar-manifest.json","test-bench/results/eclipse-zephyr-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The Bluesky adapter: real public reads over the open AT Protocol, with review-first and house caps fully in force. No posting surface exists in v0.1.","tools":["profile_read","actor_search","author_feed_read","post_thread_read","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Device Registry: unenrolled devices are invisible to every tool, even when the hub can see them","Safety Policy ladder: Tier 0 sense, Tier 1 benign/reversible, Tier 2 consequential, Tier 3 safety-critical","Spec floors per capability class: overrides may only raise tiers; a config that lowers one is rejected at load","State-confirmed execution only: a command the device does not confirm earns no receipt, only an alert record","Tier 1 execution in v0.1; Tier 2/3 evaluate and deny by phase; kill switch freezes actuation while sensing stays live"],"categories":["Smart Environment / Physical-Actuation Governance"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/environment.py.","not_tested":["A real Home Assistant instance — v0.1's hub is a local HA-shaped stub (stdlib http, fixtures). The wrapper's client speaks the /api/states + /api/services shape, but parity with real HA behavior (auth, service payloads, state semantics) is [verify] and untested; connecting the owner's instance is a Wave-2 owner-gated step.","Tier 2 / Tier 3 EXECUTION — by phase design v0.1 evaluates both and denies by phase; the Tier 2 receipt + owner-notification wiring and any Tier 3 execution path are unbuilt, so there is nothing to test yet.","Vehicle rails (Smartcar, Tesla Fleet API) — designed in the Procure concept doc's Environment module; no adapter exists in v0.1.","Real-home scale and latency — fixture hub carries 7 entities; nothing about a real home's entity count, hub latency, or state churn has been measured."],"scorecard_ref":"test-bench/results/eclipse-environment-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-environment-mcp-2026-10-25.json"},"icon":"eclipse-environment-mcp/icon-512.png","id":"eclipse-environment-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-environment-mcp.png","name":"Eclipse Environment MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["My smart-home hub hands an agent every control by default — I need scoped authority","A lock or a heating appliance must never be one config edit away from an agent","Receipts should assert only effects the device itself confirmed"],"source_refs":["eclipse-environment-mcp/bazaar-manifest.json","test-bench/results/eclipse-environment-mcp-2026-10-25.json"],"status":"in-development","tagline":"The smart-environment module — scopes an agent's authority to actuate a home, tier by tier, and receipts only what the device itself confirms.","tools":["registry_list","state_snapshot","policy_evaluate","command_execute","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Nine-stage fail-closed pipeline: intent, identity check, quote, wallet-shaped policy authorization, sandbox payment authorization, simulated checkout, receipt ledger, order tracking","Hash-bound intents: the approval binds the exact quote the owner saw","Incomplete quotes (e.g. tax unknowable) can never be authorized at any stage","Abort-on-drift at the payment-authorization boundary: a changed final total aborts before any payment record exists","Single-use, hash-bound mandate tokens above the approval threshold; forged or replayed tokens rejected","Every persisted record carries a Data Rights Ledger provenance block"],"categories":["Agent Commerce / Procurement"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/procure.py.","not_tested":["Any real merchant, real payment rail, or real money: none exists in this build. The merchant adapter reads shipped fixtures, the payment rail is a sandbox stub authorizing TEST value only, checkout confirmation is simulated, and the file contains no network calls. Policy evaluation re-implements the Eclipse Agent Wallet's documented policy semantics locally by reference; live interoperation with the wallet MCP is untested (and the wallet's files are untouched)."],"scorecard_ref":"test-bench/results/eclipse-procure-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-procure-mcp-2026-10-25.json"},"icon":"eclipse-procure-mcp/icon-512.png","id":"eclipse-procure-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-procure-mcp.png","name":"Eclipse Procure MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1 simulator; hosted tier + per-order fee per concept doc (paid flagship of the agent-commerce line)","problem_statements":["I need an agent to buy things without inventing its own checkout rules","If the price changes at checkout, the order must die before money moves","Every procurement record should carry its provenance"],"source_refs":["eclipse-procure-mcp/bazaar-manifest.json","test-bench/results/eclipse-procure-mcp-2026-10-25.json"],"status":"in-development","tagline":"Intent to receipt in one fail-closed pipeline — policy before payment, abort on drift, proof for everything.","tools":["intent_create","quote_get","policy_check","order_execute","order_track","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Canonical Task Brief: versioned, SHA-256 hash-bound; exact street addresses refused (ZIP-tier only)","Quote normalization across lead, stated-budget, fixed-price and hourly models","Face price and itemized fees stay separate forever; a quote with UNEXPOSED fees cannot be hired under a ceiling","Hire gate under a live Procure / Agent Wallet mandate (cap, allowlists, threshold, expiry) plus the v1 owner person-confirm rule","Completion verification kept separate from platform state; a mismatch opens an exception, never an edit","Review drafts generated only from the verification record: no quality claims the record does not support, leverage language refused"],"categories":["Gig / Task Marketplace Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/gig_core.py.","not_tested":["Live platform calls of any kind — G0 contains no live marketplace code path; briefs, quotes, mandates, and verifications are local records evaluated against shipped test data.","Adapter variant approval binding against a live adapter — the Compass fixture adapter is the first consumer; cross-product bench is a later run.","Photo EXIF stripping tooling itself — the core records the strip status per photo as supplied; the stripping tool is adapter/build scope [verify] per spec 5.1."],"scorecard_ref":"test-bench/results/eclipse-gig-core-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-gig-core-mcp-2026-10-25.json"},"icon":"eclipse-gig-core-mcp/icon-512.png","id":"eclipse-gig-core-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-gig-core-mcp.png","name":"Eclipse Gig Core MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["Every task marketplace quotes differently and exposes different fees","The hire itself should run inside a spending mandate","A review should say only what the completion record supports"],"source_refs":["eclipse-gig-core-mcp/bazaar-manifest.json","test-bench/results/eclipse-gig-core-mcp-2026-10-25.json"],"status":"in-development","tagline":"One approved Task Brief, every marketplace: hash-bound briefs, all-in quotes, and a hire that runs only inside a mandate.","tools":["brief_create","brief_update","brief_approve","brief_read","quote_normalize","quote_read","hire_check","completion_verify","review_draft","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Explicit Thumbtack category mapping: an unknown category is a named error, never a silent nearest-match","Native request-form previews built from the approved Task Brief, with every difference classified (CATEGORY_MAP, BUDGET_FORM, FEE_FORM, LICENSE_FIELD, FORMAT_OMISSION, LOCATION_PRECISION)","Unanswered form fields surface as diffs — answers are never invented","Licensed categories block until the brief declares its license posture","Pro license claims surfaced verbatim with provenance, verified_by_compass: false","Quotes normalized through the Gig Core engine (one normalization law per family)"],"categories":["Gig / Task Marketplaces — Thumbtack Adapter"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/compass.py. Run 1 (eclipse-compass-mcp-2026-10-25.json, FAILED, retained per append-only history) failed on a defect in the bench suite itself, not the product: its U3 network-surface pattern substring-matched the fixture filename 'thumbtack_requests.json'; the pattern was corrected and run 2 is the standing card.","not_tested":["Live Thumbtack Partner Platform calls of any kind — no partner credentials exist (owner G1 step) and v0.1 contains no live code path; categories, pros, requests, and quotes are shipped fixtures shaped like Partner Platform responses.","Live request submission (REQUEST_API) and hire execution (HIRE_API) — not built in v0.1; Compass previews and reads fixtures only, and holds no independent hire power (the gig core hire gate evaluates mandates).","Marketplace-side messaging scope and the pro-side surface (leads, messages, webhooks) — later phases, messaging scope [verify] per spec chapter 10.","Trademark screen for the 'Compass' name — owed before any external launch per spec chapter 10 (N5 caution)."],"scorecard_ref":"test-bench/results/eclipse-compass-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-compass-mcp-2026-10-25-2.json"},"icon":"eclipse-compass-mcp/icon-512.png","id":"eclipse-compass-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-compass-mcp.png","name":"Eclipse Compass MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["I want a Thumbtack request built from my approved brief without re-typing it into their forms","Fields my brief does not answer should be flagged, not invented"],"source_refs":["eclipse-compass-mcp/bazaar-manifest.json","test-bench/results/eclipse-compass-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The Thumbtack adapter: one approved Task Brief becomes a native Thumbtack request, and a hire runs only inside a Procure mandate.","tools":["tt_capability_probe","tt_category_map","tt_form_preview","tt_pro_search","tt_request_lifecycle","tt_quotes_read","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Console Registry whose enrollment requires a dev-mode attestation flag: a retail-mode console is invisible even if its portal answers","Device Portal-shaped tooling: device info, app list, metadata-only install simulation, remote input, screenshot capture, power control","Remote input validated as a whole sequence against an allowlisted vocabulary before the first event is sent","Screenshot SHA-256 parity across tool result, stored file and receipt","Policy ladder: install and power are Tier 2; restart is Tier 3 behind a confirmation token","Forbidden capability names (profile, credential, retail-exploit class) refused by name; tools/list is exactly the 8 bridge tools"],"categories":["Developer Tools / Console Bridge (games)"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/stage.py.","not_tested":["A real Xbox in Developer Mode — v0.1's portal is a local Device Portal-shaped stub (stdlib http, fixtures) simulating one console. Parity with the real Xbox Device Portal (auth, exact payload shapes, the /api/app/packagemanager package pipeline, behavior when the console is off) is [verify] and untested; connecting the owner's console is an owner-gated step.","Real package deployment — v0.1 installs are fixture-metadata records by design; the real binary upload/register/install path is unbuilt, and binary-shaped payloads are refused by name at the bridge and the stub.","Live frame capture — v0.1's screenshot is the stub's fixture PNG; no real console frame has been captured.","Steam Deck / PC handhelds and Apple TV / Android TV tracks — designed in the Procure concept doc's Stage module (fully open to developer-account paths); no adapter exists in v0.1."],"scorecard_ref":"test-bench/results/eclipse-stage-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-stage-mcp-2026-10-25.json"},"icon":"eclipse-stage-mcp/icon-512.png","id":"eclipse-stage-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-stage-mcp.png","name":"Eclipse Stage MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["I build games with an agent and need them deployed to my own Dev Mode console","Playtest input and screenshots should be scriptable, with receipts","Retail-mode consoles must be unreachable by the tooling"],"source_refs":["eclipse-stage-mcp/bazaar-manifest.json","test-bench/results/eclipse-stage-mcp-2026-10-25.json"],"status":"in-development","tagline":"The console bridge — deploy and playtest AI-built games on your own Dev Mode console, with receipts.","tools":["console_list","device_info","app_list","app_install_sim","remote_input","screenshot_get","power_control","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["FTMS codec (treadmill, indoor bike, rower, heart rate, control point) proven against hand-computed byte fixtures in both directions","Equipment Registry: unenrolled equipment invisible to every tool","Session state machine (idle, active, paused, ended); ending writes the workout record as a Data Rights Ledger exhaust record","Tiered session control: treadmill speed is Tier 3 behind a confirmation token, with per-command delta bounds and device/session ceilings","Dead-man rule enforced in the equipment layer: lapse the control heartbeat and the simulator stops the belt itself, receipted as a safety action","Tier floors validated at load: a config declaring speed below Tier 3 exits before serving"],"categories":["Fitness Equipment / FTMS Bridge & Session Safety"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zenith.py.","not_tested":["Real FTMS hardware of any model — none exists on this VM. The codec follows the published FTMS characteristic layouts, but per-model variance (optional-field population, flag discipline, control-point parameter acceptance, rower pace resolution) is [verify] against each machine's advertised characteristics at enrollment and is untested here; the registry's characteristics lists describe the SIMULATOR's advertised set.","Real Bluetooth transport (BLE pairing, notification cadence ~250 ms, link loss behavior) — the bridge-to-simulator link is a local Unix socket; the dead-man rule is proven on a simulated clock against the simulator's enforcement, not against a real belt, a real link, or real time.","Physiological ceiling behavior with a real athlete (HR-signal loss handling, injury/medical flags, Coach adaptation) — designed in the concept doc; the Coach engine and Health Fusion are unbuilt, so there is nothing to test yet.","Multi-user / commercial-gym identity — deferred by the concept doc; v0.1 is home-first, single-athlete fixtures."],"scorecard_ref":"test-bench/results/eclipse-zenith-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-zenith-mcp-2026-10-25.json"},"icon":"eclipse-zenith-mcp/icon-512.png","id":"eclipse-zenith-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-zenith-mcp.png","name":"Eclipse Zenith MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted tier TBD per spec","problem_statements":["An agent coaching workouts must not spin up a treadmill unchecked","If the controller goes silent mid-run, the belt must stop anyway","The training log should be the session receipts themselves"],"source_refs":["eclipse-zenith-mcp/bazaar-manifest.json","test-bench/results/eclipse-zenith-mcp-2026-10-25.json"],"status":"in-development","tagline":"The fitness module of Eclipse Procure — reads the machine, turns the dial under a safety ladder, and stops the belt when the controller goes silent.","tools":["registry_list","telemetry_read","session_start","session_control","session_end","workout_list","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Canonical Customer Graph: Person, Company, Deal, Ticket, Conversation, Activity — every field provenance-bearing, every record carrying a Data Rights Ledger block","Identity merges propose-only: evidence and conflicts surfaced; execution requires an owner-confirm token bound to the proposal hash; unmerge restores exactly from the receipt snapshot","Field-level masking at egress (Deep Field pattern): phone partial; email full on the owner surface, domain-only on analytic surfaces; government/payment/health fields nulled in v1","Reply drafting from record facts only, with citation lists; untraceable facts become MISSING_FACT markers","Herald Security Law #1 at ingest: instruction-shaped customer text is quarantined as data, never commands","Hash-chained, content-free receipt ledger for every governed action"],"categories":["CRM / Customer Service Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/muster.py. First run FAILED card retained in results/ (bench-suite self-defect: U7 subsequence order; fixed and re-run clean).","not_tested":["Live platform ingestion of any kind — C0 Muster is fed records by callers/fixtures; adapter-fed ingest is proven at C1 when Haven/Orbit connect live.","Cross-adapter identity proposals against real two-platform data — the propose/confirm/unmerge mechanics are proven on synthetic fixtures only.","Encrypted-at-rest graph store (house vault pattern) — C0 state is a local JSON file; the vault-backed store lands with the owner's production bucket (spec 5.6)."],"scorecard_ref":"test-bench/results/eclipse-muster-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-muster-mcp-2026-10-25-2.json"},"icon":"eclipse-muster-mcp/icon-512.png","id":"eclipse-muster-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-muster-mcp.png","name":"Eclipse Muster MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["My CRM and helpdesk disagree about who a customer is, and record merges are irreversible","Agents drafting support replies invent facts the record does not contain","Customer content copied into receipts and logs becomes an exposure"],"source_refs":["eclipse-muster-mcp/bazaar-manifest.json","test-bench/results/eclipse-muster-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The Customer Graph core: one register of the people an account serves, with provenance on every field and a receipt for every decision.","tools":["record_ingest","record_read","record_search","merge_propose","merge_execute","merge_unmerge","reply_draft","policy_show","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Governed Zendesk MCP (public REST API v2 shape) — the BUILD-side answer for the largest support installed base, which has no official MCP server","OAuth-first by construction: API-token auth is not implemented at all (Zendesk sunsets all API tokens 2027-04-30); presenting one is refused by name on all 10 tools","Public replies send only as a draft plus an approval token bound to the draft's exact content hash; status/assignee changes are likewise token-gated","Internal notes and public replies are never flattened into one visibility class","Deletes, platform merges, bulk updates, macro/trigger edits, and refund actions are prohibited in v1"],"categories":["Customer Service / Helpdesk"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (re-bench after H1 fix): 13/14 checks pass, 1 na (U1), 0 fail. H1 passes: presenting an api_token credential is refused with TOKEN_AUTH_NOT_IMPLEMENTED + the 2027-04-30 sunset date on all 10 tools — auth_status and receipt_list now call check_auth first and both schemas declare the auth property; the builder regression test (enumerating S.TOOLS) was independently replicated against a pre-fix copy, failing on exactly those 2 tools. Regression spot-checks H3 (visibility non-flattening), H4 (T2 cross-ticket/changeset replay), H5 (re-draft token kill) all pass unchanged. Run by W-003 (Verity), suites/haven.py. FAILED run-2 card (eclipse-haven-mcp-2026-10-25-2.json) retained in results/ per append-only history.","not_tested":["Any live Zendesk instance — C0 runs on synthetic fixtures shaped like REST API v2 responses; live connection is C1 against an owner-controlled instance (spec 12.5).","Real OAuth grant flows (authorization code / client credentials) — the auth SHAPE is implemented and token auth is refused by construction; live grants need the owner's registered OAuth app at C1.","Webhooks, incremental export, satisfaction-rating writes — not in the C0 surface.","Feeding canonical records into Eclipse Muster live — the mapping shapes align with spec 5.1/12.3; cross-product ingest is a C1 bench item."],"scorecard_ref":"test-bench/results/eclipse-haven-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-haven-mcp-2026-10-25-3.json"},"icon":"eclipse-haven-mcp/icon-512.png","id":"eclipse-haven-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-haven-mcp.png","name":"Eclipse Haven MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["Zendesk has no official MCP server, and its API-token auth dies on 2027-04-30","An agent with helpdesk write access can send public replies with no approval gate"],"source_refs":["eclipse-haven-mcp/bazaar-manifest.json","test-bench/results/eclipse-haven-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"The governed Zendesk server: OAuth-first, drafts until approved, and a receipt for every touch.","tools":["auth_status","ticket_search","ticket_get","user_get","org_get","ticket_create","ticket_update","reply_draft","reply_send","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Governing proxy (the Eclipse WRAP posture) in front of HubSpot's official MCP server: policy, approval gates, masking, and receipts around the vendor's tools","Pinned classification registry: unclassified vendor tools are invisible to clients; vendor T3 tools (delete, bulk) are classified but never surfaced in v1","Drift defense: if a vendor tool's tier rises under the wrap, the proxy halts it and emits a notice receipt until an owner clears the halt by name","T2 calls (ticket reply send, deal stage move) require approval tokens bound to the tool plus the exact arguments hash","HubSpot custom objects are a declared OBJECT_GAP on every inventory view — absent from the vendor tool set and never reached around"],"categories":["CRM / Customer Service Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: local stub vendor, no live credential). Run by W-003 (Verity), suites/orbit.py.","not_tested":["The real HubSpot MCP server (mcp.hubspot.com) — C0's vendor is a local stub shaped like its tool surface; the live wrap is C1 against an owner account (spec 11.5).","Real OAuth 2.1 + PKCE connector flow and per-portal scope lists — recorded at live connection, not in C0.","Free-tier tool parity of the vendor server — flagged [verify] in the spec for C1.","Custom objects — declared OBJECT_GAP (absent from the vendor tool set); not reachable through Orbit by design (spec 11.4).","Vendor drift against the REAL vendor inventory cadence — the drift rules are proven against stub fixtures (tier rise, added tool)."],"scorecard_ref":"test-bench/results/eclipse-orbit-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-orbit-mcp-2026-10-25.json"},"icon":"eclipse-orbit-mcp/icon-512.png","id":"eclipse-orbit-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-orbit-mcp.png","name":"Eclipse Orbit MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["HubSpot's official MCP acts as the signed-in user with no approval gate","A vendor can quietly ship a more powerful tool into my agent's hands"],"source_refs":["eclipse-orbit-mcp/bazaar-manifest.json","test-bench/results/eclipse-orbit-mcp-2026-10-25.json"],"status":"in-development","tagline":"The HubSpot wrap: the vendor's server, under policy — classified tools, approval gates, masking, and receipts.","tools":["vendor_tools","vendor_refresh","vendor_call","halt_clear","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Consent Registry: provenance-bound consent records — a record without provenance is void, refused at write time, and receipted as a violation","Revocation is one-way and effective at the next check on every adapter, because adapters hold no consent copies","DNC overlays and calling windows as versioned, provenance-bearing datasets; windows evaluate in the subject's timezone; an unknown timezone denies marketing contact","Number Registry: enrolled numbers only, each with A2P 10DLC / toll-free verification / STIR-SHAKEN / branded-ID registration state deciding sendability per channel and scope","Send gate: consent first, then an Agent Wallet-shaped mandate (cap, allowlists, threshold, expiry); a send receipt is writable only with a consent_record_id — an unconsented attempt produces a violation record and nothing else"],"categories":["Voice & Telephony Governance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19/20 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/voice_core.py.","not_tested":["Live registry service form — V0 adapters share the core state file through core_engine (fixture seam, stated in README); production transport is V1 scope.","Real DNC datasets and jurisdiction window contents — shipped fixtures are small provenance-bearing subsets; production contents ship only after the V1 counsel gate (spec 5.4/16).","Any carrier account, live number, call, or text — none exists in V0."],"scorecard_ref":"test-bench/results/eclipse-voice-core-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-voice-core-mcp-2026-10-25.json"},"icon":"eclipse-voice-core-mcp/icon-512.png","id":"eclipse-voice-core-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-voice-core-mcp.png","name":"Eclipse Voice Core MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["A revoked contact must become unreachable on every calling and texting tool at once","Outbound calls and texts need consent proof attached to the receipt, not a policy checkbox"],"source_refs":["eclipse-voice-core-mcp/bazaar-manifest.json","test-bench/results/eclipse-voice-core-mcp-2026-10-25.json"],"status":"in-development","tagline":"The Consent Registry and Number Registry every Eclipse telephony adapter obeys.","tools":["consent_check","consent_record_write","consent_revoke","consent_history","dnc_status","window_check","number_list","number_get","number_enroll","number_health_report","send_evaluate","activity_emit","kill_switch_set","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Governed Twilio adapter: raw carrier operations are never exposed — a classified subset only","V0 fixture form: Twilio-shaped log reads with numbers masked beyond last-4, simulated SMS sends, simulated human calls (a named human speaker is required; there is no AI voice in this adapter)","Every send is gated through Eclipse Voice Core at check time: consent first, then the Agent Wallet-shaped mandate, then Number Registry sendability; the receipt carries the consent_record_id and the mandate verdict","Recording-policy changes are Tier 3: a per-number confirm token is required every time","Denylisted by construction: no emergency-services configuration, no caller-ID mutation, no number release"],"categories":["Voice & Telephony Adapters"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/trunk.py. Run 1 FAILED card retained in results/ — bench-suite self-defect (T4 absolute receipt count vs cumulative suite ledger), fixed and re-run clean as run 2; no product defect.","not_tested":["Live Twilio account actions — the vendor's official MCP surfaces (docs discovery + Labs execution server) are the V1 wrap targets; V0 ships against Twilio-shaped fixtures + a local stub only, and the build-time probe of which vendor surface executes is a V1 step (spec 12).","Number provisioning and release — search only in V0; provisioning is T2 and release is T3 at V1 behind the owner account.","WhatsApp / RCS channel consent inheritance — spec 12 flags per-channel verification at build; no channel beyond voice/SMS is modeled in V0."],"scorecard_ref":"test-bench/results/eclipse-trunk-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-trunk-mcp-2026-10-25-2.json"},"icon":"eclipse-trunk-mcp/icon-512.png","id":"eclipse-trunk-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-trunk-mcp.png","name":"Eclipse Trunk MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["Twilio hands an agent 1,800+ raw endpoints; I need a governed subset with consent standing in front of every send"],"source_refs":["eclipse-trunk-mcp/bazaar-manifest.json","test-bench/results/eclipse-trunk-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The governed Twilio adapter: every call and text under consent + mandate.","tools":["logs_read","send_sms_sim","place_call_sim","number_search","registration_status","recording_policy_get","recording_policy_set","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["MCP facade over the Eclipse Connect relay: connect account, grant status, upload video, publish video, revoke grant — 5 tools over stdio","Agents act through a revocable agent key, never raw OAuth tokens; the relay holds the grant","Review-first enforced in the facade before any network call, and again at the relay: going public requires an explicit human approval flag","The facade passes relay state through verbatim; it invents no status of its own","Distinct bench surface from the relay: this facade is CERTIFIED(dogfood-facade); the relay (catalog: eclipse-connect) holds its own CERTIFIED(dogfood)"],"categories":["Publishing"],"certification":{"bench_verdict":"CERTIFIED(dogfood-facade)","certified":true,"certified_scope":"CERTIFIED(dogfood-facade) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: vault surrogate stubbed). Run by W-003 (Verity), suites/connectfacade.py. Facade only — the relay holds its own CERTIFIED(dogfood) card (eclipse-connect).","not_tested":["Live relay / YouTube calls — transport stubbed at server.send (the product's single network seam); no live call made or claimed","Vault surrogate credential attachment inside the real send() — stubbed out in this bench, not exercised"],"scorecard_ref":"test-bench/results/eclipse-connect-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-connect-mcp-2026-10-25.json"},"icon":"eclipse-connect-mcp/icon-512.png","id":"eclipse-connect-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-connect-mcp.png","name":"Eclipse Connect MCP","platforms":["MCP over stdio"],"pricing_model":"Free — v0.1.0 dogfood; hosted tier planned","problem_statements":["My agent needs to upload to YouTube but must never hold my Google OAuth grant","I need the MCP tool surface and the hosted relay benched as the separate things they are"],"source_refs":["eclipse-connect-mcp/bazaar-manifest.json","test-bench/results/eclipse-connect-mcp-2026-10-25.json"],"status":"dogfood","tagline":"The MCP face of the hosted OAuth bridge — agents upload to YouTube through a human-granted, revocable key, never raw OAuth.","tools":["connect_account","grant_status","upload_video","publish_video","revoke_grant"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["One owner-approved identity source generates a signed corporate Agent Card (Eclipse Herald machinery, consumed by import — never forked): capabilities program-general behind a publication lint, VOSB carried as verifiable references, SAM status stated exactly as 'renewal submitted, activation pending'","Counterparty vetting into risk tiers R0-R3: JWS verified against the domain's JWKS, domain anchoring, certification posture hash-matched to the presented card; typosquats get their own record + similarity flags and never touch the honest org's tier or disclosure history","Disclosure Engine renders facts per tier (T-public; T-vetted rate-card SHAPE with no numbers; T-NDA behind an owner-entered NDA record whose ID every render must cite; T-mandate) with a per-fact disclosure log and one identical no-oracle refusal shape","Engagements bind only by the three-key rule — owner approval record + Wallet-shaped mandate reference + Herald delegation reference; no tool on either surface signs, commits, or moves funds","All inbound content quarantined as data under Herald Security Law #1; signed, replay-protected, room-isolated envelopes; kill switches and an attention budget — no counterparty action can directly create owner work"],"categories":["Agent-to-Agent Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 17 pass, 1 na of 18 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/envoy.py. Runs 1-2 PARTIAL cards retained append-only (bench-suite defects); run 3 is the standing card.","not_tested":["Any live counterparty or hosted endpoint — E0 is fully offline against local fixtures (.example domains, fixture keys); E1 is owner-gated (hosting go, trademark screen, Herald root-key backup, cetech.ai flip).","Card fetch from a counterparty's real well-known URL — E0's harness presents the card + the domain's JWKS as local files; the verification checks are the production checks, the fetch is the fixture seam.","Herald gateway execution against real desk agents — E0 records Herald delegation REFERENCES for the three-key rule; live gateway delegation is Herald's own certified scope.","Real Wallet mandate issuance — E0 records operator-entered Wallet-shaped mandate references; Envoy never mints mandates.","Operator-channel authentication beyond process ownership (the standing U1 note) — E1 build decision with attributable-principal receipts required by spec 11.2.","T-NDA fact contents are labeled E0 fixture placeholders; real T-NDA facts are human-authored into the identity source at E1."],"scorecard_ref":"test-bench/results/eclipse-envoy-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-envoy-mcp-2026-10-25-3.json"},"icon":"eclipse-envoy-mcp/icon-512.png","id":"eclipse-envoy-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-envoy-mcp.png","name":"Eclipse Envoy MCP","platforms":["MCP over stdio (two capability records via ENVOY_SURFACE; hosted split at E1)"],"pricing_model":"Free local v0.1; hosted E1 pricing TBD per spec","problem_statements":["Other companies' agents are coming, and my company has no signed front door — no vetting, no disclosure tiers, no record of what we told them","I need to prove exactly what my company disclosed to a counterparty's agent, and when — without ever letting their agent bind us"],"source_refs":["eclipse-envoy-mcp/bazaar-manifest.json","test-bench/results/eclipse-envoy-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"The signed front door for agent-to-agent business: vetted in, tier-told, drafted — never bound without the owner.","tools":["identity_get","inquiry_open","capability_exchange","fact_request","scope_draft_open","scope_draft_revise","scope_draft_get","proposal_submit","proposal_status","room_send","room_history","attestation_submit","counterparty_register","counterparty_list","counterparty_get","disclosure_log_query","tier_set","nda_record_create","waiver_create","recognized_bench_add","engagement_inbox","proposal_pack_get","proposal_decide","engagement_attach_mandate","engagement_attach_delegation","binding_check","mandate_fact_add","room_get","engagement_closeout","kill_switch_counterparty","kill_switch_global","kill_switch_reinstate","identity_publish","identity_rotate_key","identity_retire_key","audit_review"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Signed, versioned Protocol Registry (Uniswap/Aave/Compound/Lido across Ethereum/Arbitrum/Base): audit status as dated data with provenance, risk tiers, admin posture; addresses are never scraped live into trust and never copied from transaction history","Position + Risk reads over a chain-transport seam: dual-source health and liquidation distance that render DIVERGENT instead of averaging when price sources disagree (bench-measured edge: 2.00% divergence still renders, 2.01% is DIVERGENT with headline fields null)","Flagship allowance_audit: ERC-20 + Permit2 grants ranked by value at risk; unlimited grants flagged structurally; spenders Registry-resolved or labeled UNRESOLVED","Address lookalike (poisoning) checks, depeg watch, and exposure by protocol/chain/risk tier","D0 is reads only — no execution, draft, or signer tool exists; key-shaped input is a refused class (KEY_MATERIAL_REFUSED, incident-receipted, never echoed or stored); every output passes a lint banning advice language, yield promises, and safety claims"],"categories":["DeFi Risk & Execution-Policy Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fathom.py. Run 1 PARTIAL card retained append-only (bench-suite defect); run 2 is the standing card. Non-failing bench observation: spender resolution in allowance_audit is chain-agnostic; chain-aware resolution recommended before D1 (queued as a bench note).","not_tested":["Live RPC reads — D0 ships ONLY the fixture transport behind the chain_adapter seam; no live chain was queried, and no live transport exists in this package. The seam + transport contract is the deliverable; a live transport must be implemented and benched before any read is called live.","Seed Registry facts (contract addresses, audit firms/dates) are marked [verify] per entry for the first human release review; the release signature attests this seed file, not a completed re-audit.","Execution, drafts, simulation, and signing (spec D1+) — no such code path exists in D0.","Non-EVM chains and perps/bridge/vault chapters (D3) — out of D0 scope."],"scorecard_ref":"test-bench/results/eclipse-fathom-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-fathom-mcp-2026-10-25-2.json"},"icon":"eclipse-fathom-mcp/icon-512.png","id":"eclipse-fathom-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-fathom-mcp.png","name":"Eclipse Fathom MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["My agent reads DeFi positions from one price source and calls it truth","Somewhere in my wallets there is an unlimited token approval I forgot about, pointed at a spender I cannot name","I copied a contract address out of my transaction history and it was not the protocol's"],"source_refs":["eclipse-fathom-mcp/bazaar-manifest.json","test-bench/results/eclipse-fathom-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"DeFi, measured honestly: signed protocol registry, dual-source risk reads, and an allowance audit that flags the unlimited grants.","tools":["registry_list","registry_get","registry_verify","position_read","health_read","depeg_watch","allowance_audit","address_check","exposure_read","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Versioned Regulation Library: provision records are never overwritten, resolution is as of a date, and proposed (NPRM) text never resolves as a current obligation; Federal-Register-style change events surface as data, not prose conclusions","Obligations Mapper (provision -> obligation -> control -> evidence); the CDD Rule duty (31 CFR 1010.230) and CTA BOI reporting (31 CFR 1010.380) are modeled as separate obligations the merge guard refuses to combine — and same-citation duplicates still merge","Deadline Engine that distinguishes rule clocks from guidance cadences: SAR 30d/60-max, CTR 15d, Reg E windows can BREACH; the ~90-day continuing-activity cadence can be overdue and can never render as a breach","Local sanctions screening against a synthetic SDN-shaped fixture list: MATCH_CANDIDATE / NO_MATCH with near-matches flagged, never silent; no auto-clear exists — dispositions are human acts, recorded verbatim with an officer reference required","Evidence Packager with a MANDATORY gap section: gap suppression is refused and receipted as a violation; redactions require reason + actor, are receipted, and stay visible marked REDACTED on both surfaces","Posture is product law: not a bank, not counsel, not a compliance department — the suite files nothing, determines nothing, and a banned-output lint quarantines any compliance-verdict language"],"categories":["Banking Regulation & Compliance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/codex.py. Run 1 FAILED retained (genuine product defect U5: clock_status on an unknown instance id returned a raw -32603; fixed class-wide via require_str_id plus a transport schema refusal, then re-benched clean). Run 2 FAILED retained (bench-suite assertion bound to the pre-fix refusal shape). Non-failing observation: a whitespace-only redaction reason is currently accepted (queued as a bench note).","not_tested":["Real provision corpus — R0 library carries public-domain-shaped FIXTURE records with real CFR citations; the live eCFR / Federal Register corpus and change-feed mechanics are R1 scope","Real OFAC SDN / Consolidated list data — R0 screens against a SYNTHETIC fixture list shaped like the SDN list; no real list was downloaded","A real institution — R0 runs against the synthetic Meridian Fictional Bank fixture only; first real use is the owner-gated R1 design partner, inside that institution's boundary, after counsel review (spec 22)","Deadline values flagged [verify] in the spec (OFAC reporting clocks, per-charter SAR variants, CTR extension mechanics) — carried as fixture values with the flag visible in the rule record"],"scorecard_ref":"test-bench/results/eclipse-codex-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-codex-mcp-2026-10-25-3.json"},"icon":"eclipse-codex-mcp/icon-512.png","id":"eclipse-codex-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-codex-mcp.png","name":"Eclipse Codex MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec (per-institution + per-chapter shape, numbers owner-gated)","problem_statements":["Exam evidence lives in five folders and nobody can prove which version of a rule applied on a given date","On our tracker a guidance cadence and a filing deadline look identical — only one of them can actually breach","A sanctions near-match was silently cleared and nobody can show me who decided, or what they wrote"],"source_refs":["eclipse-codex-mcp/bazaar-manifest.json","test-bench/results/eclipse-codex-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"Banking regulation as data: a citation-exact library, a deadline engine, sanctions screening, and exam-evidence packs.","tools":["library_search","library_provision","library_provision_add","library_changes","obligation_map","obligation_coverage","obligation_merge","clock_rules","deadline_compute","clock_open","clock_status","clock_escalations","clock_exceptions","screen_list_info","screen_lookup","screen_disposition_record","evidence_pack_build","evidence_pack_redact","evidence_pack_verify","receipt_list","receipt_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Limits engine with the industry's asymmetry built in: decreases apply immediately; increases wait out the stricter of the suite floor or the state's delay, then need a fresh confirmation or they lapse — no tool path exists that raises a limit, and a weakened policy file refuses to load","Self-exclusion absolute and honored identically from any source: wagering surfaces deny EXCLUDED with the resource block attached; bookkeeping survives (settled pre-exclusion bets stay recordable — bench-adjudicated boundary); no early-end path exists","Versioned jurisdiction matrix in which sportsbook, DFS-classic, and pick'em variants are distinct legal objects; staleness degrades verdicts to UNKNOWN-and-deny","Unified ledger of the user's own bet records with honest cash P&L: bonus-bet stake is never cash (unsettled bonus valued at zero, stake-not-returned stated); headline P&L independently recomputed on the bench; pattern flags computed on ledger data only","Fixture odds comparison ordered by price only, operator promotions stripped by construction; arb observations carry the books-limit-winning-accounts warning and execution_support: null","Not a sportsbook. No bets are placed here. No placement tool, no account connection, and no credential is accepted anywhere — records enter only from the user's own exports and entries"],"categories":["Betting Records & Responsible Gambling"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/ledger.py. Run 1 FAILED card retained (bench-suite probe-ordering defect; product behavior was correct); run 2 is the standing card. Verity adjudication A1 on the card: the settled-backfill exclusion boundary matches spec section 3.3 intent.","not_tested":["Any live odds feed — B0 odds are fixtures shaped like The Odds API v4 responses; no feed account exists and none was contacted (licensed signup is an owner step).","Live-user operation of any kind — the spec's counsel gate (D4) precedes any live-user launch; B0 runs on synthetic records only.","Real operator limit/exclusion sync — operator and state programs do not publish a consumer sync route; B0 honors user-declared + user-provided records identically (spec 3.3).","Jurisdiction matrix freshness against live sources — B0 rows are fixture data as of 2026-10-25 with a 30-day TTL that degrades verdicts to UNKNOWN; a sourced refresh pipeline is a live-phase item.","Placement (T2/T3) — no placement capability exists in v1 by design (spec 6); there is nothing to test because there is no such tool."],"scorecard_ref":"test-bench/results/eclipse-ledger-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-ledger-mcp-2026-10-25-2.json"},"icon":"eclipse-ledger-mcp/icon-512.png","id":"eclipse-ledger-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-ledger-mcp.png","name":"Eclipse Ledger MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec (user-paid; no operator affiliate revenue in v1, owner decision D2)","problem_statements":["My betting apps show 'profit' that counts free bets as cash","I set a limit to protect myself and the app let me raise it in the same session","I am self-excluded at one book and the others never got the memo"],"source_refs":["eclipse-ledger-mcp/bazaar-manifest.json","test-bench/results/eclipse-ledger-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Eclipse Ledger — betting records, price comparison, and responsible-gambling controls. Not a sportsbook. No bets are placed here.","tools":["profile_set","profile_get","limit_set","limit_confirm","limits_list","timeout_start","exclusion_start","exclusion_end","exclusion_status","jurisdiction_check","matrix_status","bet_record_add","records_list","deposit_record_add","pnl_summary","reality_snapshot","odds_compare","arb_observe","slip_prepare","advice_request","resources_get","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The Bazaar purchase MCP — a separate server from the discovery Bazaar MCP, whose certified no-purchasing surface is untouched and never extended","Quotes bind catalog hash + pricing version + terms hash and state the all-in total (price + rail fee + tax as stated); the refund policy renders inside the quote before payment and is hashed into both receipts; a SKU with no pricing record is unbuyable (PRICING_NOT_SET) and an unknowable tax component blocks the quote by name","Mandate gate in fixed order — authenticity, cap vs ALL-IN (a 25.00 item against a 25 cap refuses: fees make it 25.72), merchant/SKU allowlist, expiry/revocation, approval threshold — every refusal by name; cross-quote replay refused, same-quote retry idempotent","Over-threshold purchases park in AWAITING_BUYER_APPROVAL, releasable only by the same buyer identity; no nudge, countdown, or pressure verb exists on either surface","Herald-shape signed entitlements: buyer-bound (wrong presenter refused by name), offline-verifiable, revocable with a receipted reason; two-sided hash-chained receipts share one settlement reference","Non-delivery is a state machine: miss the delivery window and refund + entitlement revocation + cap restoration fire automatically on a plain status read — no seller override verb exists; related-party purchases settle flagged and are excluded from ranking inputs","B0 is sandbox test credits only (value_class: test on every artifact); no Stripe or x402 code exists in the build; real rails are B1, owner-gated","Ads Rail P1 (test mode) extension: a separate ads_server.py surface enforces a Herald-signed budget mandate at charge time — card binding, freeze state, snapshot ceilings derived from the signed mandate, and all-in headroom — with the decision and reservation durably recorded before the webhook responds; captures, reversals, and settlements reconcile into the same evidence chain. Stripe TEST MODE ONLY (local simulator in this environment); live-mode keys refuse startup in code. NOT PROVEN IN STRIPE."],"categories":["Marketplace Commerce"],"certification":{"ads_rail_extension":{"bench_verdict":"CERTIFIED(local/simulator)","certified":true,"scope":"Stripe test mode / local simulator only — NOT PROVEN IN STRIPE; no live keys, no real money, no ad-platform attachment.","score":"100/100","scorecard_ref":"test-bench/results/eclipse-till-mcp-2026-10-25-3.json"},"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/till.py. Run 1 PARTIAL card retained append-only (bench-suite defects); run 2 is the standing card; zero product defects. Benched against a bench-owned catalog and bench-minted buyer cards/mandates (the builder's fixtures were never used). Ads Rail P1 extension: CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 100/100 on the scoped D1–D4 re-bench (scorecard eclipse-till-mcp-2026-10-25-3.json; 31/31 re-bench checks pass; the original PARTIAL 76/100 frame is retained in the card's provenance note). The rail is Stripe TEST MODE ONLY, runs against the labeled local simulator in this environment, and is NOT PROVEN IN STRIPE: no Stripe test account was wired, W2 is not proven, and no card was attached to any ad platform.","not_tested":["Real payment rails — B0 settles on the sandbox test-credit ledger only; Stripe (card) and x402 rails are B1, owner-gated with a counsel note; no Stripe/x402 code exists in the B0 build (the Ads Rail P1 extension adds Stripe TEST MODE code only; see the extension note)","Live Bazaar catalog join — B0 ships a 7-SKU fixture subset modeled on bazaar-mcp/catalog.json; the discovery MCP is read as data only, never extended or written","Third-party sellers (B3) — certify-before-you-sell gates, seller vetting, 85/15 split computation, and seller payout/tax operator processes are spec'd, not built; B0-B2 are first-party only","Auth enforcement beyond the stdio process boundary (bench U1 class) — buyer identity is cryptographic (Herald-shaped cards + signed mandates), operator verbs require the fixture operator token; hosted transport auth is a B1 design item","Ads Rail in Stripe itself — NOT PROVEN IN STRIPE: no Stripe test account exists in this environment, so the rail's proof is against its labeled local simulator plus the code path that activates only with a Stripe test key; W2 (real Stripe sandbox behaviour) remains unproven and the live gate stays blocked.","Live Stripe Issuing, real-money funding, and ad-platform card attachment — not built or attempted; the test-mode fence refuses live-mode keys at startup."],"scorecard_ref":"test-bench/results/eclipse-till-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-till-mcp-2026-10-25-2.json"},"icon":"eclipse-till-mcp/icon-512.png","id":"eclipse-till-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-till-mcp.png","name":"Eclipse Till MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1 (B0 sandbox); marketplace take is a B3 design item (85/15 creator split requires owner confirmation, spec D3)","problem_statements":["My agent can find tools on the Bazaar but has no governed way to buy one — no quote, no mandate check, no receipt","A seller took payment and never delivered, and the refund depended on someone answering email","I need to prove exactly what my agent bought, at what all-in price, and under which refund terms"],"source_refs":["eclipse-till-mcp/bazaar-manifest.json","test-bench/results/eclipse-till-mcp-2026-10-25-2.json","test-bench/results/eclipse-till-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"Bazaar checkout for agents — quote, mandate, signed entitlement, delivery, receipt, refund.","tools":["catalog_price","quote_get","purchase_execute","buyer_approve","purchase_status","entitlement_list","entitlement_verify","delivery_status","refund_request","receipt_get","sku_pricing_set","sales_ledger_read","entitlement_revoke","dispute_pack_get","anomaly_queue_read"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Descriptor: market data + venue access layer — not an exchange. One canonical Instrument / Book / Quote / Order / Position / Resolution model across exchanges and prediction markets; venue adapters translate and never improvise","Resolution criteria stored verbatim and hash-pinned: a venue criteria edit is a CRITERIA_CHANGED event, and positions keep the criteria as of entry","Fee truth: quotes carry all-in buy/sell cost for a stated size from versioned, provenance-stamped fee schedules; a stale or missing schedule degrades all-in fields to FEE_UNVERIFIED rather than quoting a wrong number","Resolution lifecycle REPORTED -> VERIFIED only against the criteria's own named source; DISPUTED is first-class and blocks verification until cleared","The probability law enforced in code: no output ever carries a probability field — a runtime guard refuses probability-shaped keys in any carrier; outputs carry price + liquidity flag + depth + criteria reference; unmapped native statuses surface as UNMAPPED with the native string preserved","M0 is data only: no accounts, no keys, no order submission at any tier; order_draft is an unsubmitted record whose mandate pre-evaluation is honestly NOT_EVALUATED"],"categories":["Markets / Exchange & Prediction-Market Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/book.py. Non-failing bench observation: the probability-field guard runs post-commit (a poisoned instrument persists in state; every read of it fails closed) — pre-commit move queued for M1 hardening.","not_tested":["Live venue reads of any kind — M0 contains no network code path; adapters run against fixtures shaped like the real public API responses behind a transport seam. Live public-read verification is a later M0-exit step.","Order placement, account reads, and the Wallet mandate gate — M2/M1 scope, owner-gated (spec 18, decision D3). M0 order_draft records an unsubmitted DRAFT with mandate_pre_eval NOT_EVALUATED; no submission path exists.","Fee schedules as live data — shipped schedules are fixture-shaped records with provenance labels saying so; the live fetch + account-specific tier provenance lands with the adapters' live step.","Kalshi / Polymarket US / Kraken / Binance.US / Alpaca chapters — specced (suite spec 10-12), not built in M0."],"scorecard_ref":"test-bench/results/eclipse-book-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-book-mcp-2026-10-25.json"},"icon":"eclipse-book-mcp/icon-512.png","id":"eclipse-book-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-book-mcp.png","name":"Eclipse Book MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["Every venue shows me a different shape for the same market, and the fees are wherever they feel like hiding them","A market's resolution criteria changed after I took a position and nothing told me","A dashboard showed me a 'probability' the venue never published"],"source_refs":["eclipse-book-mcp/bazaar-manifest.json","test-bench/results/eclipse-book-mcp-2026-10-25.json"],"status":"in-development","tagline":"Market data + venue access layer — not an exchange: one book, one fee truth, one ledger of record.","tools":["instrument_ingest","instrument_get","instrument_search","book_ingest","quote_get","fee_schedule_register","fee_schedule_get","position_open","position_list","position_get","resolution_report","resolution_verify","resolution_get","order_draft","order_get","venue_status","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The Polymarket adapter of the Eclipse Markets suite (Wing B), in M0 data form: Gamma-shaped data normalizes into Eclipse Book canonical Instruments, with token/outcome mapping pinned from the venue's own arrays","Resolution criteria verbatim + hash-pinned: a criteria edit on re-sync fires CRITERIA_CHANGED and positions keep criteria as of entry; UMA-shaped resolutions enter the core lifecycle with DISPUTED first-class","Fee-truth quotes from the venue's dated fee schedule (stale schedule degrades to FEE_UNVERIFIED); liquidity flags are honest at the boundary; every output carries money_class: REAL","The US trading surface is ABSENT by design: no order, trade, account, or API-key tool exists, and geoblock-circumvention-shaped tool names are refused by name","The forecast is the venue's priced output, never Cyan Eclipse's prediction; no output carries a probability field"],"categories":["Markets / Prediction-Market Adapters"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/forecast.py.","not_tested":["Live Gamma / CLOB public reads — M0 runs against fixtures shaped like the real public API responses behind a transport seam (load_fixtures); the live public-read transport is a later verification step.","Polymarket US (QCX) data or trading — a separate CFTC-designated venue with its own chapter (spec 12.1), M2+ phase; Global and US data never blend in one Quote.","UMA oracle state beyond the fixture set — dispute windows/finalization tracked as fixture-shaped Resolution records in M0.","Any trading surface — absent by design (Grade X for US persons, spec 4.2/8.2); nothing to test because the capability does not exist."],"scorecard_ref":"test-bench/results/eclipse-forecast-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-forecast-mcp-2026-10-25.json"},"icon":"eclipse-forecast-mcp/icon-512.png","id":"eclipse-forecast-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-forecast-mcp.png","name":"Eclipse Forecast MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["I want Polymarket's prices with their resolution criteria and liquidity attached — not a screenshot of a number","US access to this venue is geoblocked, and I need the data without anyone reaching for a circumvention-shaped workaround"],"source_refs":["eclipse-forecast-mcp/bazaar-manifest.json","test-bench/results/eclipse-forecast-mcp-2026-10-25.json"],"status":"in-development","tagline":"The Polymarket adapter: the venue's prices, with their criteria and liquidity attached.","tools":["forecast_sync","market_list","market_get","book_get","quote_get","resolution_get","venue_status","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The Coinbase exchange adapter of the Eclipse Markets suite (Wing A), in M0 public-data form: products and level-2 books normalized through the Eclipse Book core — the same canonical builders Forecast uses, so cross-adapter parity is bench-proven","Coinbase ships official MCPs (account trading, wallet, CDP); Strike re-implements none of them — it is the public-data adapter only, and vendor account-MCP verb shapes are refused by name; account paths are an M1+ governed wrap behind vault credentials and the core placement gate","Native product statuses the core vocabulary does not map surface as UNMAPPED with the native string preserved, never coerced","Quotes carry all-in cost from the venue's dated fee schedule; a stale schedule degrades to FEE_UNVERIFIED while the price itself still serves","No account tools exist in this build"],"categories":["Markets / Exchange Adapters"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/strike.py. Run 1 PARTIAL card retained append-only (bench-suite parity assertion defect); run 2 is the standing card.","not_tested":["Live Coinbase public reads — M0 runs against fixtures shaped like the real public product/book responses behind a transport seam (load_fixtures); live public-read verification is a later step.","Account anything — Coinbase's official account MCP exists and Strike's account posture is a governed WRAP of it (spec 10.1), M1+ scope. No account tool exists in this build; the vendor's Wallet/CDP MCP surfaces are other suites' chapters and are out of scope here.","Account-specific fee tiers — M0 uses the public schedule shape, labeled as such; the account's own reported rates supersede at M1."],"scorecard_ref":"test-bench/results/eclipse-strike-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-strike-mcp-2026-10-25-2.json"},"icon":"eclipse-strike-mcp/icon-512.png","id":"eclipse-strike-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-strike-mcp.png","name":"Eclipse Strike MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; family pricing TBD per spec","problem_statements":["Coinbase's own MCPs want my account; I only want the public book, normalized like my other venues","A product status my system did not recognize got silently mapped to 'open'"],"source_refs":["eclipse-strike-mcp/bazaar-manifest.json","test-bench/results/eclipse-strike-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The Coinbase exchange adapter: spot products and books, normalized into the suite's one book.","tools":["product_list","product_get","book_get","quote_get","venue_status","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Cross-provider agent spend analytics: ingests cost records from provider-shaped sources (v0 fixture adapters for model-API usage logs, Agent Wallet ledger exports, Eclipse Till receipt exports) into one signed cost-record schema","Every record ECDSA-signed at ingest and hash-chained, carrying source, provenance, adapter version and methodology version; attestation exports verify offline with the public key only","Retry attribution is a first-class field: retry records cite parent_call_ref, so the orchestration/retry share of spend is computed from links, not estimated; orphan retries degrade honestly (parent_resolved=false), never dropped","Rollups by agent/provider/category/period with Decimal totals kept per-unit — USD and test credits never comingled; caller-injected units cannot enter a rollup; unmappable kinds render UNMAPPED with the native label preserved","Budget posture against owner-stated budgets is arithmetic only (80%/100% boundaries verified); a figure without a methodology_version is refused at render (spec L8)","Meter REPORTS and never blocks (cluster law L3): no block, freeze, pay, or policy verb exists in the package — enforcement is Tripwire's product, mandates are the Wallet's. v0 is local, fixture-transport only; live ingest is NOT built"],"categories":["Agent Spend Governance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/meter.py. Run 1 PARTIAL card retained append-only (bench-suite self-defect in the M11 hash assumption, disclosed on the card); run 2 is the standing card; zero product defects. N-CHECK passed: signed records verify offline with the exported pubkey only. Two non-failing observations on the card: the export verify_note omits signer_fingerprint from its signed-body description, and provenance raw_hash covers raw + an internal index (internally consistent, not recomputable from the stored raw alone).","not_tested":["Live provider ingest — NOT built. v0 ships the fixture transport only (named fixture batches + inline records through the same seam); each adapter's live form requires the operator's own credentials and a per-adapter go (spec §5.5). A live transport must be implemented and benched before any ingest is called live.","Dogfood wiring — the dispatcher/worker spend ingest (cluster law L10: CETech's own agent spend as the first real source) is a LATER step and is not wired in v0; no own-spend claim is made from this build.","Hosted / multi-tenant analytics — later phase, separate spec delta (spec §5.1).","Production signing-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision, Fathom D0 precedent.","Hosted/multi-tenant operation and auth beyond the stdio process boundary (bench U1 class)"],"scorecard_ref":"test-bench/results/eclipse-meter-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-meter-mcp-2026-10-25-2.json"},"icon":"eclipse-meter-mcp/icon-512.png","id":"eclipse-meter-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-meter-mcp.png","name":"Eclipse Meter MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["My agents spend across three providers and I can't tell what a task actually cost","Half my model bill is retries and loops — prove the retry share from records, not vibes","I need spend records a third party can verify offline, not a dashboard screenshot"],"source_refs":["eclipse-meter-mcp/bazaar-manifest.json","test-bench/results/eclipse-meter-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Cross-provider agent spend analytics — one ledger for tokens, tools, and payments.","tools":["meter_ingest","cost_record_list","spend_rollup","budget_posture","cost_attest_get","adapter_list","receipt_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The enforcement half of the Eclipse money layer (Meter reports; Tripwire blocks — cluster law L3): four deterministic detectors — spend velocity, loop/retry-storm signature, spawn count, cap-approach trajectory — over recorded Meter/Wallet-shaped event streams","Same stream + rule version replays to identical verdicts, actions, and evidence-pack hashes in separate processes (byte-identical, bench-proven)","Rules are versioned and append-only, default to alert-only; auto-freeze fires only on rules the owner explicitly armed","A freeze engages the sandbox Agent Wallet kill switch, then is verified by re-reading the Wallet: only a verified freeze records FROZEN_CONFIRMED; a lying backend yields FREEZE_UNCONFIRMED plus a critical owner page stating the agent is NOT confirmed stopped","Every action carries a complete hash-bound evidence pack (rule version + triggering events + measured values) and writes a hash-chained receipt; the agent read surface exposes tripwire_status only, thresholds stripped","v0 is sandbox-only: fixture streams, the sandbox Wallet, test USDC; live-rail freeze inherits the Wallet P3 gate wholesale"],"categories":["Agent Spend Governance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/tripwire.py. Run 2 FAILED (T10: a within-batch duplicate event_id was stored twice and double-counted by the velocity detector) and run 1 PARTIAL cards retained append-only; the defect is fixed, the class closed (single validator call site, verified by source reading), and run 3 is the standing card. Novelty (NV) proven: verified actuation distinguishes Tripwire from logging/observability tools. Two detector evasions (signature-split loops, paced spawn fan-out) are documented SPEC NOTEs, unchanged by design.","not_tested":["Live-rail freeze — v0 acts on the sandbox Agent Wallet only; freezing a live mandate inherits the Wallet P3 gate wholesale (spec 6.5)","Live event streams — v0 consumes recorded fixture streams shaped as Meter cost records and Wallet events; no live Meter ingest exists (Meter itself is fixture-form at v0)","External paging channels (SMS/push) — owner pages are notification records + receipts in v0; channel integrations are a later phase (spec 6.1)","Cluster 1 Lineage feed for spawn counts — v0 spawn detection runs over declared spawn events in-stream; the Lineage join lands when Lineage is built","Hosted/multi-tenant operation and auth beyond the stdio process boundary (bench U1 class)"],"scorecard_ref":"test-bench/results/eclipse-tripwire-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-tripwire-mcp-2026-10-25-3.json"},"icon":"eclipse-tripwire-mcp/icon-512.png","id":"eclipse-tripwire-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-tripwire-mcp.png","name":"Eclipse Tripwire MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; incident-response packaging is a commercial decision, not a v0 surface (spec 6.5)","problem_statements":["An agent looped overnight and burned real money before anyone noticed — I need a breaker, not a report","My spend monitor logs alerts but nothing ever actually stops the agent","If a freeze is claimed, I want wallet-side proof the agent is stopped — not the tool's word for it"],"source_refs":["eclipse-tripwire-mcp/bazaar-manifest.json","test-bench/results/eclipse-tripwire-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"Runaway enforcement — spawn, loop, and spend-velocity detection with automatic mandate freeze.","tools":["tripwire_wallet_bind","tripwire_rule_set","tripwire_arm","tripwire_disarm","tripwire_ingest","freeze_now","unfreeze","tripwire_events","tripwire_status"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Cross-registry lookalike, typosquat, and silent-endpoint-change watch for agent identities: imports registry snapshots (content-addressed; listings treated as untrusted data), diffs consecutive snapshots, and computes confusable-skeleton similarity against operator watchlists","The skeleton is case-aware (capital I confuses with l; lowercase i does not) and every similarity record carries its algorithm, both claim refs, and the exact confused characters, so anyone can recompute it","Findings issue ONLY in a closed state vocabulary (CONSISTENT / CHANGED / DIVERGED / UNREACHABLE / EXPIRED / REVOKED_BY_ISSUER / DISPUTED / UNRESOLVED), each backed by a complete reproducible evidence pack — an incomplete pack is refused by name (EVIDENCE_PACK_INCOMPLETE)","Findings are signed under a C1 findings key structurally distinct from the Herald root identity key; wrong-key and tampered-body verification fail","A subject's rebuttal is stored as subject-presented data and linked; the original finding stays byte-unchanged and a DISPUTED version supersedes it; accusation vocabulary is banned at render by the output lint","No enforcement capability at any tier: no delist, block, takedown, or report-to-registry verb exists (T3 is EMPTY) and the denylist is refused at the transport. v0 is snapshot-import only; live crawling is gated per registry (G-LIVE) and NOT built"],"categories":["Identity & Trust"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/umbra.py. Run 1 PARTIAL card retained append-only (bench-suite assertion defect, disclosed on the card; no product code touched); run 2 is the standing card; zero product defects. N-CHECK: NOVELTY_PROVEN — a closed-vocabulary witness: signed findings with reproducible evidence packs and rebuttal linkage, not diffs. Non-failing observation on the card: punycode-shaped domains are not IDNA-decoded by the skeleton engine; IDNA-decode is recommended before G-LIVE.","not_tested":["Live registry observation — v0 imports snapshots only; live crawling is G-LIVE per registry (spec 5.6) and is NOT built","Distribution of findings (T2 watch bulletins) — operator-mediated until G-REG + G-COUNSEL per spec chapter 7","Real registry snapshots — v0 benches against fixture registries shaped like real exports; no real registry was contacted","Findings-key rotation/revocation distribution via Eclipse Revoke — Revoke is a later C1 chapter; rotation is rehearsed at the key-file level only"],"scorecard_ref":"test-bench/results/eclipse-umbra-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-umbra-mcp-2026-10-25-2.json"},"icon":"eclipse-umbra-mcp/icon-512.png","id":"eclipse-umbra-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-umbra-mcp.png","name":"Eclipse Umbra MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; watch-bulletin + hosted monitoring pricing TBD per spec (owner-gated, G-REG/G-OWNER phases)","problem_statements":["Someone registered a lookalike of my agent's name on another registry and agents are hiring the copy","A counterparty silently changed its endpoint — I need the diff with both snapshot hashes, not a rumor","I need a witness that states findings as evidence I can recompute, never as accusations"],"source_refs":["eclipse-umbra-mcp/bazaar-manifest.json","test-bench/results/eclipse-umbra-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"The closed-vocabulary witness: cross-registry lookalike and endpoint-change watch, findings as signed evidence — never accusations.","tools":["snapshot_import","watchlist_set","diff_run","similarity_scan","finding_issue","finding_get","finding_list","finding_verify","rebuttal_file","receipt_list","receipt_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The working harness that produced every scorecard in the Eclipse fleet: per-product suites run over the wire against bench-owned fixtures — the builder's own fixtures are never used as bench evidence","Adversarial by design: homoglyph typosquats minted by the bench itself, lying backends, duplicate-event batches, schema fuzzing generated from declared tool schemas, no-oracle error comparisons","Verdicts are scoped and append-only: FAILED and PARTIAL cards are retained, never overwritten; bench-suite self-defects are disclosed on the card they affected","Runs in-house today against the whole Cyan Eclipse catalog; productization as a downloadable CLI + hosted run service is slate item T1 — the paid tier (a Verity-run certification carrying the Cyan Eclipse Certified seal) is an owner decision, not yet offered"],"categories":["Certification & Testing"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Standalone product certification — this is a real in-house artifact being productized (connectors/tools slate T-series); no Test Bench card exists for it as a standalone product yet, and none is claimed"],"scorecard_ref":null},"id":"eclipse-test-bench","listing_class":"tool","logo":"branding/logos/eclipse-test-bench.png","name":"Eclipse Test Bench","platforms":["CLI (local)","hosted run service (planned)"],"pricing_model":"planned — free self-run; paid Verity-run certification is an owner pricing decision (slate T1), not yet offered","problem_statements":["Directories list my server on my own say-so — I want a behavioral verdict with a public scorecard","My server passes my own tests; I need an adversary who profits from finding what I missed"],"source_refs":["test-bench/bench.py","test-bench/suites/","eclipse-bazaar-connectors-tools-slate-20261025.md (T1)"],"status":"in-development","tagline":"The certification harness behind every verdict on this shelf — productizing as a standalone tool for MCP server builders.","tool":{"artifact_type":"cli","grade":null,"output_artifact":"evidence-pack","runs_where":"local"},"tools":[],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["One source of truth (the scorecard ledger) checked against every surface that repeats a verdict: catalog entries, product manifests, README tables, storefront bench lines","Machine-safe fields sync automatically; prose stays human-owned and is verified, never rewritten","Runs at every Eclipse publish pass — passes 1–4 all closed at drift=0; the discipline is the product: a catalog that contradicts itself is a defect, not a typo","Productizing as slate item T4 (CLI + CI action); runs in-house today as bazaar-mcp/sync_verdicts.py"],"categories":["Certification & Testing"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Standalone product certification — this is a real in-house artifact being productized (connectors/tools slate T-series); no Test Bench card exists for it as a standalone product yet, and none is claimed"],"scorecard_ref":null},"id":"eclipse-stocktake","listing_class":"tool","logo":"branding/logos/eclipse-stocktake.png","name":"Eclipse Stocktake","platforms":["CLI (local)","CI action (planned)"],"pricing_model":"planned — one-time purchase + CI seat (slate T4); not yet offered","problem_statements":["My catalog says certified, my README says pending, my storefront says nothing — which is true?","Every surface repeats my product's status and they drift apart between releases"],"source_refs":["bazaar-mcp/sync_verdicts.py","eclipse-bazaar-connectors-tools-slate-20261025.md (T4)"],"status":"in-development","tagline":"Catalog / manifest / storefront consistency auditor — the drift checker that keeps this Bazaar at drift=0, productizing as a CLI + CI tool.","tool":{"artifact_type":"cli","grade":null,"output_artifact":"verified-shelf","runs_where":"local"},"tools":[],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["The pipeline that publishes thewhitereport.com and eclipsebazaar.com: builds deploy zips with normalized permissions (dirs 755 / files 644 — the GoDaddy 403 lesson, encoded) and real file mtimes (the PHP opcache staleness lesson, encoded)","Publishes to an R2 shelf with a signed manifest; the server-side cron pulls and verifies — shelf manifest listing is checked after every publish","Overwrite-only sync discipline: hand-maintained repo-only files are never deleted by a publish","Productizing as slate item T3; runs in production in-house today as deploy-pipeline/publish.py — the hosted tier is later"],"categories":["Publishing Infrastructure"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Standalone product certification — this is a real in-house artifact being productized (connectors/tools slate T-series); no Test Bench card exists for it as a standalone product yet, and none is claimed"],"scorecard_ref":null},"id":"eclipse-press","listing_class":"tool","logo":"branding/logos/eclipse-press.png","name":"Eclipse Press","platforms":["CLI pipeline (local)"],"pricing_model":"planned — one-time purchase; hosted tier later (slate T3); not yet offered","problem_statements":["My agent-built site deploys by hand and every deploy risks a permission or staleness surprise","I need a publish step that proves what landed, not one that hopes"],"source_refs":["deploy-pipeline/publish.py","eclipse-bazaar-connectors-tools-slate-20261025.md (T3)"],"status":"in-development","tagline":"Agent-native static-site publish pipeline — R2-shelf publishing with zip-permission and timestamp forensics baked in; runs both production sites today.","tool":{"artifact_type":"pipeline","grade":null,"output_artifact":"verified-shelf","runs_where":"local"},"tools":[],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Issue and verify signed A2A Agent Cards offline: the same cards.py / jwscore.py tooling the Eclipse Herald MCP runs in production shape","Offline verification with receipts — a card checks out (or doesn't) without calling home","Productizing as slate item T7; the tooling runs in-house today inside eclipse-herald-mcp — the Herald MCP server itself stays an MCP-class listing; this is its artifact-form toolkit"],"categories":["Agent-to-Agent Infrastructure"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Standalone product certification — this is a real in-house artifact being productized (connectors/tools slate T-series); no Test Bench card exists for it as a standalone product yet, and none is claimed"],"scorecard_ref":null},"id":"herald-card-kit","listing_class":"tool","logo":"branding/logos/herald-card-kit.png","name":"Herald Card Kit","platforms":["CLI (local)","library"],"pricing_model":"planned — free; paid support tier later (slate T7); not yet offered","problem_statements":["I'm building on A2A and hand-rolling JWS Agent Cards badly","I need to verify a counterparty's Agent Card offline, with a receipt"],"source_refs":["eclipse-herald-mcp/cards.py","eclipse-herald-mcp/jwscore.py","eclipse-bazaar-connectors-tools-slate-20261025.md (T7)"],"status":"in-development","tagline":"Agent Card issue/verify toolkit — the Herald JWS card tooling (cards.py, jwscore.py) productizing as a CLI + library for A2A builders.","tool":{"artifact_type":"cli","grade":null,"output_artifact":"signed-attestation","runs_where":"local"},"tools":[],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Tamper-evident flight recorder for agent actions: an append-only, hash-chained record store signed at ingest by a recorder-held key the recorded agent never touches","Credential shape is the security model: agents hold per-agent submission credentials (append-only, own name only); the owner credential reads, verifies and exports but cannot append — the recorded agent cannot read, grade, or rewrite its own record; auth is not an oracle (unknown id and wrong secret refuse byte-identically)","The recorder assigns sequence, timestamps, chain hashes and the evidence grade from proof state — E-SIGNED (live append), E-CHAINED (verified agent-side chain anchor), E-CLAIMED (imported assertion, rendered as a claim forever); a submitter-supplied grade is refused by name in every mode","Skipped submission sequences are receipted by the recorder itself as signed INGEST_GAP events; claims about never-submitted actions surface in coverage as claimed-not-submitted next to the gap, and a claim contradicting a live record flags a conflict naming both sequences — winner unpicked","Mandate refs are recorded as refs; a missing one renders NO_MANDATE_RECORDED, never an inference. There is no update, delete or redact verb at any tier, and export packs verify standalone offline","Cluster 3 law binds: evidence only — no insurability verdicts, no safety verdicts, no root-cause conclusions (banned output classes quarantined at render). v0.1 is a local single-store recorder; the hosted multi-tenant recorder is owner-gated (G-C3-1) and not built"],"categories":["Oversight & Forensics"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 22 pass / 0 fail / 0 na of 22 checks. Run by W-003 (Verity), suites/blackbox.py, against bench-provisioned credentials and bench agent streams. Run 2 FAILED (U5: bare int() coercion in record_read's seq/limit filters escaping as a raw -32603) and run 1 PARTIAL cards retained append-only; the fix (coerce_int_param guard) was verified on the wire at raw JSON-RPC level, including a 114-probe schema-enumerated type fuzz over every parameter of all five tools, and the guard is ruled APPROVED as the house reference implementation for the raw-coercion defect class; run 3 is the standing card. U1 is a genuine pass (a real credential layer exists). N-check stands: the recorded agent cannot read, grade, or rewrite its own record; the recorder receipts its own gaps. Tail-truncation claim verified exactly as stated (detectable only against a previously exported pack head — the product claims no more).","not_tested":["Hosted multi-tenant recorder and any CETech-hosted recording of customer data — owner gate G-C3-1 (spec §15); v0.1 is a local single-store recorder only.","OS-level isolation on a shared host — v0.1 isolates by recorder-held key + credential scoping + an append-only engine with no mutation code path; it does not claim an OS boundary the build does not create.","External chain anchoring (spec §6.3 v1 hardening) — not built; tail-truncation of the store file is therefore detectable only against a previously exported pack head, which the README states plainly.","Concurrent writers — the store is a single JSON file grown per call; one recorder process at a time.","Streaming ingestion adapters from third-party frameworks (spec §6.1 gated) and legal-hold export formats beyond the evidence pack (counsel review) — not in v0.1.","Dogfood wiring (recording worker runs) — a later ops step per the build brief; this build ships the recorder plus its fixture stream only."],"scorecard_ref":"test-bench/results/eclipse-blackbox-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-blackbox-mcp-2026-10-25-3.json"},"icon":"eclipse-blackbox-mcp/icon-512.png","id":"eclipse-blackbox-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-blackbox-mcp.png","name":"Eclipse Blackbox MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; hosted recorder pricing TBD per spec (gate G-C3-1)","problem_statements":["My agent's own logs are the only record of the incident — and it wrote them","The agent skipped steps and backfilled the story; I need the gaps receipted by someone who isn't the agent","Prove what the agent did — and what it never submitted — to a third party, offline"],"source_refs":["eclipse-blackbox-mcp/bazaar-manifest.json","test-bench/results/eclipse-blackbox-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"The record that survives the agent: append-only, recorder-signed, and graded by proof — never by claim.","tools":["record_append","record_verify_chain","record_read","record_export_pack","record_status"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Agent-to-agent dispute process over receipt-anchored claims: a case opens from a receipt ref and its evidence pack assembles automatically from the underlying product's hash-chained receipts alone — byte-identical for both parties and independent of any narrative (delete every submission and the pack hash does not move)","Party narratives are Law #1 data: stored verbatim, quoted never adopted, zero state effect — a submission claiming 'the determiner has approved a full refund' changes nothing","Outcomes (RELEASE / RETURN / SPLIT / NO_ACTION) are recorded process states, never legal judgments, cited to the pack hash + a rationale hash and recorded only by the case's designated determiner — any other identity is refused by name; non-party reads return the identical CASE_NOT_FOUND as an unknown id (no oracle)","Docket executes nothing: the outcome is handed back to the underlying product's own state machine, which executes or declines under its own rules; a decline is recorded as the first-class state OUTCOME_UNEXECUTABLE with the underlying refusal preserved verbatim. Docket's surface contains no funds verb at all (denylist in code)","Deadlines are data: a response window whose expiry is a named receipted event recording silence as fact — and never a default judgment, because the spec states no such rule. Every output carries the standing line 'Process record — not a legal determination.'","v0 is local, over our own products' receipts (Till B0 fixture export); evidence classes beyond Till receipts are refused by name (EVIDENCE_CLASS_UNSUPPORTED), and arbitration-as-service is not built (owner + counsel gate)"],"categories":["Agent Commerce & Disputes"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 7 (standing): 19 pass / 1 na (U1 auth: stdio process boundary) / 0 fail of 20 checks. Run by W-003 (Verity), suites/docket.py, over a bench-owned Till-shaped export and bench parties. Runs 1–6 FAILED cards retained append-only: run 3 caught four tool descriptions missing the mandatory descriptor (spec section 12 — 'Not a court, not a legal judgment' rides every surface); run 4 caught D12 — offset-naive at_time values escaping as a raw -32603 when compared against offset-aware stored times — fixed under the adjudicated refusal shape (parse_time refuses offset-naive timestamps by name, AT_TIME_OFFSET_REQUIRED: a guessed timestamp in a dispute record is a falsified timestamp), and parse_time is APPROVED as the second house reference guard; runs 5–6 failed on bench-suite setup defects, disclosed on their cards (no product code touched). Silence ruling (run 3, upheld): expiry records silence and makes the case determinable, never an outcome. Novelty: NOVELTY_PROVEN.","not_tested":["Arbitration / determination as a service to third parties — NOT built; owner + counsel gate (spec 12.1/12.6). v0 determinations run over our own products' receipts only","Evidence classes beyond Till receipts (Escrow jobs, Wallet payments, Toll metering counts, TrueVolume attestations) — spec'd in section 12.1, not built; v0 refuses other classes by name (EVIDENCE_CLASS_UNSUPPORTED)","Live hand-back transport — the outcome hand-back in v0 executes against till_stub.py, a labeled fixture stand-in for Till's refund machine applying Till policy-as-code to its own mirror ledger; no live Till process is called","Auth enforcement beyond the stdio process boundary (bench U1 class) — party scoping is by Herald card hash presented per call; hosted transport auth is a later design item"],"scorecard_ref":"test-bench/results/eclipse-docket-mcp-2026-10-25-7.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-docket-mcp-2026-10-25-7.json"},"icon":"eclipse-docket-mcp/icon-512.png","id":"eclipse-docket-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-docket-mcp.png","name":"Eclipse Docket MCP","platforms":["MCP over stdio"],"pricing_model":"PRICED — $5.00/filing (PC-7) via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product. Free local v0.1 (own-products dispute machinery) remains free; the priced third-party filing rail is counsel-gated — intake orders are reviewed and confirmed by the operator before any payment link is sent.","problem_statements":["Two agents disagree about a purchase and each has its own version — I need a case built from the receipts, not the retellings","The other side went silent; I need the silence itself on the record — without it turning into a default judgment nobody made","A determination was recorded but the payment rail declined it — I need that decline preserved as a first-class outcome, not an error"],"source_refs":["eclipse-docket-mcp/bazaar-manifest.json","test-bench/results/eclipse-docket-mcp-2026-10-25-7.json"],"status":"in-development","tagline":"Agent-to-agent dispute process — structured claims, evidence packs, recorded determinations. Not a court, not a legal judgment.","tools":["dispute_file","evidence_pack_get","submission_add","determination_record","dispute_withdraw","dispute_status"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["One verification call for presented agent cards and payment mandates across formats, returning a signed finding in the closed vocabulary CONSISTENT / DIVERGED / EXPIRED / REVOKED_BY_ISSUER / UNRESOLVED","Every verdict enumerates the checks actually performed and carries provenance for the artifact hash, key source, and revocation-feed epoch; presented-only artifacts cap at UNRESOLVED","Mandate checks bind structure, signature, expiry, amount, scope, cart, and counterparty to the presented cart — a valid signature on the wrong cart still lands DIVERGED","Instruction-like content inside artifacts is quarantined as data (hash only, never echoed) and never instructs the verifier; findings supersede, never edit","Verification only: no approve_transaction, release_funds, trust_score, or mark_trusted surface exists. v0.1 is local over fixture issuers and a fixture revocation feed; live issuer discovery is not built"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/countermark.py. Run 2 is the standing card; run 1 is retained append-only. N-CHECK: NOVELTY_PROVEN — one neutral verification call across card and mandate formats returns a signed finding envelope enumerating the checks actually performed, with presented-only artifacts capped at UNRESOLVED.","not_tested":["Live issuer-key discovery — NOT built (G-LIVE per format, spec ch.13). v0 verifies over fixture issuers only; an unknown domain caps at UNRESOLVED with the ceiling stated in provenance.","Hosted per-call merchant API — NOT built (T2 + G-OWNER); pricing is Till/x402 territory, consumed not built.","Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600), distinct from any identity key (§5.7); custody is a gated decision."],"scorecard_ref":"test-bench/results/eclipse-countermark-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-countermark-mcp-2026-10-26-2.json"},"icon":"eclipse-countermark-mcp/icon-512.png","id":"eclipse-countermark-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-countermark-mcp.png","name":"Eclipse Countermark MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; hosted per-call merchant API pricing TBD per spec (owner-gated, G-OWNER phase)","problem_statements":["An agent card says verified, but I need the actual checks and provenance before relying on it","A payment mandate may be signed yet bound to a different cart, amount, or counterparty","I need a verification finding a merchant can rely on without upgrading a presented-only artifact"],"source_refs":["eclipse-countermark-mcp/bazaar-manifest.json","test-bench/results/eclipse-countermark-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"One verification call for third-party agent cards and payment mandates — a receipted verdict a merchant can rely on, across formats.","tools":["verify_card","verify_mandate","verify_revocation_status","verification_receipt"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Agent discovery and inventory of record from authorized sources only, with a per-source authorization record carried through the inventory","Receipt-chained discovery events {source, method, observed_at, observer}; the render path refuses any item that cannot cite its discovery event","Discovered-unregistered (shadow) agents are a reconciliation state, never an accusation; stale items render with last-seen instead of disappearing","Mandatory coverage in every export — sources authorized, available-but-unauthorized, and not yet adapted; suppressing the gap section refuses by name and is receipted","Source-native claims stay attributed per source and are never promoted to Census fields; reconciliation is propose-only until a named human accepts. v0.1 is local over fixture sources; tenant connectors are gated and not built"],"categories":["Compliance, Provenance & the Builder Economy"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/census.py. Run 2 is the standing card; run 1 FAILED card is retained append-only. N-CHECK: NOVELTY_PROVEN — the render path itself enforces discovery law: an item that cannot cite a receipted discovery event cannot render, and source claims stay attributed per source and are never promoted to Census fields.","not_tested":["Tenant connectors (Microsoft Entra Agent ID, Google, cloud agent services) — NOT built. Gate N1: each adapter requires the customer's admin authorization record per tenant plus owner approval. Those families render in every coverage section as available-but-unauthorized.","Endpoint / manifest collectors and any network discovery — held by spec §7.7 (later phase, own spec). Discovery of systems the customer does not administer is T3-permanent: no probe/scan/enumerate capability exists in this package and there is no network code in v0.","CETech fleet live dogfood export (§7.6/§15) — a CETech-fleet SEED FIXTURE ships as dogfood-shaped data; the standing live fleet inventory export as the first real Census artifact follows the dogfood loop after bench, and is not claimed from this build.","Hosted / multi-tenant operation and auth beyond the stdio process boundary."],"scorecard_ref":"test-bench/results/eclipse-census-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-census-mcp-2026-10-26-2.json"},"icon":"eclipse-census-mcp/icon-512.png","id":"eclipse-census-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-census-mcp.png","name":"Eclipse Census MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["I need an inventory of agents that only includes systems discovered from authorized sources","A vendor export gives every agent a risk score, but I need source claims kept separate from inventory truth","I need coverage gaps and stale agents shown instead of a false claim of completeness"],"source_refs":["eclipse-census-mcp/bazaar-manifest.json","test-bench/results/eclipse-census-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Agent discovery & inventory of record.","tools":["census_sources","census_discover","census_list","census_get","census_shadow","census_reconcile","census_export","census_diff","receipt_list","receipt_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Versioned, machine-consumable AI-obligation library (EU AI Act, Colorado AI Act, and Texas TRAIGA seed chapters) with as-of resolution and provider/deployer/importer/distributor roles","Maps provision → obligation → system → control → evidence artifact, with provenance on every link and no blending across regimes","Candidate classifications cite the exact fact-set hash, stale-flag when facts change, and keep the determination field permanently empty and customer-owned; incomplete facts never become a guessed tier","Deadline engine keeps legal rule clocks and guidance cadences distinct, with the computation shown — a past-due cadence never renders as a legal breach","Evidence packs carry a mandatory gap section and a hash-chained receipt. Evidence machinery only: no filing, submission, regulator-channel, or determination tool exists. v0.1 uses a synthetic fixture deployer only"],"categories":["Compliance, Provenance & the Builder Economy"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/crosswalk.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a versioned obligation library with as-of resolution and a role dimension produces fact-hash-bound candidates whose determination stays permanently empty and customer-owned, with mandatory evidence-pack gaps.","not_tested":["Live customer data (gate X1) — not built/run: counsel review of claims/output language + design-partner deployer required first (spec §6.8).","Remaining regime chapters (California, New York, Illinois) — later data chapters per §6.1."],"scorecard_ref":"test-bench/results/eclipse-crosswalk-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-crosswalk-mcp-2026-10-26-3.json"},"icon":"eclipse-crosswalk-mcp/icon-512.png","id":"eclipse-crosswalk-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-crosswalk-mcp.png","name":"Eclipse Crosswalk MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["I need to know which AI obligations bind each system by regime, role, and date","I need classifications tied to the exact facts, without a tool inventing a legal determination","I need an evidence pack that names unmapped obligations instead of hiding the gaps"],"source_refs":["eclipse-crosswalk-mcp/bazaar-manifest.json","test-bench/results/eclipse-crosswalk-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"Multi-regime AI-obligation mapping — which AI laws bind your systems, what evidence satisfies each.","tools":["library_search","library_provision","library_changes","obligation_map","classification_candidates","obligation_coverage","clock_rules","clock_open","clock_status","clock_exceptions","evidence_pack_build","evidence_pack_verify","receipt_list","receipt_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Adversarial simulation against a sandboxed twin of an agent — never the production agent — covering prompt injection, mandate escape, simulated wallet drain, card-confusion, and recorder-reach probes","Authorization is enforced as surface absence plus a signed record: no tool accepts a free-form URL, host, or endpoint, and an unregistered or expired authorization refuses before any probe is constructed","Outcomes are measured per scenario (resisted / escaped-at-step-N / not-applicable), never rendered as verdicts about a third party; reports are signed and verify offline with the public key only","Simulated funds stay simulated on a hash-chained ledger with value class marked on every entry; probe traffic itself is receipted","v0.1 is local, fixtures only, with three fixture twins and five fixture suites; live twins, hosted arenas, and external runs are not built"],"categories":["Trust & Receipts: Oversight, Forensics & Insurance Readiness"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 26 pass, 1 na of 27 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/redteam.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — probe construction is downstream of a signed, in-date authorization record plus arena or harness registration proof; with neither, no probe object is constructed at all.","not_tested":["External runs — none performed or built for. First external run requires counsel review of the authorization instrument (spec §9.6) and a named owner decision on services posture.","Live twins / hosted arenas — NOT built. v0.1 loads in-repo fixture twin config artifacts into the local harness; fixture transports only; no network egress exists in the package.","Continuous/recurring simulation subscriptions — gated post-v0.1 (spec §9.1).","Benchmark publication / cross-customer data use — absent by cluster law §2.6; no cross-customer data flow of any kind in v0.1.","Production signing-key custody — v0.1 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision.","Hosted/multi-tenant operation and auth beyond the stdio process boundary."],"scorecard_ref":"test-bench/results/eclipse-redteam-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-redteam-mcp-2026-10-26-3.json"},"icon":"eclipse-redteam-mcp/icon-512.png","id":"eclipse-redteam-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-redteam-mcp.png","name":"Eclipse Redteam MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"PRICED — $2.00/run (PC-8) via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product. Free local v0.1 (fixture twins) remains free; external runs are counsel-gated — intake orders are reviewed and confirmed by the operator before any payment link is sent.","problem_statements":["I need to attack-test an agent twin without ever pointing probes at production","I need proof a target was authorized before any adversarial probe is constructed","I need signed simulation outcomes tied to the exact target build and suite version"],"source_refs":["eclipse-redteam-mcp/bazaar-manifest.json","test-bench/results/eclipse-redteam-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"Adversarial simulation for AI agents — sandboxed twins only.","tools":["rt_register_target","rt_suites_list","rt_run_suite","rt_report"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Delegation-chain keeper for agent spawns: root mandate refs, chain links, spawn records, ancestry, subtree, and effective-mandate queries","Every proposed spawn is checked against a total componentwise attenuation order — six mandate components plus max_children, max_subtree, and spawn_rate budgets — and every amplification refuses by name","Subtree budgets are enforced at every ancestor, making chain-laundering by splitting spawns across children arithmetically impossible","Effective mandate is computed as the componentwise path minimum, never stored; presented chains must walk to an owner-signed root or land CHAIN_UNVERIFIED","Unchecked spawns are flagged UNCHECKED_SPAWN and reported, never hidden. Span issues no mandates, dispatches nothing, and has no override verb. v0 posture is check-and-record, not blocking enforcement in external frameworks"],"categories":["Delegation & Multi-Agent Governance"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/span.py. Run 5 is the standing card; runs 1–4 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a proposed spawn is checked against a total componentwise attenuation order walked to an owner-signed root, with subtree budgets enforced at every ancestor.","not_tested":["Blocking enforcement inside external frameworks — gated on framework hook availability per framework (spec §5.5); v0 claims check-and-record only, NOT a blocking gate.","Cross-organization chains — gated on Envoy counterparty vetting tiers; v0 verifies foreign chains as evidence only (T1 verdict on presented artifacts), never registers foreign roots as trusted.","Production signing-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision.","Hosted / multi-tenant operation and auth beyond the stdio process boundary."],"scorecard_ref":"test-bench/results/eclipse-span-mcp-2026-10-26-5.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-span-mcp-2026-10-26-5.json"},"icon":"eclipse-span-mcp/icon-512.png","id":"eclipse-span-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-span-mcp.png","name":"Eclipse Span MCP","platforms":["MCP over stdio (HTTP transport on roadmap)"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["My sub-agents can spawn more agents, and I need authority to shrink at every step","I need subtree-wide spawn budgets that cannot be evaded by splitting work across children","I need to verify a delegation chain back to an owner-signed root, not trust a framework config"],"source_refs":["eclipse-span-mcp/bazaar-manifest.json","test-bench/results/eclipse-span-mcp-2026-10-26-5.json"],"status":"in-development","tagline":"Delegation-chain governance: spawn limits, depth caps, mandate attenuation","tools":["root_register","root_revoke","budget_set","chain_view","node_effective_mandate","spawn_check","spawn_record","spawn_close","chain_verify","ancestry","subtree"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Spend enforcement pre-call: every campaign mutation passes a gate against a Herald-signed mandate (account × platform ceilings, geo/audience bounds, and flight windows) before any platform call; a refusal makes zero platform calls","Claims binding at the publish path: copy may publish only from a signed claims record, with paraphrase screening, special-category classification, implied-attribute screening, crypto permission classes, and political verification as versioned policy data","Advertiser-held evidence that survives the account: mutations and refusals seal into an append-only, hash-chained, signed ledger and export as an offline-verifiable appeal pack","A closed refusal vocabulary and no override tool at any tier — more spend requires a new signed mandate, never an exception path","P0 is Meta-first and local/simulator only: the transport is a simulator/test-double, no live spend exists, and no campaign activates for real"],"categories":["Marketing & Ads Governance"],"certification":{"bench_verdict":"CERTIFIED(local/simulator)","certified":true,"certified_scope":"CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 23/23 checks. Run by W-003 (Verity), suites/airtime.py. The original PARTIAL card (20/23; D1 MEDIUM + D2 HIGH) is retained append-only; the scoped re-bench card -2 closed both defects and is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — spend enforcement happens pre-call, ad copy is bound to a signed claims record at the publish path, and every mutation or refusal seals into an advertiser-held evidence ledger. Simulator/test-double only; no live transport, campaign, or spend was tested.","not_tested":["Live Meta transport — NOT built and out of P0 scope: simulator/test-double only; no live spend exists.","Standalone Claims Checker as a separate Bazaar Tool — P1 per spec §3.3; P0 ships the internal harness form (tools/claims_checker.py), exercised as part of the benched product surface.","Google/TikTok/X/LinkedIn/Reddit phases (P1/P3), hosted connector + CASA posture (P2), and Till billing composition (P2).","Production Herald custody for the signing key — P0 uses a local seed key (keys/, gitignored, chmod 600); production custody is a hard gate before any P2/live scope."],"scorecard_ref":"test-bench/results/eclipse-airtime-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-airtime-mcp-2026-10-25-2.json"},"icon":"eclipse-airtime-mcp/icon-512.png","id":"eclipse-airtime-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-airtime-mcp.png","name":"Eclipse Airtime MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; governed-seat + per-screen pricing TBD per spec section 13 (Evidence Verifier free/unmetered by design)","problem_statements":["An ad platform can execute a campaign change before anyone checks the signed spend mandate","Ad copy drifts into claims we cannot substantiate — or claims that were retracted","When an ad account closes, I need evidence and appeal history that survive the account"],"source_refs":["eclipse-airtime-mcp/bazaar-manifest.json","test-bench/results/eclipse-airtime-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Eclipse Airtime — mandate-bound ad operations.","tools":["mandate_issue","mandate_get","mandate_check","mandate_revoke","claims_record_upsert","claims_record_get","copy_screen","ad_account_list","campaign_list","campaign_get","insights_get","campaign_create_draft","campaign_update","campaign_set_status","audience_attach","ledger_get","appeal_pack_export"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Signed, agent-only friction findings backed by hash-chained trace packs that the board verifies before a finding surfaces — faking a filing means executing the calls","A closed 15-class vocabulary (Emic-12, CC0, plus house classes SCHEMA_LIE, SILENT_EMPTY, and AUTH_WALL) and structured claims only — a filing is a finding, never a free-text post","16 P0 tools across four disjoint surfaces (6 filer, 6 vendor, 1 gate, 3 operator); findings supersede, never edit, and no score, ranking, or leaderboard surface exists","A vendor lifecycle from acknowledgement and rebuttal to FIX_VERIFIED only after a clean replay; the board recomputes packs offline and never re-executes a vendor's production tools","Per-filing consent controls (PUBLIC | VENDOR_ONLY listing; AGGREGATE | NO_MINE mining) with cohort suppression below 5 identities / 3 operators; Friction Radar mines the board internally for product patterns"],"categories":["Agent Infrastructure","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 41 pass, 0 na of 41 checks. Run by W-003 (Verity), scoped re-bench of the D1–D7 fix round; the original PARTIAL card (34/41) is retained append-only and this -2 card is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — a friction filing surfaces only after the board recomputes its Herald-signed, hash-chained trace pack, so faking a filing requires actually executing the calls and holding the identity key; fixes surface only the same way (clean recompute plus a CLEAN bench replay receipt).","not_tested":["Hosted/public board (P1) — NOT built; P0 is local stdio only, scope local.","Live Herald service integration — P0 consumes Herald-shaped signed cards/JWKS presented per call and a local Revoke record list; no network calls exist.","Test Bench REPLAY execution — Friction consumes Bench replay receipts registered out-of-band in local state; the Bench harness itself is a separate product and the board never executes vendor tools."],"scorecard_ref":"test-bench/results/eclipse-friction-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-friction-mcp-2026-10-25-2.json"},"icon":"eclipse-friction-mcp/icon-512.png","id":"eclipse-friction-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-friction-mcp.png","name":"Eclipse Friction MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (filing is quota-only, no fee path in P0). Vendor findings feed — $499/mo per the approved price book — INTEREST ONLY: not yet sold, no checkout and no order path is open; feed publication is a separate owner decision.","problem_statements":["My agent hit a broken tool contract and I need to file evidence, not a social post","A vendor says the friction is fixed, and I need a clean replay before the finding closes","I need agent-infrastructure failures recorded in a closed vocabulary that vendors and builders can verify"],"source_refs":["eclipse-friction-spec-20261025.md","friction-board-slate-addition-20261025.md","test-bench/results/eclipse-friction-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Signed agent-only friction board — findings backed by verified trace packs, in a closed vocabulary.","tools":["friction_file","friction_import","friction_get","friction_list","friction_verify","friction_supersede","friction_subject_register","friction_feed_read","friction_acknowledge","friction_rebut","friction_fix_claim","friction_fix_submit","friction_gate_check","friction_radar_digest","friction_board_status","friction_receipt_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Governance CORE for agents in team chat (Slack / Teams / Discord) — not a bridge and not chat scraping: a signed, version-chained mandate (agent × channels × action classes × approval rules × caps × time window, bound to the agent's Herald card) is the whole authority","The agent surface holds no dispatch verb and no platform credential — the agent can only propose; Steward's gate holds the only dispatch path and re-checks mandate, kill state, disclosure state, quiet windows, caps, and platform grant at dispatch","Kill is checked at proposal, at approval, AND at dispatch: an approval earned before a kill does not dispatch after it; multi-part acts halt between parts and an in-flight part is evidenced as KILL_RACE_ACT, never hidden","Chat content never governs: an in-chat mandate amendment — even from the workspace owner — refuses MANDATE_AMENDMENT_FROM_CHAT_REFUSED and the mandate hash stays byte-identical; mandates change only as owner-signed chained versions on the operator surface","Disclosure is verified data (VERIFIED / DEGRADED / ABSENT / UNVERIFIABLE, named per platform): DEGRADED suspends auto-approvals, ABSENT closes outbound; every read, draft, approval, dispatch, refusal, kill, and disclosure event — including READ receipts with ids + content hashes — seals into a per-workspace Blackbox-form hash chain","Custody defaults to none (stores contain zero message-content strings, canary-scanned in tests) and surveillance is absent as architecture: no member-subject record type exists and the spec §7.3 T3 set is denylisted at the transport. It governs the agent — it never monitors the people"],"categories":["Agent Governance","Team Chat"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 27 pass, 1 na of 28 checks (U1 auth: stdio process boundary; surface disjointness scored as product checks in S8). Run by W-003 (Verity), suites/steward.py. Runs 1–3 FAILED retained append-only; run 4 is the standing card — S11 (approval content-hash re-verification at dispatch), S12 (draft-TTL re-check at dispatch), S19 (expiry bookkeeping kept out of the signed canonical form), S7, and S10 fixed and verified. N-CHECK: NOVELTY_PROVEN — the only-dispatch-path governance core: the agent surface holds no dispatch verb and no credential, the gate re-checks mandate/kill/disclosure/caps/grant at dispatch, disclosure is verified data that drives posture, and every read is receipted; 0 of 20 chat-API-shaped verbs exist on either surface. Local/simulator scope only.","not_tested":["Live platform adapters (Slack / Teams / Discord) — NOT built in v0.1; simulator route fixtures only, no credentials, no real messages sent","Herald JWS mandate signatures — v0.1 signs with a local HMAC operator key, the spec's local stand-in; production key custody is a gated phase","Hosted venue service — a separate, unbuilt phase gated on Eclipse Connect P2 decisions","Name: 'Eclipse Steward' is CONDITIONAL under brand system §3 — trademark/confusion screen pending before any public surface; fallback name Eclipse Usher"],"scorecard_ref":"test-bench/results/eclipse-steward-mcp-2026-10-26-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-steward-mcp-2026-10-26-4.json"},"icon":"eclipse-steward-mcp/icon-512.png","id":"eclipse-steward-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-steward-mcp.png","name":"Eclipse Steward MCP","name_status":"CONDITIONAL — brand system §3: trademark/confusion screen required before first public surface; fallback name: Eclipse Usher","open_owner_decisions":[{"decision":"Name: ratify Eclipse Steward (CONDITIONAL PASS, spec §3) or fall back to Eclipse Usher. Spec recommendation: Steward; run the screen during P1 while dogfood is internal.","default_taken":"Build + list internally as Eclipse Steward; trademark/confusion screen runs during P1 before any public surface; fall back to Eclipse Usher if the screen fails.","id":1,"status":"OPEN — defaulted per spec recommendation"},{"decision":"First live adapter: spec phases Discord first (own guild, cheapest consent), Slack first for customers. Recommendation: ratify — dogfood venue and market venue are different questions.","default_taken":"v0.1 builds fixture adapters for all three platforms; no live adapter built. P1 (first live) is Discord per the default; nothing live ships without the owner's stand-up go.","id":2,"status":"OPEN — defaulted per spec recommendation"},{"decision":"Default custody: 'none' at issuance (spec §5.5). Recommendation: hold — hashes-first is the brand.","default_taken":"Custody defaults to 'none' at issuance (hashes + metadata only); excerpt per-workspace by signed amendment; full only via its own signed enabling version.","id":3,"status":"OPEN — defaulted per spec recommendation"},{"decision":"Platform-interaction approvals (§8.3): recommendation OFF in v0/P1; enable per-workspace at P2+ once AP2's binding battery has a live-platform pass.","default_taken":"Platform-interaction approvals OFF by default (operator-surface approvals only). The §8.3 machinery is built and tested behind the mandate's approval_channels flag; a mandate must explicitly enable it.","id":4,"status":"OPEN — defaulted per spec recommendation"},{"decision":"DM posture: DM_OPEN default NEVER, ceiling REVIEW (§6.5). Recommendation: hold through P2.","default_taken":"DM_OPEN defaults NEVER in every posture; the mandate validator refuses any posture setting it to AUTO_UNDER_CAP (ceiling REVIEW enforced in code).","id":5,"status":"OPEN — defaulted per spec recommendation"},{"decision":"Whose agents may be governed: mechanism is runtime-agnostic. Recommendation: v0/P1 govern CETech's own agents only; opening to third-party builders' agents is a hosted-phase decision.","default_taken":"v0.1 governs CETech's own agents only (fixture agent card); the mechanism is runtime-agnostic but no third-party agent support is offered or documented.","id":6,"status":"OPEN — defaulted per spec recommendation"},{"decision":"Bazaar placement: list the core in the MCP class when certified; the hosted venue service, if it ships, lists separately. Recommendation: do not pre-list either.","default_taken":"Not listed. Manifest prepared in the product dir only; catalog.json untouched (Rook pass after certification).","id":7,"status":"OPEN — defaulted per spec recommendation"}],"platforms":["MCP over stdio — two disjoint surfaces selected by ECLIPSE_STEWARD_SURFACE (operator | agent); simulated route fixtures, no live platform"],"pricing_model":"Free local v0.1 (governance core + simulator fixtures); hosted venue service is a separate, unbuilt phase gated on Eclipse Connect P2 decisions","problem_statements":["An agent posting in our team chat needs a signed mandate, review-first approval, and a kill switch that binds at dispatch — not after the fact","I need proof of what the agent saw and did in chat — receipts for reads as well as acts","Nobody inside the chat — not even me — should be able to amend the agent's mandate or lift a kill from the chat itself"],"source_refs":["eclipse-steward-mcp/bazaar-manifest.json","test-bench/results/eclipse-steward-mcp-2026-10-26-4.json"],"status":"in-development","tagline":"Team-chat agent governance — the signed mandate, verified disclosure, review-first posting and receipts that govern an AI agent inside Slack, Teams and Discord. It governs the agent — it never monitors the people.","tools":["workspace_bind","mandate_issue","mandate_amend","mandate_status","draft_approve","draft_reject","gate_dispatch","kill_issue","kill_resume","disclosure_check","disclosure_restore","platform_interaction_simulate","chat_message_simulate","platform_fixture_set_presentation","platform_fixture_set_grant","receipt_list","receipt_verify","custody_export","read","draft_propose","act_status","draft_withdraw"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Export executes only against a Herald-signed approval pinning the canonical edit-decision fingerprint (integer-frame canonical JSON, RESOLVE_COV_V1), preset hash, principal and expiry — post-approval drift refuses TIMELINE_CHANGED_SINCE_APPROVAL with a localized DriftReport","Every adapter mutation is read-back-verified because the Resolve API fails silently; an unverified mutation refuses ADAPTER_MUTATION_UNVERIFIED and auto-files a Friction finding","Templates are hash-pinned signed artifacts filled by slots only; no code-exec tool exists on any surface (raw control refused by design)","Proof Print verifies renders against the approved record — caption text verbatim (fail-closed), duration, loudness, format — into a VerificationPack; Proof Trace fingerprints FCPXML (detective-only)","P0 dogfoods on The White Report reels under the pinned HOUSE_REEL_V1 template; 15 agent tools + 6 operator tools on a separate process"],"categories":["Media Production","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25 (bench clock UTC 2026-10-26; run 2 standing), 35 pass, 2 na of 37 checks. Run by W-003 (Verity). Run 1 FAILED card retained append-only: its sole failure (NC-2) was a bench-suite self-defect, fixed in the suite — no product code touched. Scope of certification: the governance core, Proof Print and Proof Trace benched against a declared SIMULATED Resolve-shaped adapter — P0 makes NO live-Resolve claim (no Resolve Studio seat exists on the build VM; the Studio license, spec LG-1/D3, is an owner purchase). N-CHECK: NOVELTY_PROVEN — export executes only against a Herald-signed approval pinning the canonical edit-decision fingerprint; incumbent-shaped fixture exports a drifted cut, and the vendor-verb census is 6/15 = 40% renamed (<80%).","not_tested":["Live DaVinci Resolve Studio adapter — not built; P0 adapter is simulated (spec LG-1/D3 Studio license is an owner purchase).","Frame.io connector (spec §10) — specced, built P2.","Proof Trace OTIO/AAF/EDL — P2; FCPXML only at P0.","Print OCR/ASR extraction — embedded text track at P0; low-confidence path fail-closed and benched via fixture.","Premiere UXP adapter — P1."],"scorecard_ref":"test-bench/results/eclipse-proof-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-proof-mcp-2026-10-26-2.json"},"id":"eclipse-proof-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-proof-mcp.png","name":"Eclipse Proof MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["My agent edited a video and I need proof the export is exactly the cut I approved","The editing API said success and silently did nothing — I need read-back verification, not trust","I need render evidence (captions verbatim, loudness, duration) sealed to the approval, not a log line"],"source_refs":["eclipse-proof-spec-20261025.md","video-editing-line-slate-addition-20261025.md","test-bench/results/eclipse-proof-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Governed video production — Herald-signed approval pins over exact edit states, hash-pinned templates, render evidence for every export.","tools":["project_open","project_attest","timeline_read","timeline_fingerprint","export_presets_list","template_list","media_import","clip_place","clip_trim","text_set","template_instantiate","marker_set","approval_request","export_execute","session_close","proof_print_verify","proof_trace_fingerprint","proof_trace_diff"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Policy-of-record drift checking across all of the owner's accounts — drift is named with both values (actual vs band), never a bare flag","Cross-account wash-sale watch including the IRA trap (IRC §1091 + Rev. Rul. 2008-5), caught pre-settlement — including silent scheduled-contribution triggers and spouse-supplied activity with provenance","Permanent in-house grant-keeper (owner-ratified D1) behind GrantKeeperPort: Schwab grants go AGING at day 5 and EXPIRED_FAIL_CLOSED at day 7 with guided re-auth; no dead-grant reads pass silently","401(k) permanently fenced to the participant's own reads, fees and drift; T3 classes (tax determinations, order submission) refused even inside a valid mandate, with byte-identical state after every refusal","The descriptor — 'Not a bank. Not an investment adviser. Charter checks your rules — it never writes them.' — rides every envelope, refusals included; fee math checked against policy ceilings"],"categories":["Personal Finance Governance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (standing): 24 pass, 0 fail of 24 checks. Independent Verity bench with own fixtures; runs 1–2 PARTIAL cards retained append-only — both failures were re-derived as bench-harness defects (2dp expectation; fuzz predicate), product code unchanged. Scope: local / P0 only — the adapter is a local Plaid-shaped fixture form and the dogfood run is fixture-form; NO live Plaid claim is made. Descriptor-bearing product: the descriptor was verified on 100% of envelopes including refusals over stdio (T15/T15b). N-CHECK: NOVELTY_PROVEN — 27.3% renamed vendor verbs; policy-of-record + cross-account wash-sale watch + grant-keeper is a mechanism no incumbent ships.","not_tested":["Live Plaid pull — P0 adapter is local Plaid-shaped fixture form; live connector run is a separate gate.","P1 grant-keeper GA (real Schwab OAuth choreography) — P0 bench uses the simulated Schwab clock fixture per spec §15.1.4.","P2 order submission — no live/paper broker rail at P0; mandate leg benched at engine level (prepare-check only, PREPARED never implies submittable).","Hosted/multi-tenant operation beyond the stdio boundary."],"scorecard_ref":"test-bench/results/eclipse-charter-mcp-2026-10-25-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-charter-mcp-2026-10-25-3.json"},"descriptor":"Not a bank. Not an investment adviser. Charter checks your rules — it never writes them.","icon":"eclipse-charter-mcp/icon-512.png","id":"eclipse-charter-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-charter-mcp.png","name":"Eclipse Charter MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; per-household subscription shape recorded in spec §14, not a v0 surface","problem_statements":["My allocation drifted across three brokerages and nobody watches the whole household","I almost triggered a wash sale between my taxable account and my IRA","My Schwab connection dies every 7 days and my tools fail silently instead of telling me"],"source_refs":["eclipse-charter-spec-20261025.md","tradfi-line-slate-addition-20261025.md","test-bench/results/eclipse-charter-mcp-2026-10-25-3.json"],"status":"in-development","tagline":"Your broker watches its own account. Charter watches your rules — across all of your accounts.","tools":["policy_upsert","policy_get","accounts_snapshot","positions_get","lots_get","activity_get","drift_check","wash_scan","fee_report","grant_status","document_ingest"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["A signed TitleRecord is the catalog of record per title — only SIGNED versions enforce; a tampered record refuses RECORD_UNSIGNED-class and never quietly applies","Royalties recomputed line-by-line from record terms with a per-line arithmetic trace and honest coverage — an estimate offered as ledger input refuses ESTIMATE_AS_TRUTH_REFUSED","A closed 8-class divergence vocabulary across every channel a book sells in; the Amazon price-match trap fires CRITICAL at check time, not after the royalty statement","Discovered editions are QUARANTINED, never auto-promoted; there is NO price-write verb on the surface — repricing attempts refuse REPRICE_FORBIDDEN","PIRATE_SOURCE_REFUSED: LibGen-class sources refuse by name in URL, metadata and check forms — this is the rights-holder-side line, and it never touches pirate infrastructure"],"categories":["Publishing","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local/simulator)","certified":true,"certified_scope":"CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass of 19 checks, synthetic fixtures only (5 build-fixture titles + 1 bench-own title; all 8 divergence classes exercised). Independent Verity bench with own fixtures; run 1 card retained append-only. Scope: local/simulator — NO live retailer, KDP or connector data (KDP has no author API; connector fetch is P1/D3-gated and absent; Watch is D4-gated and absent). N-CHECK: NOVELTY_PROVEN — a signed catalog of record whose royalties are recomputed line-by-line and whose pirate-source refusal is structural; benched against BookReport/ScribeCount-shaped dashboards, which keep no record and recompute nothing.","not_tested":["Live retailer / KDP data — KDP has no author API; P0 is synthetic fixtures only.","Connector fetch — P1/D3-gated, absent at P0.","Watch — D4-gated, absent at P0.","commerce_verify_offer against live commerce — P2 surface; simulator-proven at P0 only.","The owner's real book as dogfood — deferred by the owner; P0 fixtures are synthetic."],"scorecard_ref":"test-bench/results/eclipse-colophon-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-colophon-mcp-2026-10-25-2.json"},"id":"eclipse-colophon-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-colophon-mcp.png","name":"Eclipse Colophon MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0 local/simulator, synthetic fixtures only)","problem_statements":["My book sells in six stores and I can't prove which price, edition or royalty terms are the real ones","A retailer repriced my title and the price-match cost me money before I ever saw it","My royalty statement doesn't add up and I need the recompute, line by line"],"source_refs":["eclipse-colophon-spec-20261025.md","books-line-slate-addition-20261025.md","test-bench/results/eclipse-colophon-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Catalog of record for books: signed titles, rights, prices & royalties, checked everywhere they sell.","tools":["calibre_diff_record","calibre_ingest_library","divergence_get","divergence_list","divergence_resolve","drift_check_feed","drift_check_listing","drift_scan_catalog","edition_list","epub_check","onix_build","onix_diff","onix_validate","record_get","record_history_get","record_rights_cell","record_sign_version","record_upsert_edition","record_upsert_title","royalty_ingest_report","royalty_ledger_get","royalty_reconcile","royalty_run_get"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Physical task authority exists only inside a Herald-signed mandate pinning agent × robot serials × human-authored task-template hashes × workspace envelope × speed/force ceilings × occupancy class × time window","Enforcement sits at a site bridge that is the only routed path to the robot — the envelope is checked before motion, an expired mandate stops the task, and a human e-stop lands in the terminal HUMAN_OVERRIDE state","Every session — tasks, refusals, gaps, envelope exits, human overrides — is sealed into a Blackbox-form evidence pack verifiable offline (Tether Proof), with a static conformance checker (Tether Gauge) for mandates and templates before any robot moves","No T2 direct-motion surface exists in v0/v1; closed platforms (Tesla Optimus and peers) are published wait positions, never a logo wall; a mandate never substitutes for a site risk assessment","22 tools across agent, operator and verifier surfaces; the hostile-agent suite (H1–H16) passes in full against the simulator site"],"categories":["Robotics Governance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 31 pass of 31 checks. Run 1 PARTIAL (30/31) retained append-only: its sole failure was a bench-assertion defect in H10 (compared full error dicts incl. the caller-echoed tool name), not a product defect. Scope: SIMULATOR ONLY — P0 is ROS 2 + Gazebo + UR-class arm sim, in-process; NO hardware claim of any class is made. Liability counsel gates P1 real motion only. N-CHECK: NOVELTY_PROVEN — rename census 6/22 = 27% (<80%); the mandate-and-bridge mechanism exists in no incumbent (Boston Dynamics ships dispatch in Orbit; nobody ships the signed authority layer).","not_tested":["Real hardware of any class.","Real vendor SDKs (Spot / Unitree / UR-RTDE).","Real e-stop / lease hardware.","Isaac Sim.","Multi-robot sessions.","Hosted / multi-site operation.","T2 direct motion (refused by design, §3).","Closed platforms: Tesla Optimus, Figure, Apptronik, Atlas, NEO (no surface exists, §4.1).","Orbit dispatch (vendor's, not ours, §4.2)."],"scorecard_ref":"test-bench/results/eclipse-tether-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-tether-mcp-2026-10-25-2.json"},"id":"eclipse-tether-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-tether-mcp.png","name":"Eclipse Tether MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0 simulator); bridge license / certification pricing per spec §12 is an owner decision, not a v0 surface","problem_statements":["An agent needs to move a real robot and I need the authority bounded, signed and revocable — not a prompt","When something goes wrong on the floor I need a sealed evidence pack, not a vendor log","I run Spot or a UR arm and need governance + evidence across vendors, not another dispatch layer"],"source_refs":["eclipse-tether-spec-20261025.md","robotics-line-slate-addition-20261025.md","test-bench/results/eclipse-tether-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Governed robot task authority — signed mandates, bounded envelopes, evidence for every task.","tools":["fleet_discover","session_open","task_templates_list","task_dispatch","task_status","task_abort","telemetry_read","image_read","session_close","mandate_register","mandate_revoke","template_register","template_revoke","site_freeze_set","session_reattest","pack_verify","pack_render","pack_compare","gauge_check_mandate","gauge_check_template","gauge_check_pair","gauge_limits_list"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Physical bench authority exists only inside a Herald-signed mandate pinning agent identity × board identity × operation classes × exact artifact hashes, enforced at the bridge that holds the JTAG/serial/power connections — the sole routed path agent→target","One-byte rule: an artifact one byte off its Herald-pinned hash refuses ARTIFACT_PIN_MISMATCH, receipted into the evidence pack, board state untouched — no warning path, no override parameter, no load-anyway flag on any surface","Tiered authority: T0 read / T1 volatile write (pin-gated, board attested) / T2 power (every act receipted; dead-man rule — revocation freezes new operations, never cuts power inside an active write window) / T3 persistent write (owner-armed per board per session via admin CLI only, mandatory pre-write image capture, recorded recovery path)","Permanent refusals with no tool and no path around: security-fuse programming (PERMANENT_REFUSED_FUSE), PMIC/voltage configuration (PERMANENT_REFUSED_PMIC), boot-mode strap changes (BOOT_MODE_PHYSICAL — strap state is read-only)","Every session — loads, refusals, gaps, drops — seals into a Blackbox-form evidence pack verifiable offline; evidence class is cross-checked against a fresh adapter instance at open, connect, and seal, so a relabeled registry cannot launder an emulator session into a bench-class pack","22 tools on a closed surface, plus the family's standalone artifacts: Eclipse Proving Pin (offline artifact-vs-pin verifier) and Eclipse Proving Gate (boot-evidence assertion checker over sealed packs)"],"categories":["Certification & Testing","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 10 pass, 0 na of 10 checks — scoped re-bench of run 1's failing lines (B9 class integrity, B10 time expiry, B11 envelope hostility) plus the B12 D-4 limb, all re-probed PASS with bench-own fresh shapes; D-1 (evidence-class laundering via registry config), D-2 (lease/mandate time expiry never enforced), D-3 (envelope crashes), D-4 (struck live-transport env claim) all CLOSED. The original PARTIAL card (run 1: 10 pass / 1 partial / 3 fail — test-bench/results/eclipse-proving-mcp-2026-10-25.json) is retained append-only and this -2 card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulator) and nothing broader. The adapters are simulated-PS: fixture packs are evidence class fixture, qemu/renode packs are evidence class EMULATOR (content is a deterministic simulated PS inside the adapter). NO live transport was exercised at any point in either bench run — no QEMU process, XSDB/GDB/TCF session, or Renode monitor ran — and spec §12.4 exit checks X4/X5 are still owed before any transport-level interop claim. Non-gating observation carried on the standing card: a session whose lease time-expires seals no gap pack on expiry (contrast §11.3, which lists lease_expiry among gap-record causes); whether an expired session's evidence should also seal is an open spec question, flagged by the bench, not silently passed over. N-CHECK: NOVELTY_PROVEN (run 1, carried) — bench authority only inside a Herald-signed mandate binding agent × board × op-class × exact artifact hash, enforced at the bridge, every session incl. gaps/refusals sealed into an offline-verifiable pack; incumbents (fpga-mcp / VivadoMCP / probe-rs / labgrid) have no pin to mismatch and no pack.","not_tested":["Live transport of any kind — no QEMU process, XSDB/GDB/TCF session, or Renode monitor was exercised in either bench run; the qemu/renode adapters run deterministic simulated-PS session scripts in-adapter. Spec §12.4 exit checks X4/X5 (live XSDB vs AMD QEMU, Renode monitor/GDB) are still owed before any transport-level interop claim.","Physical bench hardware — HwServerAdapter is an ADAPTER_NOT_IN_PHASE stub; zero bench-class packs exist or can be produced at P0, correctly.","PL (FPGA fabric) behavior — not modeled by plain QEMU and not claimed; bitstream loads on emulator/fixture targets are recorded with that semantics note.","Production Herald key custody — P0 verifies against labeled deterministic TEST keys (spec §9) behind the production verify interface; production custody is a gated owner decision, not a P0 claim."],"scorecard_ref":"test-bench/results/eclipse-proving-mcp-2026-10-25-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-proving-mcp-2026-10-25-2.json"},"icon":"eclipse-proving-mcp/icon-512.png","id":"eclipse-proving-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-proving-mcp.png","name":"Eclipse Proving MCP","platforms":["MCP over stdio"],"pricing_model":"Free local P0; bridge license per bench host + per-board seats (owner figures, spec §14)","problem_statements":["My agent needs to load firmware and debug boards, and I need its authority bounded, signed, and revocable — not a shell on the bench host","When a bring-up session goes wrong I need a sealed evidence pack a third party can verify offline, not a vendor log","I need proof the artifact loaded was byte-identical to the one a human approved — and that a mismatch gets a refusal, not a warning"],"source_refs":["eclipse-proving-spec-20261025.md","embedded-bench-slate-addition-20261025.md","test-bench/results/eclipse-proving-mcp-2026-10-25-2.json"],"status":"in-development","tagline":"Governed bench access for agents — signed mandates, pinned artifacts, evidence for every session.","tools":["bench_discover","session_open","session_status","target_connect","target_attest","register_read","memory_read","console_read","artifact_load","memory_write","target_run","target_halt","power_set","target_reset","persistent_write","session_close","pin_verify","pin_show","pin_status","gate_run","pack_verify","gate_assertions_check"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["A compare verdict a third party can recompute: inputs, per-file SHA-256 hashes, tool version, bridge-generated script and comparison rules pinned and hash-chained in a signed evidence pack (Blackbox form) — verify_pack recomputes offline and names the first failing pin","Mandate custody: packs issue only for paths inside a Herald-signed mandate — granted roots canonicalised and enforced bridge-side; escapes refuse by name (PATH_OUTSIDE_MANDATE / PATH_TRAVERSAL_REFUSED / SYMLINK_ESCAPE_REFUSED) with zero adapter calls","Merge as a T3 verb only: ECDSA principal-signed, params-bound approval; pack recompute plus a live re-compare at dispatch refuses MERGE_BASE_DRIFTED before a single byte is written; partial failure seals an INCOMPLETE result pack","Denylist by enumeration: no script pass-through, no CLI-flag verbs, no sync/mirror/edit/interactive-merge verbs exist — forbidden names get the identical -32602 shape as gibberish, no oracle","The agent holds nothing: no license key, no filesystem reach, no vendor executable, no script file — only a revocable agent key bound to (agent_identity, bridge_id); revocation is terminal and re-checked at every dispatch, pack_fetch included","Vendor reports ride inside packs as hashed attachments only — never the verdict, never returned standalone as evidence"],"categories":["Agent Infrastructure","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(simulated)","certified":true,"certified_scope":"CERTIFIED(simulated) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench (fix round 1): 26 pass, 0 na of 26 checks — the first bench's two major defects (D-ENV: envelope type guard at both serving layers; D-REVOKE: pack_fetch re-checks grant state after revoke, byte-identical refusal, no oracle) fixed and re-probed PASS, regression spot-lines A1–A6 / B0–B8 / C1–C8 / G1 unbroken; the full bench script also ran end-to-end out-of-scope at 42/42. The original PARTIAL card (40 pass / 2 fail of 42 — test-bench/results/eclipse-connect-beyondcompare-mcp-2026-10-25.json) is retained append-only and this re-bench card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulated) and nothing broader. The adapter is a scripted stand-in throughout (the documented-CLI adapter is a stubbed interface only); evidence class SIMULATED; NO live Beyond Compare run was exercised at any point in either bench run — live BC exercise is OWED at P1 on the owner's license (vendor trial fallback) before any live claim. MECHANISM: Herald-signed recomputable compare-evidence packs over mandate-granted paths; merge = T3 ECDSA approval-bound with base-drift refusal. N-CHECK: NOVELTY_PROVEN — 0/6 renamed vendor verbs (fail line ≥80%), shim score 1/20 (ceiling ≤20%); the novelty is the mandate/custody + evidence layer, never the bridge. Not Scooter Software. Not endorsed by Scooter Software. The customer supplies their own Beyond Compare license.","not_tested":["Live Beyond Compare exercise — no licensed install was run in either bench; the adapter is a scripted stand-in throughout and the documented-CLI adapter is a stubbed interface only. The live bench is OWED at P1 on the owner's license (vendor trial fallback) before any live claim.","Hosted-relay / multi-seat form — P0 is a single-seat edge bridge on the license-holding machine; the hosted form is a P2 decision-gated shape, not built.","Production Herald key custody — P0 signs mandates and T3 approvals through the PinSigner port's local signer (identical grammar; artifacts record signer: local); production custody is a gated owner decision, not a P0 claim."],"scorecard_ref":"test-bench/results/eclipse-connect-beyondcompare-mcp-2026-10-25-rebench-fixround1.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-connect-beyondcompare-mcp-2026-10-25-rebench-fixround1.json"},"connector":{"facade_mcp_id":null,"grant_model":"signed-mandate","hosting":"edge-bridge","metering":"per-seat","upstream_service":"Beyond Compare (Scooter Software)","wall_type":"license-custody"},"icon":"eclipse-connect-beyondcompare-mcp/icon-512.png","id":"eclipse-connect-beyondcompare-mcp","listing_class":"connector","logo":"branding/logos/eclipse-connect-beyondcompare-mcp.png","name":"Eclipse Connect · Beyond Compare MCP","platforms":["MCP over stdio"],"pricing_model":"No figures set (spec D6) — shape only: per-seat bridge license (connector class); the tenant's own Beyond Compare license is theirs, never bundled or resold","problem_statements":["My agent needs file and folder comparisons I can defend later — a /qc exit code or an HTML report is an assertion by the machine that ran it, not evidence","I don't want my agent holding my Beyond Compare license, a shell, or arbitrary filesystem reach just to compare two trees","A merge an agent performs must be approved, bound to the exact plan, and refused automatically if the base moved since the compare"],"source_refs":["eclipse-connect-beyondcompare-spec-20261025.md","house-test-landscape-connectors-20261025.md","eclipse-connect-beyondcompare-mcp/bazaar-manifest.json","test-bench/results/eclipse-connect-beyondcompare-mcp-2026-10-25-rebench-fixround1.json"],"status":"in-development","tagline":"Mandate-bound compare/merge custody bridge for agents.","tools":["compare_paths","pack_fetch","verify_pack","propose_merge","execute_merge","mandate_check","revoke_grant"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Approval-and-evidence rail ONLY: agents prepare payroll runs and filing packets, humans approve the exact run — payroll_run_submit / filing_submit class tools are ABSENT from the surface by design (spec §10.2), in P0 and P1 alike","Independent canonical fingerprint of every run (employee set × amounts × deductions × accounts-as-HMAC-tokens) with a Herald-signed approval bound to that fingerprint — any post-approval drift refuses RUN_CHANGED_SINCE_APPROVAL with named diff classes","SSNs and bank numbers exist only as employer-scoped keyed-HMAC tokens (raw hashes banned); a deep identifier screen refuses separator-obfuscated SSNs/bank numbers on every channel — echo, persistence, and approval-signing","Bank-detail changes verify through the employee's own channel of record; every sensitive read seals an access record; evidence packs are portable and hash-chained per tenant","Every approval/filing packet carries the mandatory liability statement — approval does not transfer payroll-tax liability, the employer remains liable — and a packet missing it is invalid by construction"],"categories":["HR & Payroll Governance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-wageward-mcp-2026-10-25-5.json (scoped re-bench -5): 20 pass, 0 na of 20 checks. CEILING — read exactly: this certifies the approval-and-evidence rail at local scope over a SYNTHETIC workforce, and nothing broader. Wageward is an approval-and-evidence rail ONLY — it is not a system of record, has no payroll-calculation or tax engine, and the submit-class tools (payroll_run_submit / filing_submit) are ABSENT from the surface by design in P0/P1: the bench verified by live stdio that calling one returns unknown-tool. Every approval/filing packet carries the mandatory statement that approval does not transfer payroll-tax liability (the employer remains liable); a packet missing it is invalid by construction. The four prior FAILED cards are retained append-only and cited here: eclipse-wageward-mcp-2026-10-25.json (FAILED), -2.json (FAILED), -3.json (FAILED), -4.json (FAILED — D2-GEN2 HIGH, separator-run identifier evasion) — the -5 scoped re-bench closes D2-GEN2 on every channel (live-stdio echo 7/7 bench shapes, persistence 2/2, approval-signing 4/4, plus fresh no-cap probes 8/8) on top of everything closed in -2/-3/-4. OPEN SPEC ITEM (not a P0 claim): receipt-TTL is an open spec item to settle pre-P1. N-CHECK: NOVELTY_PROVEN (stands — the fused fingerprint + Herald-signed approval + drift-refusal mechanism is unchanged by the fix rounds; no CRUD verb added).","not_tested":["Live payroll/HR providers — P0 is an aggregator-shaped fixture adapter over synthetic data only; no live grant custody (P2), no real employer, employee, money, or filing","Any real payroll submission or filing — submit-class tools are ABSENT by design in P0/P1; the internal simulated rail is exercised by the builder suite only, never exposed","Production Herald/vault/KMS custody — P0 uses simulated per-tenant fixture keys","Receipt-TTL behavior — open spec item, to be settled pre-P1"],"scorecard_ref":"test-bench/results/eclipse-wageward-mcp-2026-10-25-5.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-wageward-mcp-2026-10-25-5.json"},"icon":"eclipse-wageward-mcp/icon-512.png","id":"eclipse-wageward-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-wageward-mcp.png","name":"Eclipse Wageward MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0); per-employer platform fee + per-employee-per-month governance fee is a commercial design item (spec §20), not set by this build","problem_statements":["My agent prepares payroll, and I need a human approving the exact run — fingerprint-bound — not a per-call confirmation click that approves whatever the run became later","I need SSNs and bank details to never exist as raw values or raw hashes anywhere in the agent's reach — tokens only, with obfuscated forms refused on sight","When an auditor asks who approved this run and what exactly it contained, I need a sealed evidence pack, not a chat log"],"source_refs":["eclipse-wageward-spec-20261025.md","hr-payroll-line-slate-addition-20261025.md","test-bench/results/eclipse-wageward-mcp-2026-10-25-5.json"],"status":"in-development","tagline":"Payroll approval-and-evidence rail for agents — approve the exact run, or it refuses.","tools":["workforce_roster_read","compensation_read","pay_history_read","payroll_run_prepare","payroll_run_diff","run_fingerprint_get","filing_packet_prepare","anomaly_scan","change_request_open","change_request_status","access_ledger_read","synthetic_workforce_generate","pin_verify","run_reconcile","change_check","access_pack_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Every lead carries a Herald-signed provenance record — CERTIFIED_CAPTURE / SELF_CAPTURED / VENDOR_ASSERTED / LEGACY_UNVERIFIED, never blended — and outreach executes only through a send-time Gate inside the contact tools: mandate × per-channel consent scope (voice consent is not text consent) × named-seller coverage × no open revocation × fresh DNC scrub at send × fair-housing guards","Consent and revocation rules are versioned DATA packs (PEWC + April 2025 revocation rules, 10-business-day honor), never code constants — missing or stale packs fail closed, and unknown vendor-posture values refuse by name at pack load, mandate create, and the Gate (state-tamper included)","Every send and every refusal seals into a Blackbox-form evidence pack addressed to the broker of record, verifiable offline via consent_record_verify","Copy Screen + Criteria Screen run a closed findings vocabulary and never silently rewrite; NO data/scraping layer exists — Covenant never holds or redistributes MLS data, scrapes portals, or resells/transfers/pools leads"],"categories":["Real Estate Consent & Compliance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local/simulator)","certified":true,"certified_scope":"CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-covenant-mcp-2026-10-25-4.json (scoped re-bench -4): 40 pass, 0 na of 40 checks (40/40 scoped lines: 37 independent harness lines + builder-suite line + surface line + workspace-integrity line). CEILING — read exactly: P0 is SYNTHETIC ONLY. No live outreach of any kind is certified or claimed; a counsel HARD GATE stands before any P1 live outreach, and it has not been lifted. Defect history, all retained append-only: base card eclipse-covenant-mcp-2026-10-25.json FAILED (28/35 — D1 CRITICAL revocation-wipe, D2 HIGH provenance downgrade); -2.json PARTIAL (44/45 — D1–D7 closed, D8 open); -3.json PARTIAL (27/29 — D8 closed on its shapes, D8b open at two entry points); -4.json closes D8b at all three entry points including the Gate state-tamper path (VENDOR_POSTURE_UNKNOWN, 0 sends, refusals sealed) with sweep-hardening verified fail-closed and no over-refusal; B5 posture exhaustion and rule-pack rigidity pass. BACKLOG: LOW notes from cards -2/-3 (B1 refusal sealing / stale pack at Gate only / clarification 5-minute window) remain open, LOW severity, recorded as not gating for P0 local/simulator certification. N-CHECK: NOVELTY_PROVEN (stands from bench 1; the D8b fix hardened the proven mechanism, changed no surface).","not_tested":["Live outreach of any kind — P0 is synthetic only; counsel HARD GATE stands before any P1 live outreach","Real DNC registry access, a real CRM (Follow Up Boss) connection, or real TrustedForm/Jornaya verification — all fixture-shaped at P0","The backlog LOW items from cards -2/-3 (B1 refusal sealing / stale pack at Gate only / clarification window) — not re-benched in the -4 scope; status stands as recorded there"],"scorecard_ref":"test-bench/results/eclipse-covenant-mcp-2026-10-25-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-covenant-mcp-2026-10-25-4.json"},"icon":null,"id":"eclipse-covenant-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-covenant-mcp.png","name":"Eclipse Covenant MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0 synthetic); per-seat team subscription + brokerage tier are P1/P3 design items (spec §10.4)","problem_statements":["My agents work real-estate leads, and I need consent enforced at send time — per channel, per seller, revocation-aware — not a policy document the agent is trusted to remember","When a lead says 'stop', I need that revocation to survive re-imports, duplicates, and tampered state — and proof addressed to my broker that it did","I need vendor-asserted leads held to a narrower posture than leads I captured myself, with the classes never blended in reporting"],"source_refs":["eclipse-covenant-spec-20261025.md","real-estate-line-slate-addition-20261025.md","test-bench/results/eclipse-covenant-mcp-2026-10-25-4.json"],"status":"in-development","tagline":"Consent-bound lead work for real-estate agents — provenance on every lead, a Gate on every send, a sealed pack for the broker.","tools":["lead_intake","consent_attach_certificate","consent_record_read","consent_history","revocation_record","lead_context_read","outreach_text","outreach_call_place","outreach_email","followup_sequence_plan","showing_schedule","copy_screen","criteria_screen","consent_record_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Jurisdiction-gated encounters: licensure × consent set × mandate verify AT ENCOUNTER TIME against the patient's per-encounter attested location — license re-verified per encounter, never cached; a location change between booking and start re-runs the full gate (JURISDICTION_MISMATCH / CONSENT_SET_INCOMPLETE); jurisdiction rules are versioned counsel-signed DATA packs, never code constants","Note-integrity pin: AI drafts live cryptographically OUTSIDE the record (UNSIGNED_DRAFT) until the treating clinician signs the exact canonical fingerprint; post-signature change is a new version + addendum, never a silent edit","PRODUCT LAW: no note_finalize-class tool exists on the surface — signature is the clinician's act, never an agent capability — and no prescribing surface exists in any phase","Minimum-necessary PHI reads: purpose-declared, mandate-scoped field-class projection enforced server-side; every read granted or refused seals a 164.312(b)-shaped hash-chained access record, practice-held and offline-verifiable; the Bridge refuses live PHI without an executed BAA + complete flow-down inventory (BAA_REQUIRED, no break-glass)"],"categories":["Healthcare Operations Governance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local, synthetic scope)","certified":true,"certified_scope":"CERTIFIED(local, synthetic scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-meridian-mcp-2026-10-26-2.json (re-bench 1): 22 pass, 0 na of 22 checks. CEILING — read exactly: SYNTHETIC ONLY. No live PHI, no real EHR connection, and no live claim of any kind is certified. NO SIGNING CAPABILITY EXISTS IN THIS PRODUCT: the surface is exactly the 19 specced Core tools with zero finalize-class tools; the re-bench probed 14 finalize/sign aliases via tools/call (all unknown-tool), ran a byte-for-byte import probe on a live draft (no clinician_sign attribute; the draft stays UNSIGNED_DRAFT), and swept every shipped file — no sign-capable path exists under any name, and the clinician-sign simulator exists only as bench equipment under tests/. The prior card eclipse-meridian-mcp-2026-10-26.json (FAILED — 23 pass / 6 fail) is retained unedited; defects B-MER-1..5 are all CLOSED in this re-bench (sign-path removal, refusal-naming ruling, per-practice hash-chain partition, refusal sealing, plus the observation item). P1 GATES — all still closed: HIPAA counsel review, an executed BAA, and a design partner are required before any live phase; the Bridge already refuses live PHI without a BAA (BAA_REQUIRED, no break-glass). No prescribing surface exists in any phase. N-CHECK: PASS, carried from the 2026-10-26 bench (not re-run; the fix round changed enforcement within the same fused mechanism — gate / pin / sealed reads — and removed the sign path outright).","not_tested":["Live PHI of any kind — P0 is synthetic-only by spec; no live claim exists until every P1 gate in spec §12.2 clears (HIPAA counsel + executed BAA + design partner)","Any real EHR/platform adapter — the P0 Bridge is the HAPI FHIR sandbox stand-in only; no vendor adapter is built","Clinician signing itself — by design: no signing capability exists in the product; the sign simulator is bench equipment in tests/ only, never a product surface (spec C3)"],"scorecard_ref":"test-bench/results/eclipse-meridian-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-meridian-mcp-2026-10-26-2.json"},"icon":null,"id":"eclipse-meridian-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-meridian-mcp.png","name":"Eclipse Meridian MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0 synthetic build); flat per-practice + per-clinician SaaS at live phases per spec §14 — never % of professional revenue (CPOM/fee-splitting law)","problem_statements":["My telehealth agents schedule across state lines, and I need licensure and consent verified at encounter time against where the patient actually is — not cached from intake","I need AI-drafted notes to stay cryptographically outside the record until the treating clinician signs the exact fingerprint — and no tool anywhere that lets an agent finalize one","When compliance asks who read which PHI fields and why, I need a sealed, hash-chained access record per read — granted or refused — that verifies offline"],"source_refs":["eclipse-meridian-spec-20261025.md","telehealth-line-slate-addition-20261025.md","test-bench/results/eclipse-meridian-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Governed telehealth operations — jurisdiction-gated encounters, signed-note integrity, PHI access evidence. Not a healthcare provider.","tools":["mandate_upsert","mandate_get","license_verify_at_encounter","consent_set_required","encounter_gate_check","encounter_schedule","encounter_start_gate","encounter_pack_get","intake_template_get","intake_status_get","note_draft_create","note_fingerprint_get","note_sign_request","note_signed_status_get","note_addendum_create","patient_context_get","appointment_get","access_pack_get","access_pack_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["A check-gate, not a registry: a processor agent presents a consent receipt id at action time and gets ALLOW/DENY + reason + record id synchronously — a revocation is effective at the very next check, for every processor, with no sync step and no consent copies held by processors","Provenance law: every grant names subject, grantor, grantee, purpose, data classes, capture method, capture evidence ref, captured_at and expiry — a record without provenance is void, refused at grant time and denied at check time","Separation of duties by name: the grantee can never write its own consent (CONSENT_SELF_ASSERTED); grants issue only from the subject or a recorded delegate; revocation is subject/delegate only","Append-only, hash-chained records; revocation is a new record that supersedes at check time, and consent_dependents returns the propagation map — exactly the processors who presented a receipt — with the revocation notices issued to them","Purposes, data classes, capture methods and revocation sources are versioned vocabularies shipped as data (vocabularies.json), not code; consent_bulk_import / consent_extend / consent_check_skip do not exist and refuse -32602 at the transport; family T3 is empty — no enforcement verb at any tier"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 23 pass, 1 na of 24 checks (U1 na), 0 fail — 23/23 scored checks, single bench, no fix round. CEILING — read exactly: CERTIFIED(local) over FIXTURE subjects only, and the fixture boundary is enforced by the product, not by convention: v0 refuses any non-fixture subject by name (SUBJECT_NOT_FIXTURE) and every subject in the package is synthetic. Real-subject personal-data processing is NOT built and is held at gate G-COUNSEL (spec §17); jurisdiction packs (state privacy / AI-law vocabulary variants) are NOT built (G-COUNSEL per pack) — the versioned-vocabulary mechanism they would ride on ships in v0 as data. Consumer-facing grant UX is NOT built (G-OWNER); v0 has no consumer surface at all, and no hosted or network form exists. Consent records consent; it does not manufacture it, and no output certifies any party.","not_tested":["Real-subject personal data — NOT built, held (G-COUNSEL, spec §17); v0 refuses any non-fixture subject by name (SUBJECT_NOT_FIXTURE)","Jurisdiction packs (state privacy / AI-law vocabulary variants) — NOT built (G-COUNSEL per pack)","Consumer-facing grant UX — NOT built (G-OWNER); v0 has no consumer surface at all","Hosted / live registry service form and any network transport — NOT built; v0 is a local stdio server over a local state file"],"scorecard_ref":"test-bench/results/eclipse-consent-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-consent-mcp-2026-10-25.json"},"icon":"eclipse-consent-mcp/icon-512.png","id":"eclipse-consent-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-consent-mcp.png","name":"Eclipse Consent MCP","platforms":["MCP over stdio — local v0.1 build over a local state file; no network transport"],"pricing_model":"Free local v0.1; hosted pricing TBD per spec (owner-gated phase)","problem_statements":["Agents process personal data on my behalf — I need consent I can revoke once and have it bind every processor at the very next action, not after a sync","A consent record without who captured it, how, and for what purpose is worthless when it is challenged — provenance cannot be reconstructed later","The agent holding the data must never be the one asserting the consent"],"source_refs":["eclipse-consent-mcp/bazaar-manifest.json","test-bench/results/eclipse-consent-mcp-2026-10-25.json"],"status":"in-development","tagline":"per-agent, per-purpose consent receipts for personal data — a grant an agent must present, and a revocation that propagates.","tools":["consent_grant","consent_check","consent_revoke","consent_history","consent_dependents"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Generation semantics: a behavior-relevant config change (model id, system-prompt hash, tool-surface hash, policy ref) MINTS a new generation identity as a new append-only record — a write aimed at an existing generation refuses GENERATION_IMMUTABLE by name","Per-root hash chains, signed: lineage_verify recomputes each root's chain and names the first broken link; system prompts and configs are recorded as hashes + owner-held refs only — there is no prompt_get","Provenance labels that never overclaim: self-emission is a subject-provided claim forever; parent+child signature corroboration is labeled corroborated — and in v0, presented corroboration strings are unverifiable by construction (no per-agent key registry), so they are labeled corroboration_unverified inside the signed record body; a spawn without a mandate ref is recorded UNMANDATED, visible, never hidden","Hash values are shape-validated everywhere they enter (SHA-256, 64 hex chars) — non-digest values refuse HASH_VALUE_INVALID with nothing stored","Self/consented emission only: framework emission adapters (G-LIVE per framework) and any external or hosted emission surface (G-OWNER) are held, not built; family T3 is empty — no rewrite, prune, delist or enforcement verb exists"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench): 10 pass, 0 na of 10 checks — L10/L14/L4, minors m1–m3 and spot regressions L1/L5/L8 re-probed PASS; all other lines stand as scored on run 2. Runs 1 and 2 FAILED and are retained append-only (test-bench/results/eclipse-lineage-mcp-2026-10-26.json, eclipse-lineage-mcp-2026-10-26-2.json); run 3 closed D1 (corroboration forgery), D2 (unvalidated hash values) and D3 (behavior_relevant laundering parameter) at the mechanism level, not the fixture level. CORROBORATION HONESTY — read exactly: in v0 there is no per-agent key registry, so presented corroboration strings are UNVERIFIABLE by construction; they are labeled corroboration_unverified in the signed, hash-chained record body (tamper-evident, proven at L10), and absence shapes stay claim_only. Self-emission is labeled a subject-provided claim forever; no surface upgrades a claim to a fact. CEILING: CERTIFIED(local), self/consented emission only — framework emission adapters are NOT built (G-LIVE per framework), external/hosted lineage is NOT built (G-OWNER); v0 signs with a local seed key (keys/, gitignored) and production findings-key custody is a gated decision.","not_tested":["Framework emission adapters — NOT built (G-LIVE per framework); v0 emission is self/consented only via the MCP tools","External emission / hosted lineage for enterprises — NOT built (G-OWNER); records stay on the operator's machine","Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision"],"scorecard_ref":"test-bench/results/eclipse-lineage-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-lineage-mcp-2026-10-26-3.json"},"icon":"eclipse-lineage-mcp/icon-512.png","id":"eclipse-lineage-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-lineage-mcp.png","name":"Eclipse Lineage MCP","platforms":["MCP over stdio — local v0.1 build; records stay on the operator's machine"],"pricing_model":"Free local v0.1; hosted lineage pricing TBD per spec (owner-gated, G-OWNER phase)","problem_statements":["When an agent misbehaves I need its spawn tree and exact config ancestry — which model, which prompt hash, which tool surface — not a changelog someone edited","Self-reported provenance is a claim, not a fact; the labeling has to say so instead of laundering claims into corroboration","A config change must mint a new generation identity — editing history in place destroys the audit"],"source_refs":["eclipse-lineage-mcp/bazaar-manifest.json","test-bench/results/eclipse-lineage-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"spawn trees, model/config lineage, and version ancestry for agents — who spawned whom, running what, changed when.","tools":["lineage_spawn","lineage_config_change","lineage_retire","lineage_tree","lineage_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Attestations issue ONLY against settled, receipt-backed work: the v0 admitted evidence class is Till settlement receipts — signed, hash-pinned artifacts a verifier can re-check offline; no receipt refuses EVIDENCE_MISSING, unsettled refuses EVIDENCE_NOT_SETTLED, forged/tampered or wrong-job/subject/counterparty receipts refuse by name","Wash and self-dealing excluded by construction (WASH_EXCLUDED): the Till ledger related-party computation plus the accountable-identity relation are checked before any record exists","Evidence diversity computed, never asserted: attest_list_subject groups by the registry's accountable_id (asserted fields are never read) with per-pair harmonic weighting — 10 attestations from one counterparty pair weigh ≈2.929, less than 3 from distinct pairs; a Sybil cluster cannot inflate reputation by self-assertion","Closed outcome vocabulary (DELIVERED_AS_SCOPED / DELIVERED_LATE / PARTIAL / NOT_DELIVERED / DISPUTED_OUTCOME); value is banded, never exact; no star ratings and no free-text reviews exist","attest_verify is a pure offline function of the artifact, the presented receipt and public keys — it reads no server state; issuance, revocation and dispute are T1 verbs under the verified-approval pattern (ECDSA mandate artifacts, params-bound); revocations and disputes are new signed records chained to the original — nothing is ever deleted or edited"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #2 (C12 diversity battery): 10 pass, 0 na of 10 checks. Bench history retained append-only: the first bench FAILED on D1 (test-bench/results/eclipse-attest-mcp-2026-10-25.json) and scoped re-bench #1 FAILED on D2 (eclipse-attest-mcp-rebench-c12-2026-10-25.json); re-bench #2 closed D2 — the diversity computation now resolves its grouping key registry-only (accountable_id from the identity registry; asserted fields are never read), verified against a bench-owned Sybil registry (r2-syb-a/b/c under one accountable id weigh as one). All other first-bench passing lines stand un-re-run. CEILING: CERTIFIED(local) for the v0 surface — the ONLY admitted evidence class is Till settlement receipts; new evidence classes are NOT admitted (G-OWNER per class; the Herald receipt-on-delivery class is named admissible in spec but NOT admitted in v0.1); public attestation feeds / leaderboards are NOT built (T2 + G-COUNSEL) and their tool names refuse -32602; cross-marketplace integrations NOT built (G-LIVE per platform). Genesis identities are CETech's own service agents as fixtures; v0 signs with a local test key (keys/, gitignored) — production findings-key custody is a gated decision. No star ratings exist and none are implied.","not_tested":["New evidence classes — NOT admitted in v0.1 (G-OWNER per class); any class other than till_settlement refuses EVIDENCE_CLASS_NOT_ADMITTED by name","Public attestation feeds / leaderboards — NOT built (T2 + G-COUNSEL); feed/leaderboard tool names refuse -32602","Cross-marketplace integrations — NOT built (G-LIVE per platform); attestations are self-contained signed artifacts","Herald receipt-on-delivery evidence class — named admissible in spec but NOT admitted in v0.1","Production findings-key custody — v0 signs with a local test key (keys/, gitignored, chmod 600); custody is a gated decision"],"scorecard_ref":"test-bench/results/eclipse-attest-mcp-rebench2-c12-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-attest-mcp-rebench2-c12-2026-10-25.json"},"icon":"eclipse-attest-mcp/icon-512.png","id":"eclipse-attest-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-attest-mcp.png","name":"Eclipse Attest MCP","platforms":["MCP over stdio — local v0.1 build; offline verification, no network egress"],"pricing_model":"Free local v0.1; public feed / hosted pricing TBD per spec (gated, G-COUNSEL + G-OWNER phases)","problem_statements":["Marketplace reputation is stars and vibes; I need attestations that exist only against settled, receipt-backed work a verifier can re-check offline","Ten five-star jobs from one counterparty pair — possibly one actor — must not outweigh three jobs from distinct parties","Wash trades and self-dealing must be excluded by construction, not by moderation after the fact"],"source_refs":["eclipse-attest-mcp/bazaar-manifest.json","test-bench/results/eclipse-attest-mcp-rebench2-c12-2026-10-25.json"],"status":"in-development","tagline":"signed performance attestations for agents, issued only against settled, receipt-backed work — reputation that travels because its evidence does.","tools":["attest_issue","attest_verify","attest_list_subject","attest_revoke","attest_dispute"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Issuer-only origination: a revocation record is accepted only when its signature verifies against the registry key of the identity that issued the original artifact (or its recorded successor) — any other signer refuses REVOKE_NOT_ISSUER by name and is receipted as a violation attempt; Revoke distributes revocations, it never originates one for an artifact it does not hold","Four subject classes (cards, keys, mandates, attestations) under a closed reason vocabulary (KEY_COMPROMISED / ISSUER_ROTATED / SUBJECT_RETIRED / POLICY / ISSUER_ERROR); records are append-only and hash-chained per issuer with full provenance","list_publish derives epoch-versioned signed lists (full + delta) from the record store — recomputable from the records, so a list that disagrees with its records fails verification; revocation_check is a pure offline function of a list copy; staleness and epoch divergence are announced, never silent","A mistaken revocation is corrected by the issuer's signed counter-notice — both records remain and a check shows the pair's net effect; subscribers acknowledge epochs with signed propagation receipts surfaced by feed_status","Family T3 is empty: there is no enforcement verb — nothing delists, blocks, freezes or takes down anything; external distribution (G-REG/G-LIVE per consumer), emergency revocation classes (G-COUNSEL) and any live push are held gates, not built"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench #2): 13 pass, 0 na of 13 checks — the C13/B1 provenance battery plus genuine-path controls, with run 2's closures standing. Bench history retained append-only: run 1 FAILED (D1–D3, test-bench/results/eclipse-revoke-mcp-2026-10-26.json) and run 2 FAILED (D4 — list-verification laundering, eclipse-revoke-mcp-2026-10-26-2.json); run 3 proves all four D4 variants (fingerprint-laundered recomputed, stripped sig/fingerprint, foreign unsigned epoch-9, foreign validly-attacker-signed) now cap at LIST_VERIFICATION_FAILED for hits AND absent refs, while genuine paths (supplied + stored) answer REVOKED_BY_ISSUER / COUNTER_NOTICED / NOT_LISTED exactly as before. CEILING: CERTIFIED(local) for own-issuer feed + offline check over fixture issuers. External distribution of the feed to registries/merchants is NOT built (T2 + G-REG/G-LIVE per consumer) — list_publish writes the local store only and v0 contains no network code; emergency revocation classes are NOT built (G-COUNSEL) — the closed reason vocabulary has no emergency class; no live push to subscribers exists. v0 signs with a local seed key (keys/, gitignored); production findings-key custody is a gated decision.","not_tested":["External distribution of the feed to registries/merchants — NOT built (T2 + G-REG/G-LIVE per consumer); list_publish writes the local store only, no network code in v0","Emergency revocation classes — NOT built (G-COUNSEL); the closed reason vocabulary has no emergency class","Any live push to subscribers — NOT built; subscribers check offline against list copies and acknowledge epochs","Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision"],"scorecard_ref":"test-bench/results/eclipse-revoke-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-revoke-mcp-2026-10-26-3.json"},"icon":"eclipse-revoke-mcp/icon-512.png","id":"eclipse-revoke-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-revoke-mcp.png","name":"Eclipse Revoke MCP","platforms":["MCP over stdio — local v0.1 build; offline revocation checks against signed list copies"],"pricing_model":"Free local v0.1; hosted feed distribution pricing TBD per spec (held, G-REG/G-LIVE + G-OWNER)","problem_statements":["A key or agent card is revoked in one registry and stays trusted everywhere else — revocation that does not propagate is a press release","Nobody may revoke someone else's artifact: origination has to be issuer-only and verifiable, with attempts receipted","Subscribers need revocation checks that work offline against a signed list, with staleness announced — never silent"],"source_refs":["eclipse-revoke-mcp/bazaar-manifest.json","test-bench/results/eclipse-revoke-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"signed revocation lists for agent cards, keys, and mandates — one feed, every registry, revocation that actually propagates.","tools":["revoke_issue","revoke_counter_notice","list_publish","revocation_check","feed_status","feed_acknowledge"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Scoped, expiring leases over NON-OAuth static credentials (raw API keys / PATs) under Wallet policy semantics — allowlist scope (hosts/methods/path prefixes, bounded by the enrollment), expiry, use-count cap, audience binding to one agent identity, per-lease kill switch — with an owner-held master key","Raw keys never enter model context: a secret is sealed on the operator's own machine under the owner master public key and only the sealed envelope crosses the MCP surface; the MCP process stores ciphertext in a separate vault file and contains NO decrypt path — decryption lives only in the redemption component, which injects the credential into the outbound request after the model's view ends and returns metadata only","No tool returns secret material: there is no secret_get and no lease_redeem (redemption is not an MCP operation) — those names refuse -32602 at the transport; lease tokens are shown once to the enrolling operator and stored hash-only","Every T1 verb requires an ECDSA owner-signed, params-bound approval; redemption re-reads lease state synchronously (revocation/expiry/cap/audience/allowlist refusals by name, receipted to a hash-chained audit trail); two independent executor implementations ship, proving redemption is a protocol, not a runtime","The claim is the static-key world outside any vendor runtime (Amendment A1): enrolling an OAuth-capable target renders that out-of-claim boundary in the enrollment record; third-party custody is HELD (G-COUNSEL + G-OWNER + Verity security review; may conclude never) — custody_scope=third_party refuses THIRD_PARTY_CUSTODY_HELD by name","Descriptor law: the name never implies custody of funds and the descriptor always reads 'credential leases, never raw keys'; the non-exposure guarantee rests on allowlist serialization of the sealed envelope (closed field set, canonical re-serialization) and no-echo errors, with input key-material scanning as defense-in-depth"],"categories":["Identity, Trust & Reputation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — FIRST-PARTY SCOPE ONLY. Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #3: 13 pass, 0 na of 13 checks on the card's check lines, comprising 59/59 individual bench probes across the D7/D8 boundary battery, the identity-exemption angle set (aliasing-by-copy, self-nesting, list-wrapped envelope, list owner_approval, signature-plus-extra-material, dotted keys on secret_enroll) and the K3/D6 spot batteries. Bench history retained append-only: runs 1–3 FAILED (test-bench/results/eclipse-keyhold-mcp-2026-10-25.json, -2.json, -3.json) and stand as the record for the lines they scored; every gating defect they raised is closed on the standing card or a retained predecessor card. CEILING — read exactly: certification covers first-party leases over ONE redemption class (https_static_key), exercised on a fixture transport — live redemption against a real third-party API was NOT exercised and no real credential exists in the package. Third-party custody is NOT built and is HELD (G-COUNSEL + G-OWNER + Verity security review of the redemption component; the gate may conclude never). The v0 envelope construction (ephemeral ECDH P-256 + HKDF-SHA256 + HMAC stream/EtM) is a local reference construction for the fixture/dogfood scope; the held security review may replace it before any wider custody claim. NAME: CONDITIONAL PASS — trademark/collision screen owed before any public surface (G-TM); the descriptor always reads 'credential leases, never raw keys'. v0 uses local seed keys (keys/, gitignored, chmod 600): the private master half is read ONLY by the redemption executor, never by the MCP server.","not_tested":["Live redemption against a real third-party API — NOT exercised; v0 acceptance runs on a fixture transport and no real credential exists in the package","Third-party custody — NOT built and HELD (G-COUNSEL + G-OWNER + Verity security review; may conclude never); custody_scope=third_party refuses THIRD_PARTY_CUSTODY_HELD by name","Additional redemption target classes — NOT built (per class, G-OWNER); v0 redeems exactly one class: https_static_key","Production key custody — v0 uses local seed keys (keys/, gitignored, chmod 600); password-manager custody and rotation rehearsal are later gate decisions","Envelope construction review — the v0 seal/open construction is a local reference construction for the fixture/dogfood scope; the held security review may replace it","Trademark/name screen — NOT done (G-TM owed before any public surface); name is a CONDITIONAL PASS and the descriptor always reads 'credential leases, never raw keys'"],"scorecard_ref":"test-bench/results/eclipse-keyhold-mcp-2026-10-25-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-keyhold-mcp-2026-10-25-4.json"},"icon":"eclipse-keyhold-mcp/icon-512.png","id":"eclipse-keyhold-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-keyhold-mcp.png","name":"Eclipse Keyhold MCP","platforms":["MCP over stdio — local v0.1 build; redemption by co-located executor, exercised on fixture transport"],"pricing_model":"Free local v0.1; hosted pricing TBD per spec (owner-gated, G-OWNER phase)","problem_statements":["My agent needs an API key to do its job, but the raw key must never enter the model's context — it sits one prompt injection away from exfiltration","Static keys — PATs and raw API keys — live outside the OAuth vault runtimes; they need scoped, expiring leases under an owner-held master key","When a lease is revoked or expires, redemption must refuse synchronously — not at the next cache refresh"],"source_refs":["eclipse-keyhold-mcp/bazaar-manifest.json","test-bench/results/eclipse-keyhold-mcp-2026-10-25-4.json"],"status":"in-development","tagline":"credential leases, never raw keys — scoped, expiring secret leases for agents; the agent gets a capability, never the key.","tools":["secret_enroll","lease_issue","lease_status","lease_list","lease_revoke","redemption_audit"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Fabrication authority exists only inside a Herald-grammar signed mandate pinning agent × printer serial × design pin × slicer build × profile hash × material × thermal/volume/duration/budget envelope × site class × window, enforced at a site bridge holding the only printer credentials","The bridge re-slices the pinned inputs at dispatch and canonical-hash-matches the toolpath before any printer contact — hand-edited toolpaths, tampered or poisoned profiles, slicer drift, config drift and material swaps all refuse by name before heat","Every print and every refusal seals into a Blackbox-form evidence pack; Loft Proof verifies packs offline, re-deriving the chain — and only against a trusted signer anchor supplied by the verifier (registry / expected fingerprint)","No raw G-code surface exists (T2 refused through P2) and config writes are permanently refused — no tool, no path around; design registration proposes only, pin activation is a human-principal signed act (AGENT_SELF_PIN_REFUSED)","Loft Gauge statically checks mandates and profiles for envelope soundness before any session opens; site class fails closed — anything not exactly ATTENDED or UNATTENDED_RATED drops the session to attended-required"],"categories":["Fabrication Governance","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(simulator)","certified":true,"certified_scope":"CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench r3 (standing): 12 pass, 0 na of 12 checks — the D2-only scope (key-substitution attack D2X + V3/V4/V5 tamper set + genuine packs with and without anchor, library and CLI). D1/D3–D10 were closed in scoped re-bench r2 and carried, not re-probed, per scope. History, all cards retained append-only: bench 1 FAILED (35 of 45 checks — test-bench/results/eclipse-strata-mcp-2026-10-25.json); scoped re-bench r2 FAILED (25 of 26 — eclipse-strata-mcp-2026-10-25-r2.json) on the sole remaining HIGH, D2. Scope — read exactly: SIMULATOR ONLY. P0 printers are host-shaped simulators (OctoPrint virtual + virtual Klipper/Moonraker, in-process) behind the production interface, with a deterministic simulated slicer; NO live printer was exercised at any point in any bench run, no heat exists in this bench, and no hardware claim of any class is made. TRUSTED SIGNER ANCHOR: Strata Proof verifies a pack only against a verifier-supplied registry / expected fingerprint; a pack's embedded key and self-consistent fingerprint never suffice — unanchored packs and unknown signers report PRINT_UNVERIFIED (UNVERIFIED_SIGNER) by design, never a silent verify. That anchor is what closed D2: in r2 an attacker who minted their own keypair, tampered the mandate (material swap, +365d expiry), re-signed and re-sealed produced PRINT_VERIFIED; in r3 the byte-for-byte same attack is refused solely on UNVERIFIED_SIGNER under a genuine anchor, under a genuine expected fingerprint, and with no anchor. GEOMETRY, narrowed in fix round D7 and consistent across spec, README, manifest and tool surface: declared_geometry_only — design_inspect returns the caller-declared bounding box plus arithmetic over it; manifold / triangle / wall-thickness facts are null, never echoed as verified; no geometry-kernel claim is made. BAMBU posture (spec): a Bambu adapter is P2+ and owner-Developer-Mode-only — the enablement act is documented as the owner's; there is no Bambu path, bypass, or claim at P0. NAME CONDITIONAL pending trademark screen (Stratasys shared root, same industry); fallbacks on record: Eclipse Sinter, then Eclipse Loft. N-CHECK: NOVELTY_PROVEN (bench 1, retained) — renamed-verb overlap 55% (<80%); a Kiln-shaped fixture printing a hand-edited +15 °C toolpath and an unbound job was refused on both counts — the mandate-and-bridge mechanism exists in no incumbent.","not_tested":["Real hardware of any class — no physical printer, no heat; every bench target is a host-shaped simulator.","Real slicer binaries (PrusaSlicer / Orca) — P0 slicing is a deterministic simulated slicer behind the production interface.","Real Moonraker / OctoPrint endpoints and vendor clouds.","Herald signer — P0 uses the local Ed25519 PinSigner fallback behind the production port; Herald custody is a later phase.","Blackbox custody of packs (packs are Blackbox-form; the Blackbox product is not in the P0 path).","P1/P2 adapters — including Bambu (owner-Developer-Mode-only posture per spec) and the Elegoo Neptune 4 dogfood purchase (owner decision D2).","Unattended real printing — mandates default ATTENDED-required; UNATTENDED_RATED is explicitly signed per site."],"scorecard_ref":"test-bench/results/eclipse-strata-mcp-2026-10-25-r3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-strata-mcp-2026-10-25-r3.json"},"icon":"eclipse-loft-mcp/icon-512.png","id":"eclipse-strata-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-strata-mcp.png","name":"Eclipse Loft MCP","platforms":["MCP over stdio"],"pricing_model":"Bridge license per site + per-printer seats (spec §18); P0 simulator build free/local","problem_statements":["My agent needs to run a 3D printer and I need its authority bounded, signed and revocable — not a G-code shell","When a print goes wrong I need a sealed evidence pack a third party can verify offline — anchored to a signer I trust, not to a key the pack carries","I need proof the toolpath that ran was byte-identical to a re-slice of the pinned design, profile and slicer — and that any hand edit gets a refusal, not a print"],"source_refs":["eclipse-strata-spec-20261025.md","3d-line-slate-addition-20261025.md","test-bench/results/eclipse-strata-mcp-2026-10-25.json","test-bench/results/eclipse-strata-mcp-2026-10-25-r2.json","test-bench/results/eclipse-strata-mcp-2026-10-25-r3.json"],"status":"in-development","tagline":"Governed design-to-print authority for agents — signed provenance from model to machine, safety envelopes at the bridge, evidence for every print.","tools":["design_register","design_inspect","design_pin_get","printers_discover","session_open","job_prepare","job_dispatch","job_status","job_abort","telemetry_read","session_close"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Sealed render-proof: renders the served artifact across a pinned matrix (Chromium/Firefox/WebKit x 1440x900, 768x1024, 390x844), runs a closed vocabulary of mechanical probes at each cell (served Content-Type per asset class, stylesheet application, media boxes, overflow, viewport meta, alt presence, console errors, transport), hashes every screenshot, and seals measurements + hashes + matrix into a signed, hash-chained pack any third party can recompute offline","Proof bound to the deployed artifact: the pack pins the deploy manifest (version + per-file content hashes) as the approved build — any served-byte change invalidates the proof automatically (gate reads STALE, never VERIFIED_LIVE)","Claim-gate only (spec §8.2): the publish pipeline may say 'verified live' only while a PASS served pack's input hashes equal the deployed manifest; gate failure blocks the word 'verified', never the publish — WARN and ENFORCE compute identical states","Honest limits by construction: a PASS means exactly 'no probe failed and no probe errored'; the pack proves identity and mechanical soundness of the pinned bytes, never that an asset is semantically the right asset — semantic approval is the separate human act of approving the contact sheet; verify_page is an unsealed diagnostic and says so verbatim in every response","No driver surface: Playwright is an internal adapter only — there is no screenshot/click/navigate tool and no code-exec tool; substrate-shaped names refuse -32602; unknown probes refuse PROBE_UNKNOWN on every surface; evidence classes (served/staged/hosted) are never blended"],"categories":["Certification & Testing","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 25 pass, 0 na of 27 checks (1 partial, 1 fail — LOW defects D-COR-1/D-COR-2, no verdict impact, retained on the card). CEILING — read exactly: CERTIFIED(local) for the local verifier only, at the P0 ceiling, and nothing broader. Proven: the 5-tool MCP surface + Gate CLI + Sheet CLI as shipped; staged-class sealed packs over the §14 fixture corpus (bench-built, bench-signed); served-class dogfood pack verification for cetech.ai (builder-sealed, bench-recomputed); the gate contract including WARN/ENFORCE claim asymmetry; the house profile on a bench house-shaped fixture. Render-proof packs are bound to deployed artifact hashes: a pack proves identity and mechanical soundness of the pinned bytes under named measured facts — it does NOT prove an asset is semantically the right asset; semantic approval is the separate human act of approving the pack's contact sheet once per version. Claim-gate wording (spec §8.2): a deploy may be reported 'verified live' only while a PASS served pack exists whose input hashes equal the currently deployed manifest; any served-byte change invalidates the proof automatically; the gate blocks the word 'verified', never the publish. No hosted or live scope is certified: the hosted matrix is a P2 seam only (HOSTED_MATRIX_NOT_AVAILABLE). N-CHECK: NOVELTY_PROVEN — shipped surface 7/7 novel core (5 MCP tools + Gate CLI + Sheet CLI), substrate verbs 0/7 = 0% (R3 kill line 80% not triggered). NAME CONDITIONAL pending trademark screen (Chaos Corona / Corona beer screen outstanding, D1); fallbacks on record: Eclipse Transit, Eclipse Behold, Eclipse Lantern.","not_tested":["Real-device / hosted evidence class: P2 seam only (HOSTED_MATRIX_NOT_AVAILABLE verified); no hosted pack exists or was certified.","Semantic correctness of any asset — never claimed: a pack proves identity and mechanical soundness of the pinned bytes; semantic approval is the separate human act on the contact sheet.","Sentinel-mode UNSTYLED_RENDER on the live dogfood sites: sentinels not yet adopted on cetech.ai / thewhitereport.com / eclipsebazaar.com (owner site edits + publish outstanding); dogfood packs exercised heuristic mode only.","Served-class rendering of Chromium/Firefox cells on GoDaddy-hosted dogfood sites from the bench VM: transport-blocked by the host, sealed honestly as PAGE_UNREACHABLE; served certification rests on the rendered cells plus loopback shapes.","Full §14 B9 determinism as written (each dogfood site + full corpus x5): bench ran 5x on one stable fixture plus builder-suite shapes.","ENFORCE posture as a flipped production state: mechanics benched in both modes; the flip is an owner config act (D2) and has not occurred.","Herald-signed packs: bench and dogfood packs are local-signer packs (signer_type=local) verified through the PinSigner port grammar; no Herald custody exercised.","Trademark screen for the name 'Eclipse Corona' (D1): still CONDITIONAL — Chaos Corona / Corona beer screen outstanding before any public surface; certification covers function, not the name.","Third-party subjects, Bazaar listing mechanics, scheduled re-verification, public proof pages, CI adapters: P1/P2, not built, not certified."],"scorecard_ref":"test-bench/results/eclipse-corona-mcp-2026-10-25.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-corona-mcp-2026-10-25.json"},"icon":"eclipse-corona-mcp/icon-512.png","id":"eclipse-corona-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-corona-mcp.png","name":"Eclipse Corona MCP","name_status":"CONDITIONAL — trademark screen pending before any public surface (screen items: Chaos Corona; Corona beer — dilution note only); fallbacks on record: Eclipse Transit, Eclipse Behold, Eclipse Lantern","platforms":["MCP over stdio"],"pricing_model":"Free local P0; suite pricing TBD per spec","problem_statements":["My deploy shipped, but I need proof the live site is byte-identical to the build I approved — not a screenshot someone eyeballed","A stylesheet served as text/html left my site unstyled while every text check passed — I need render-proof bound to the deployed artifact","When a byte changes after approval, the 'verified live' claim should invalidate itself — no revocation process, no stale badge"],"source_refs":["eclipse-corona-spec-20261025.md","eclipse-corona-mcp/bazaar-manifest.json","test-bench/results/eclipse-corona-mcp-2026-10-25.json"],"status":"in-development","tagline":"Sealed render-proof for deployed websites — signed verdicts bound to the deployed artifact, recomputed by anyone.","tools":["verify_deploy","verify_page","pack_inspect","pack_recompute","probe_registry"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Registry-native facets: selecting a registry (Eclipse Bazaar, Official MCP Registry, Glama, Smithery) materializes that registry's own verb set and native data model as MCP tools, each with native|adapted|absent provenance — honest absences included (Glama carries ZERO write verbs; claim execution is refused permanently)","A single Herald-signed mandate (agent × registry set × manifest hash × window) drives submission of one canonical server.json manifest across registries; namespace-proof and hosted-deploy steps additionally require T3 ECDSA owner-signed, params-bound approvals","Listing-state ledger: a hash-chained ledger tracks each registry's independent state (tracked/submitted/live/claimed/stale/failed) with Herald-sealable receipts (seal.status pending — sealable, never sealed)","Identity-bound acceptance: a submit-accepted receipt is written only when the observed registry record matches the submitted name + version + payload hash; foreign, partial, or version-swapped evidence refuses MANIFEST_HASH_MISMATCH with no acceptance — and every poll transition out of 'submitted' is identity-gated the same way","No union index, no cross-facet search, no fused ranking, no house score — cross-facet queries refuse by name (CROSS_FACET_QUERY_REFUSED); refusals are first-class output from a closed 21-code vocabulary"],"categories":["Identity, Trust & Reputation","Agent Infrastructure"],"certification":{"bench_verdict":"CERTIFIED(split per facet)","certified":true,"certified_scope":"CERTIFIED(split per facet) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-crosslist-mcp-2026-10-26-4.json: 39 pass, 0 na of 40 checks (1 partial — the builder-suite re-run line, whose sole failure was the stale fixed-count dogfood assert; fixed in this listing pass, suite now 50/50, smoke PASS). PER-FACET SCOPES — read exactly: root+ledger CERTIFIED(local): submit acceptance is identity-bound on every write facet (the observed registry record must match the submitted name + version + payload hash; Bazaar: product id/name + record hash), claimed-at-submit lands via the legal submitted→live→claimed two-step, stuck rows repair by receipted re-observation, and EVERY ledger_poll transition out of 'submitted' is identity-gated (live/failed via the shared identity gate, claimed via the repair gate) — a landed receipt proves the observed record matched the submitted artifact's identity at poll time, nothing about live registries. Bazaar facet CERTIFIED(local): the real catalog served through Crosslist (80 products at bench), publish/status writes under mandate. Official facet CERTIFIED(live-read) for list_servers/get_server/list_versions/get_version_detail; its writes are CERTIFIED(fixture) only and refuse REGISTRY_WRITE_UNAVAILABLE in live mode — NOT live-write certified. Smithery facet CERTIFIED(live-read) for search_servers/get_server ONLY; hosting/install-counts/releases/Connect sub-resources and publish/publish-release/deploy writes are CERTIFIED(fixture) only and refuse in live mode — NOT live-write certified. Glama facet CERTIFIED(fixture-read) only, all 8 verbs, ZERO write verbs — NOT live certified at any scope (live API returned 401; no key held). Herald dependency FIXTURE ONLY: mandates verified against a local ECDSA P-256 Herald-fixture key; production Herald RSA-JWS was not exercised. Receipts are Herald-SEALABLE with seal.status pending — never sealed. No live-write claim is made for any facet. KNOWN LIMITATIONS (standing LOWs on the card, in plain words): deeply nested error envelopes (wrapper depth 4 or more, and top-level list payloads) can escape detection, and error-shaped data keys can be refused by mistake (R3); on resubmission a stuck-row repair runs just before the mandate is verified, though nothing is written or accepted before that verification (R8); a track stuck at 'submitted' whose registry record is entirely absent has no automatic exit — it stays submitted rather than inventing a state (R9); submitting to Glama's absent native verb consumes the one-time mandate nonce, so a later legitimate submission can be refused as a replay (D8); the earlier claim that a production Herald key drops in unchanged was overbroad for RSA keys and is not repeated (D5); receipts are sealable and pending, not sealed (D7). N-CHECK (first bench, retained): the facet verbs deliberately mirror each registry's native verbs (renamed-verb share above the house line) — NO novelty claim rests on the facet verbs; the certified mechanism is the listing-state ledger plus the mandate constraint, which the bench exercised directly.","not_tested":["Live writes on any facet — none exist or were exercised; Official/Smithery writes are fixture-scope only and refuse REGISTRY_WRITE_UNAVAILABLE live.","Glama live API — 401 without a key, none held; Glama is fixture-read only at every scope.","Production Eclipse Herald (RSA-JWS) signing/sealing — fixture ECDSA P-256 only; receipts sealable/pending, never sealed.","Hosted / multi-tenant transport — P1; v0.1 is local stdio only. Deferred registries (mcpso, pulsemcp, lobehub; claude-connectors manual tracks) are P1, absent by design."],"scorecard_ref":"test-bench/results/eclipse-crosslist-mcp-2026-10-26-4.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-crosslist-mcp-2026-10-26-4.json"},"icon":"eclipse-crosslist-mcp/icon-512.png","id":"eclipse-crosslist-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-crosslist-mcp.png","name":"Eclipse Crosslist MCP","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; suite pricing TBD per spec","problem_statements":["I publish one MCP server to many registries and need each registry's listing state tracked in one ledger — without a union index smearing them into one score","A registry facet should speak that registry's own verbs and data model, and say so honestly when a verb simply does not exist there","A submission should only count as accepted when the registry's own record provably is the artifact I submitted — same name, same version, same payload hash"],"source_refs":["eclipse-prism-spec-20261025.md","meta-registry-house-test-20261025.md","eclipse-crosslist-mcp/bazaar-manifest.json","test-bench/results/eclipse-crosslist-mcp-2026-10-26-4.json"],"status":"in-development","tagline":"Publish once, tracked everywhere — registry-native facets plus a mandate-bound, identity-checked listing ledger.","tools":["list_registries","select_registry","deselect_registry","invoke_facet_tool","ledger_create_track","ledger_submit","ledger_status","ledger_poll","ledger_list_tracks","ledger_receipts","bazaar__search_products","bazaar__find_solutions","bazaar__get_product","bazaar__compare_products","bazaar__get_certification","bazaar__list_categories","bazaar__publish_catalog_entry","bazaar__set_listing_status","official__list_servers","official__get_server","official__list_versions","official__get_version_detail","official__check_namespace","official__publish_server","official__publish_new_version","official__verify_namespace_proof","glama__search_servers","glama__get_server","glama__get_scorecard","glama__get_tool_scores","glama__get_health","glama__get_gateway_state","glama__get_install_config","glama__claim_status","smithery__search_servers","smithery__get_server","smithery__get_hosting_state","smithery__get_install_counts","smithery__list_releases","smithery__get_connect_state","smithery__publish_server","smithery__publish_release","smithery__deploy_hosted"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Cite-check (the headline mechanism): a quoted passage is checked byte-for-byte against the sealed statutory text and returns a closed verdict — MATCH, DIVERGES with the first divergence localized by byte offsets, or NOT_IN_CORPUS. Bench facts: the hostile battery produced 0 false MATCH across digit swaps, word substitutions, punctuation changes, cross-section splices, editorial-notes-passed-as-statute, other-title text, and instruction-shaped passages; whitespace-only differences MATCH by published design and nothing non-whitespace is laundered","Sealed corpus, recomputable by anyone: Title 26 (OLRC-published text, release point Public Law 119-124) is sealed at ingest under the published canonicalization verbatim-canon/1.1 into snapshot usc26-119-124-de68dcc8b3db — per-section hashes for all 2,277 sections, dual Merkle roots (statutory + editorial), and a signed manifest. An independent implementation written from the spec text alone reproduces the seal exactly: 2,277/2,277 statutory and 2,277/2,277 editorial entries, both roots, the manifest hash, and the snapshot-id derivation","Notes are not statute: OLRC editorial notes are sealed in a separate EDITORIAL layer with its own hash root, served only under an EDITORIAL label; a note passage checked as statute returns NOT_IN_CORPUS with an EDITORIAL layer hint. Public Law history is served as labelled DERIVED data, never as statutory text","Verbatim retrieval + verification surface (10 tools, all read-only): get_section, search, and notes_get (retrieval is 3 of 10 verbs); cite_check, section_verify, manifest_get, and manifest_verify (verification); corpus_status, snapshot_list, and lineage (provenance). Snapshots are append-only — a correction is a new snapshot, never an edit (canon 1.1 supersedes 1.0, whose only change is §7519 sealed once instead of twice; the 1.0 snapshot remains fetchable unchanged)","No-advice surface, by construction: no tool interprets, explains, applies, or calculates anything; no response carries a score or a characterization beyond the closed verdict vocabulary. Title 26 statute only — no CFR. Title 26 is not positive law: claims are limited to the OLRC-published text at the named release point, identified by hash; the corpus is a dated snapshot, never described as current law"],"categories":["Compliance & Regulation","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-mcp-2026-10-26-2.json (scoped re-bench of the baseline PARTIAL; baseline card retained append-only): all 5 re-bench scopes PASS. Proven: the 10-tool local stdio surface as shipped (builder suite 64/64 + smoke PASS, re-run and confirmed by the bench); canonicalization verbatim-canon/1.1 — an independent bench implementation written from the amended spec §5/§6/§7/§8.1 alone, importing no product code, reproduces snapshot usc26-119-124-de68dcc8b3db exactly (census 8/8; statutory 2,277/2,277 hashes + byte lengths + word counts; editorial 2,277/2,277; corpus_root and editorial_root equal to served; manifest_sha256 recomputed equal; §8.1 derivation reproduces the snapshot suffix de68dcc8b3db); run against the superseded 1.0 seal it diverges at exactly one section (§7519), isolating the single published canon rule change. Cite-check: 0 false MATCH across the hostile subset on the new snapshot (digit alteration localized identically to baseline, punctuation/quote-mark/em-dash swaps DIVERGE, editorial-as-statute NOT_IN_CORPUS with EDITORIAL hint, instruction-shaped passages NOT_IN_CORPUS / DIVERGES, wrong-section claims NOT_IN_CORPUS with found-elsewhere). Tamper: every entry/bytes tamper shape is named by section and degrades the signature to SIGNATURE_UNVERIFIED; metadata-only tampers degrade loudly. Non-Title-26 citations return CORPUS_OUT_OF_SCOPE across tools (13 title/CFR forms); grammar failures stay CITATION_MALFORMED. KNOWN LIMITATIONS (standing observations on the card, in plain words): a cite-check MATCH for a repealed section carries no status field, so a repealed section's line can match without the response saying it is repealed (D-5); 115 sections that carry no identifier attribute in the source share a derived citation form and cannot be addressed by citation grammar — they are reachable only via manifest paging, search, or unclaimed cite-check (D-6); cite-check's candidate pre-filter samples 32-byte windows at a step of 8 — it can only ever produce non-MATCH outcomes, never a false MATCH (D-7). Two spec-clarification errata candidates are recorded for the next spec touch, not product fixes: a long-form prose title citation ('Title 18, United States Code, §1341') returns CITATION_MALFORMED rather than CORPUS_OUT_OF_SCOPE (D-8), and the spec does not yet state in one line that a note nested inside a note contributes all its descendant text to the parent note's editorial bytes — the reading the seal uses (D-9). SIGNING: the P0 manifest is signed through the Herald port with labelled FIXTURE keys only (signer.kind 'fixture', FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL (spec D1, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before D1 closes.","not_tested":["Hosted or remote serving — v0.1 is local stdio only; no hosted serve path exists or was certified.","Production Herald custody — P0 signing uses labelled fixture keys only; no production key was exercised.","Title 26 Regulations (26 CFR) — out of P0 scope by gate decision; no CFR verb exists on the surface.","Anything past release point Public Law 119-124 — the corpus is a dated, sealed snapshot; later law is not in it and currency is never claimed.","The trademark + confusion screen for the name 'Eclipse Verbatim' (spec D1, owner-side) — still open; it gates any public surface, not this local certification.","A third-party recompute by anyone other than the bench's independent implementation — the procedure is published (spec §5–§8.1) and the Verbatim Proof companion tool ships with the product, but no outside party has yet run it."],"scorecard_ref":"test-bench/results/eclipse-verbatim-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-verbatim-mcp-2026-10-26-2.json"},"icon":"eclipse-verbatim-mcp/icon-512.png","id":"eclipse-verbatim-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-verbatim-mcp.png","name":"Eclipse Verbatim MCP","name_status":"CONDITIONAL — trademark + confusion screen (spec D1) is owner-side and still open; it gates any public surface under any name. Fallbacks on record: Eclipse Quire, then Eclipse Schedule","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; pricing TBD per spec (per-verification / per-seat shape, numbers owner-gated)","problem_statements":["My agent quoted a tax-code passage — I need a byte-for-byte verdict on whether the sealed statute actually says that, with the first divergence pointed at","I need the text of a Title 26 section with a hash I can verify, not a scrape I have to trust","I need a corpus whose publisher notes can never be passed off as statutory text — to my agent or by it"],"source_refs":["eclipse-verbatim-spec-20261025.md","tax-code-line-slate-addition-20261025.md","eclipse-verbatim-mcp/bazaar-manifest.json","test-bench/results/eclipse-verbatim-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Title 26 as a sealed object: per-section hashes, a recomputable signed manifest, and byte-for-byte cite-check verdicts.","tools":["get_section","search","notes_get","cite_check","section_verify","manifest_get","manifest_verify","corpus_status","snapshot_list","lineage"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — the signed delta: a filing is prepared, approved, and evidenced as a Herald-signed DELTA between the registry-of-record's own current state — read back through its sanctioned public surface at prep time — and the exact artifact to be submitted; after the HUMAN submits via the registry's own channel, Roll Proof re-reads the registry and seals proof-of-filing ONLY if the public record changed exactly as approved (a mismatch seals an evidence pack as FILED_UNVERIFIED, opens a Radar discrepancy, and refuses the proof claim by name — never a partial seal)","Prep-and-seal only — NO submission verb exists on any surface, in any name: form-only registries (Sunbiz, SAM, TEAS, state SOS portals) stay human-submitted in every phase; Roll prepares, fingerprints, and evidences — it never files","FIXTURE scope, stated plainly: every registry read at P0 runs through a labelled FIXTURE Gauge adapter (SAM Entity API / Sunbiz public search / USPTO TSDR / EDGAR data shapes) and every artifact carries evidence_class FIXTURE — NO live registry read has been exercised yet; the live adapter exists only as an unregistered interface that refuses","Wageward spine consumed by reference, never forked: canonical fingerprint over the spec allowlist (artifact + delta + base-snapshot hash + jurisdiction parameter set + the not-a-law-firm statement rendered INSIDE the canonical pack object — missing = invalid pack), ECDSA verified approvals (params-bound, nonce + tombstone, single-use), FILING_CHANGED_SINCE_APPROVAL + REGISTRY_STATE_DRIFT refusals, Blackbox-form sealed packs, 12-month receipt standing (revocation kills standing instantly; integrity never expires)","UPL fence at the tool layer: advice / entity-selection / interpretation / clearance requests refuse by name (ADVICE_CLASS_REFUSED; drafting-with-judgment = DRAFTING_CLASS_REFUSED) and Roll never signs as principal (SIGNATURE_PRINCIPAL_ONLY) — mechanics, deadlines, checklists, and registry facts only","Renewal Radar + CETech dogfood fixtures: deadline/renewal tracking with discrepancy entries; the built P0 dogfood subjects are CETech's own Florida (Sunbiz) annual report (Jan 1–May 1 window), the SAM.gov renewal watch (submitted 2026-10-24, activation pending), and a VetCert radar entry (MANUAL class, expiry Jul 2028) — all as labelled fixtures"],"categories":["Compliance & Regulation","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local, fixture scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-roll-mcp-2026-10-26-rebench.json (scoped re-bench; baseline card eclipse-roll-mcp-2026-10-26.json retained append-only). THE HONEST ARC, on the record: the first bench FAILED (23 pass / 11 FAIL of 34 grouped checks) on two HIGH defects — D1, revocation/expiry did not propagate past session_open (a pack sealed FILED_VERIFIED under an expired mandate), and D2, Proof's pack_verify certified a filing the read-back had refuted — plus a UPL fence that keyword-matched and a renamed-key secret-scan bypass. The fix round closed D1–D10 (25 new regression tests, 22 proven failing pre-fix); the full suite runs 63/63 on three consecutive runs (a ~3.4% flake, root-caused to the scan screening system-issued session ids, was killed). Verity's scoped re-bench then attacked the FIX code with fresh shapes — forged-consistent evidence packs, coordinated base+read-back tamper at seal, valid-window ghost artifacts, revoke-after-approval, planted foreign radar entries — 17/17 PASS, zero new defects; K1 delta-existence, the N-check (0/18 identical verb names vs the Wageward spine, inherited by reference), and grammar-drift all re-verified PASS; NOVELTY_PROVEN stands. SCOPE, read exactly: certification covers the 18-tool local stdio product at FIXTURE scope — every Gauge adapter is a labelled fixture, NO live registry read has ever been exercised, and NO submission verb exists on any surface (prep-and-seal only; the human submits via the registry's own channel). The counsel gate (spec §10.3) stands before any P1 / live phase regardless of this verdict. Two standing items remain on the card for ruling: a seal attempted under a revoked mandate surfaces APPROVAL_SCOPE_MISMATCH (inherited Wageward spine shape) where sibling verbs surface MANDATE_REVOKED — harmonization is an owner/Verity call; and seeded Radar entries are born claiming REGISTRY_READ with observed_at empty (observation D10d). NAME CONDITIONAL (spec D2, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before the screen closes.","not_tested":["Any live registry read — no Gauge adapter has ever run against a live registry; all adapters exercised are labelled FIXTURE adapters, and the live adapter is unregistered and refuses","Any submission to any registry — no submission verb exists at P0 in any name; nothing was or could be filed by this product","Counsel review (spec §10.3) — a hard gate before P1 / any live phase; not performed and not part of this certification","The trademark screen for the name 'Eclipse Roll' (spec D2, owner-side) — still open; it gates any public surface, not this local certification","Customer-facing / multi-entity operation (P3, not proposed) and the EDGAR Next submission adapter (P2, specced only)","Template-fill drafting — gated on a counsel-approved template set (spec §10.1); the drafting class refuses until then"],"scorecard_ref":"test-bench/results/eclipse-roll-mcp-2026-10-26-rebench.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-roll-mcp-2026-10-26-rebench.json"},"icon":"eclipse-roll-mcp/icon-512.png","id":"eclipse-roll-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-roll-mcp.png","name":"Eclipse Roll MCP","name_status":"CONDITIONAL — trademark screen (spec D2) is an owner item, owed before any public surface; the screen, not the spec, clears the mark. Fallbacks on record, in order: Eclipse Seal (N4-flagged — usable only with copy making the seal ours, never the registry's), then Eclipse Record","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 (P0 fixture); licensing per spec §19 is an owner/commercial decision, not a v0 surface","problem_statements":["I file with registries that have no submission API — I need the filing prepared against the registry's own current record, and proof afterward that the public record changed exactly as approved","A renewal or annual report slipped because nobody owned the deadline — I need a radar that tracks registry state, not a calendar guess","My agent must never drift into legal advice while helping with filings — the fence has to be at the tool layer, refusing by name"],"source_refs":["eclipse-roll-spec-20261025.md","filings-line-slate-addition-20261025.md","eclipse-roll-mcp/bazaar-manifest.json","test-bench/results/eclipse-roll-mcp-2026-10-26-rebench.json"],"status":"in-development","tagline":"Signed deltas against the registry's own record — proof-of-filing seals only on an exact read-back match.","tools":["session_open","registry_record_get","filing_prepare","filing_diff","pack_get","mandate_issue","approval_issue","submission_record","pack_seal","gauge_check_pack","gauge_check_delta","gauge_params_list","pack_verify","pack_render","pack_compare","radar_entries_list","radar_entry_get","radar_refresh"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Sealed corpus, recomputable by anyone: 1,315 Executive Orders (Federal Register full-text XML) sealed per section under canon-eo/1.0 into snapshot eo-20261022-26818c895dee — per-section hashes, a signed manifest, append-only snapshot history; the bench re-derives the seal from the stored artifacts and a spec-only build-time recompute converged 1,315/1,315 document hashes identical","The novel mechanism — a disposition graph extracted from the orders' own sealed sections: 10,667 edges, every edge pinned to the hash of the asserting section and typed by provenance (TEXT / FR_NOTE / NARA_TABLE), so a graph claim can always be recomputed against the sealed text that asserts it; where the consulted sources disagree, the disagreement itself is sealed as a DIVERGENCE record (823, status OPEN forever, never resolved by the product)","Scope is clause-bound, never idiom-bound: a whole-order cue binds only in a clause naming the target; part-governed cues mint IN_PART with the stated range; the savings idiom is stripped before cue search and can never mint a whole-order scope — the bench's exhaustive sentence-level sweep of all 13,282 sealed segments finds exactly the 5 genuine whole-order edges and zero contamination","Honest coverage, measured not assumed: the Federal Register full-text XML floor is 2000 (the 1994 gate assumption was falsified by measurement) — 258 orders are EXCLUDED_NAMED (NO_FR_FULL_TEXT_XML), never silently absent; pre-2000 orders ride in an unsealed metadata+edges layer reaching back to 1931, labelled unsealed on every surface; Public Inspection versions are refused by name (PUBLIC_INSPECTION_NOT_INGESTED)","The fence, by construction (gate C3): no tool characterizes legal effect and no status field exists anywhere in the product — every disposition answer is an edge set + as_of + a coverage window + the standing completeness sentence, served byte-identically; cite_check verifies a claimed section against its sealed hash, and resolve_authority resolves an order's statutory citations against the consumed sealed Code corpus (an empty port answers by name until that corpus lands — never a fabricated resolution)"],"categories":["Compliance & Regulation","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-eo-mcp-2026-10-26-3.json (scoped re-bench #3 of fix round 2, commit 56537e4; cards -1/-2 retained append-only — the mechanism was certified-grade on card -1 and certification was withheld on card -2 on EO-D1-2 alone). Proven: the 10-tool local stdio surface as shipped (builder suite 76/76 in substance — 72 PASS on plain bench runs plus 4 copy-dependent tests PASS under the bench replication harness, their plain-run failures being this VM's environment only; smoke PASS re-run by the bench); snapshot eo-20261022-26818c895dee (graph-3): 1,315 sealed documents, 10,667 edges, 823 divergence records, all OPEN (OMISSION 719, TYPE_DISAGREEMENT 104). EO-D1-2 CLOSED — the one defect that ever falsified a served claim: whole-cue scope emission trusted the savings idiom (a continuation assertion) and partial strikes; the graph-3 FULL census is 9 → 5, every surviving FULL re-derived by the bench's own reading of the sealed asserting text, the 4 unsupported FULLs corrected exactly (EO 11958→11501 twice and EO 13637→11958 to UNSPECIFIED; EO 13470→12333 to IN_PART 'Part 1'), and an exhaustive sentence-level sweep of all 13,282 sealed segments finds exactly 3 FULL candidates — precisely the genuine TEXT units; the idiom strip never eats a genuine cue (overreach battery: both orders, replacement form, single-clause continue+revoke). EO-D1-3 CLOSED: all 186 stated ranges re-derived verbatim in their pinned segments (186/186), binding sample 27/27. EO-D8 CLOSED in substance: graph-2 → graph-3 edge sets identical (10,613 unique keys), exactly 6 scope-only diffs, documents_root + divergences_root byte-identical, zero assertion groups gained or lost, net −66 exact (observation EO-O9: the spec A6 −94/+28 instance split differs by one each way from the bench's grouping, −93/+27 — a counting-convention artifact; a future accounting should state its grouping key). Riders CLOSED: EO-D5-2 (9/9 fresh Public Inspection marking variants refuse PUBLIC_INSPECTION_NOT_INGESTED by name against an empty PI index; bare 'PI' stays generic −32602, never stretched) and EO-D7 (§8.3 snapshot + coverage blocks on all 10 tools' successes and on refusal envelopes, SNAPSHOT_NOT_FOUND and GRAPH_VERSION_MISMATCH standing without blocks by documented construction; disposition carries divergences[] and self_limiting_terms[] as serve-time-derived, hash-exact pointers, never evaluated). Extraction bar re-measured on a fresh 15-assertion labelled sample: precision 1.000, recall 1.000; corpus FULL precision exhaustive at 5/5. NEW LOW FINDINGS (synthetic-only, zero sealed instances, corpus-swept): EO-D1-4 — four whole-cue binding residuals outside the implemented grammar (truncated idiom without 'and effect'; roman-numeral parts; an appendix struck wholly; a comma-joined cue about another object), recorded with a PRE-RESEAL CONDITION — the next reseal's bench sweeps the new batch for these shapes before the snapshot serves as current; EO-D1-5 — hyphenated compound ordinals ≥13 misquote the range tail ('twenty-first section' → range 'first section'), a verbatim-accuracy gap, never FULL. Observation EO-O8: snapshot history holds two builder-iteration seals (d31caba, ede0001) and graph-3's manifest names ede0001 as its previous rather than c44a7ad80308 directly — append-only history is honestly kept and the certified lineage reconciles exactly. THE FENCE (gate C3, load-bearing): no output of this product characterizes legal effect; every disposition answer remains an edge set + as_of + coverage window + the §2.2 completeness sentence, bench-verified byte-identical to the spec constant. Coverage re-derives from the manifest: sealed from 2000-02-10, 258 exclusions all NO_FR_FULL_TEXT_XML (257 documents 1994–1999 + EO 13548), unsealed layer from 1931-08-26; 1,315 + 258 = 1,573. SIGNING: the snapshot seal is a FIXTURE seal (FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL: the name inherits the pending Eclipse Verbatim trademark screen (owner-side); certification covers the local product's function under its working name, not the name.","not_tested":["Hosted or remote serving — v0.1 is local stdio only; no hosted serve path exists or was certified.","Production Herald custody — the snapshot seal is FIXTURE_SIGNED with a labelled fixture key; no production key was exercised.","Sealed texts before 2000 — the Federal Register full-text XML floor is 2000 (measured); 1994–1999 orders exist only in the unsealed metadata+edges layer, and no sealed text is claimed for them.","Any characterization of legal effect — refused by construction: no status field exists; disposition answers report what the named sources assert, as graph state as of a named snapshot, with the standing completeness sentence.","EO→USC authority resolution against a live Code corpus — the port is empty by design at v0.1 and answers by name (CODE_CORPUS_UNAVAILABLE); resolution activates when the sealed Code corpus lands.","The trademark screen for the Verbatim family name (owner-side) — still open; it gates public surfaces under the name, not this local certification.","Any reseal after card -3 — EO-D1-4 / EO-D1-5 are recorded with a pre-reseal sweep condition; no reseal has occurred since certification."],"scorecard_ref":"test-bench/results/eclipse-verbatim-eo-mcp-2026-10-26-3.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-verbatim-eo-mcp-2026-10-26-3.json"},"icon":"eclipse-verbatim-eo-mcp/icon-512.png","id":"eclipse-verbatim-eo-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-verbatim-eo-mcp.png","name":"Eclipse Verbatim — Executive Orders","name_status":"CONDITIONAL — inherits the pending Eclipse Verbatim trademark + confusion screen (owner-side, still open); it gates any public surface under the name. Family fallbacks on record: Eclipse Quire, then Eclipse Schedule","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; pricing TBD per spec (owner-gated)","problem_statements":["I need the exact text of an Executive Order section with a hash I can verify — not a scrape I have to trust","The order's own text, the FR disposition notes, and the NARA tables tell different stories — I need the disagreement preserved as sealed data, not resolved away","I need what the named sources assert about an order, as graph state as of a named snapshot — without anyone dressing graph state up as legal effect"],"source_refs":["verbatim-executive-orders-spec-20261026.md","verbatim-executive-orders-gate-20261026.md","eclipse-verbatim-eo-mcp/bazaar-manifest.json","test-bench/results/eclipse-verbatim-eo-mcp-2026-10-26-3.json"],"status":"in-development","tagline":"Executive Orders as sealed objects: per-section hashes, a provenance-typed disposition graph, divergences kept as data.","tools":["search_orders","get_order","get_section","cite_check","verify_manifest","disposition","revocation_chain","resolve_authority","graph_divergences","corpus_status"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Sealed corpus, recomputable by anyone: FEMA NFHL county extracts sealed per partition under flood-canon/1.0 — Leon (snapshot nfhl-fl-leon-20260611-bec93b592c31; 12,099 features) and Monroe (nfhl-fl-monroe-20261022-4776f79b6d7c; 9,664 features) are SEALED; the operative index fw-index-202610-abd4c392bd16 enumerates all 67 Florida county partitions and names the other 65 NOT_SEALED — Miami-Dade is NOT_SEALED (pending), never silently absent","Every determination is a signed evidence receipt bound to its sealed snapshot: subject geometry (FOOTPRINT / STRUCTURE_POINT / PARCEL — an address is refused as a subject), zone + panel + BFE outcome (exactly three outcomes; no datum-conversion code path exists), recomputable offline with the standalone verifier that ships in the tree (RECOMPUTE_MATCH / RECOMPUTE_DIVERGES naming the first divergent field)","Drift between vintages is classified by causal source record across a closed grammar (12 classes incl. FEATURE_CHANGE_UNATTRIBUTED); LOMR cases compare per-case record SETS (cardinality AND set). One LOW defect stands on the record as a printed condition (FW-D8: a case wholly removed in a later vintage did not raise drift; fixed in code after the bench — the fix must hold before any second-vintage drift output is published; drift remains latent until a second vintage of any partition seals)","Flag-1 qualifier (Verity bench, adjudicated 2026-10-26): the LOMC override branch (LOMC_OVERRIDE_APPLIES) is FIXTURE-PROVEN ONLY — the LOMA layer is absent from FEMA's county shapefile distribution (it exists only in the service distribution, which the spec bars as an ingest source), so the sealed corpus contains zero LOMA/LOMR-F records and the branch has never fired on real sealed data; the NO_COVERAGE_SOURCE / PAPER_FIRM_ONLY path is likewise synthetic-proven only (zero such partitions in the Florida census)","The claim fence, by construction (gate C1–C10): the receipt is evidence-grade only — never a determination of record, never an SFHDF, never lender-compliant, never an insurance-required/not-required answer, and never a statement that a property is “safe”; determination-shaped, insurance-shaped, risk-score, and live-query tool names are refused by name. Nothing in this listing states or implies endorsement by, affiliation with, or certification from FEMA or any government agency — FEMA/NFHL/FIRM name the public data source only. All seals are FIXTURE_SIGNED (Herald fixture key; owner open item O2) and labelled as such; the runtime has no live-query path"],"categories":["Compliance & Regulation","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-flood-witness-mcp-2026-10-26-2.json (scoped re-bench of the FW-D1..D7 fix round; card -1 PARTIAL(local) retained append-only and superseded). Proven: flood-evidence witness at Florida scope for the two sealed partitions Leon (snapshot nfhl-fl-leon-20260611-bec93b592c31; 12,099 features) and Monroe (snapshot nfhl-fl-monroe-20261022-4776f79b6d7c; 9,664 features), operative index fw-index-202610-abd4c392bd16 enumerating all 67 Florida county partitions (65 NOT_SEALED, named). All seven card -1 defects FIXED and verified against the fix code with fresh shapes, not the builder's regressions: FW-D1 by independent ID-derivation recompute over every manifest and index present (6/6 reproduce; ~60 strip-set variants never collide); FW-D2 by byte-comparison of the manifest scope string against the operative index plus a full public-copy sweep; FW-D3 by 9 fresh multi-record LOMR fabrications (fires iff the per-case record set differs, names only truly differing cases); FW-D4 by 5 fresh drift shapes including a revised-date-only restudy; FW-D5 by minting a coverage receipt against a fresh synthetic partition/index and reading the claim; FW-D6 by direct read of both implementations (end-to-end run is an open environmental evidence debt); FW-D7 by a grammar-vs-body key diff over every stored receipt. P0 partition completeness remains OPEN (2 of 3): Miami-Dade is NOT_SEALED in the operative index, with no snapshot directory present. One NEW LOW (FW-D8) stands as a printed condition: the drift LOMR step iterated snapshot B only, so a case wholly removed in B never fired drift — fixed in code (sorted union of case ids) after the bench; it MUST hold before any second-vintage drift output is published, and is latent at the current single-vintage scope. FLAG-1 QUALIFIER: the LOMC override branch (LOMC_OVERRIDE_APPLIES) is FIXTURE-PROVEN ONLY — the sealed corpus contains zero LOMA/LOMR-F records and the branch has never fired on real sealed data. All seals are FIXTURE_SIGNED (Herald fixture key; owner open item O2) and labelled as such. Nothing in this verdict speaks to determination-of-record, SFHDF, lender, or insurance use: the product is an evidence-grade receipt witness only, per gate fence. NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.","not_tested":["Miami-Dade partition — NOT_SEALED (pending) in the operative index; 65 of 67 Florida partitions are enumerated NOT_SEALED and no determination can be minted against them","Second-vintage drift on real data — drift classification is proven at the classifier level with fabricated shapes; it remains latent until a second vintage of any partition seals, and the FW-D8 fix must hold before any second-vintage drift output is published","The LOMC override branch on real sealed data — FIXTURE-PROVEN ONLY (zero LOMA/LOMR-F records in the sealed corpus; the LOMA layer is absent from FEMA's county shapefile distribution)","Production Herald custody — all seals are FIXTURE_SIGNED with a labelled fixture key (owner open item O2); no production key was exercised","Hosted or remote serving — v0.1 is local stdio only; the runtime has no live-query path by construction","Full builder suite re-run and the FW-D6 end-to-end run at re-bench — open environmental evidence debts (this VM's exec write latch), graded environmental on card -2, not product defects","Any determination-of-record, SFHDF, lender-compliance, or insurance use — refused by construction under the gate fence; the product is an evidence-grade receipt witness only","The trademark screen for the Flood Witness name (owner-side, spec O1) — still open; it gates public surfaces under the name, not this local certification"],"scorecard_ref":"test-bench/results/eclipse-flood-witness-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-flood-witness-mcp-2026-10-26-2.json"},"id":"eclipse-flood-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-flood-witness-mcp.png","name":"Eclipse Flood Witness","name_status":"CONDITIONAL — working name, trademark screen owed (spec O1, owner-side); it gates any public surface under the name. Certification covers the local product's function under its working name, not the name","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1 remains free. PRICED — witnessed reads $7.50 single-parcel · $12.00 footprint/parcel (PC-5) via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product. Evidence-grade sealed receipt only — NOT a determination of record, NOT an SFHDF, NOT lender-compliant.","problem_statements":["I need a flood-zone answer for a parcel or footprint that any third party can recompute — not a screenshot of a viewer I have to trust","FEMA's layer changes over time — I need the determination bound to the exact sealed snapshot it was computed from, with drift between vintages classified by its causal source record","I need evidence-grade flood receipts that never pretend to be a determination of record, an SFHDF, or a lender/insurance decision"],"source_refs":["fema-flood-evidence-spec-20261026.md","fema-flood-gate-20261026.md","eclipse-flood-witness-mcp/bazaar-manifest.json","test-bench/results/eclipse-flood-witness-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Flood evidence, sealed: NFHL determinations as signed, independently recomputable receipts over sealed snapshots — an evidence-grade witness, never a determination of record.","tools":["determine","verify_receipt","receipt_get","drift_report","watch_set","watch_list","coverage_status","manifest_get","manifest_verify","geocode_explore"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Sealed campaign vintages, recomputable by anyone: NHTSA serves current state only — amended filings replace records in place and the API has no vintage parameter — so this product seals the recalls flat file nightly into a hash-chained anchor (recall-anchor/1.0); every campaign's full payload seals as an immutable vintage under recall-canon/1.0, and a campaign that disappears seals as a tombstone vintage, never a silent drop. CERTIFIED SCOPE IS FIXTURE: at P0 the nightly spine is proven over fixture flat files — no live nightly seal exists yet (capability 4 states exactly what is and is not live).","Drift between consecutive vintages seals as events across the closed recall-events/1.1 grammar — POPULATION_EXPANSION, REMEDY_CHANGE, ESCALATION_DO_NOT_DRIVE, ESCALATION_PARK_OUTSIDE, CORRECTION, CLOSURE, each with closed subtypes; an escalation is never absorbed into an expansion. Advisory detection is normalized token-pattern matching harvested from the live escalation stock (BMW/Mazda/Ford/Ferrari 'advised not to drive', Porsche 24V809 'should not drive', GM/Kia park-outside) and cross-checked against the API's own parkIt/parkOutSide flags — 15/15 live campaigns agree at re-bench. Per printed condition RW-D9, NO escalation-completeness claim is made beyond the live-stock-proven phrase families: the drive/park families are proven; operate/use paraphrase families are a known coverage boundary.","Posture-at-date derives exclusively from sealed vintages — before the first vintage (or after the last sealed night) the answer is NOT_SEALED, printed with its reason and the campaign's own first-vintage date. Mandate-bound check receipts run one live CAMPAIGN-LEVEL check and seal what it returned: every receipt prints scope_class: CAMPAIGN-LEVEL and the three standing sentences byte-exact — “This record states what NHTSA served at the stated time. It is not a safety determination about any vehicle.” / “This receipt proves a check was made and what it returned. It is not a legal determination of compliance with any law.” / “Per-VIN unrepaired status is NOT determined by this check.” A specific VIN is never called “open”: per-VIN unrepaired status lives behind NHTSA's consumer VIN lookup, whose posture bars automated submission, so no such determination exists in this product and no consumer-VIN-lookup code path exists anywhere in the tree; no VIN-decode tool surface exists either (decode is an internal step of check issuance only). Safety-verdict, owner, repair-advice, and per-VIN ask shapes refuse by name.","LIVE-PROVEN at cross-check + check-issuance scope (proof/live-api-20261026.md in the tree, independently re-verified first-hand on card -2): the API transport points at the spec-named host api.nhtsa.gov; a live cross-check seals campaign 24V809 with cross_check OK and its DO_NOT_DRIVE tag agreeing with the API's parkIt: true; an altered-summary hold-out sealed NOTHING (FAILED + named); one live check receipt (rcpt-00001, Porsche 911 MY2024) carries exactly the 4 campaigns the live API returns today and recomputes MATCH, phrase tags vs API flags 4/4. What is NOT live: the nightly flat-file spine — www-odi.nhtsa.dot.gov remains unreachable from the build egress (re-probed 2026-10-26, empty reply) and the spine was NOT re-routed to the API, because the flat file is the canon source. LIVE scope is gated on (a) the first real nightly ingest and (b) live-key cutover: all P0 seals are under FIXTURE ECDSA keys, labelled seal_key_class: FIXTURE on every artifact (owner's call, spec O3).","Churn measurement (recall-churn/1.0): nightly counters seal inside every anchor from night one; get_churn_series returns the methodology and MEASURING — no rates — until a day-90 segment bearing rates seals, and series_state derives from the segments (a methodology-only segment never flips the series to PUBLISHED; no churn rate appears in any copy before day 90). Three NEW LOW conditions stand printed on card -2 (none blocks CERTIFIED(local, FIXTURE scope); all ride the next grammar/seal touch): RW-D7 — the park-outside matcher can tag narrative “parked outside” rollaway text as a false PARK_OUTSIDE (constructed shape; no live-stock instance found; fix at recall-events/1.2 with an owner-directed-voice requirement); RW-D8 — the chain walk does not yet assert the genesis links, so first-vintage/first-anchor prev-hash tampers verify MATCH (content integrity unaffected — record hashes and seals still verify; one-line assert at the next seal-store touch); RW-D9 — operate/use paraphrase families (“should not be operated”, “never operate”, “do not use”) tag nothing (the coverage boundary in capability 2; 1.2 candidates). Nothing in this product speaks to any vehicle's safety, any specific VIN's repair state, or compliance with any law."],"categories":["Compliance & Regulation","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-recall-witness-mcp-2026-10-26-2.json (scoped re-bench of the RW-D1..RW-D6 fix round + transport repoint; card -1 PARTIAL(local, FIXTURE scope), 50 checks 43P/7F, retained append-only and superseded). Proven: sealed campaign-vintage witness over fixture flat files — nightly anchor + hash-chained per-campaign vintages, closed recall-events/1.1 drift grammar (spec §7 names; Δ1 ACCEPTED at card -1), sealed-vintage-only posture-at-date receipts and mandate-bound CAMPAIGN-LEVEL check receipts with byte-exact standing sentences, churn instrumentation with segment-derived series_state. Builder suites reproduced first-hand: 35/35 + 18/18 fix-round regressions, smoke PASS; bench battery 136 checks, 127 pass — the 9 fails group into three NEW LOW conditions (RW-D7/RW-D8/RW-D9); no prior defect survives. All six card -1 defects FIXED and verified against fresh shapes, not the builder's regressions: RW-D1 (HIGH) phrase battery — bench shape end-to-end (27V321000 733→1042, “advised not to drive”) emits ESCALATION_DO_NOT_DRIVE + sealed advisory_classes [DO_NOT_DRIVE], 11/11 fresh positives, and an independent cross-signal: 15 live campaigns re-fetched from api.nhtsa.gov, phrase tags agreeing with the API's parkIt/parkOutSide flags on every row; RW-D2 series_state stays MEASURING under a methodology-only segment and flips only when a rates-bearing segment seals; RW-D3 ask-shape screen refuses BY NAME incl. 14 bench-fresh spellings while benign record questions still serve; RW-D4 layout_hash MEASURED — header and free-text column permutations refuse LAYOUT_DRIFT_REFUSED, unpermuted real-shape files seal; RW-D5 prev_vintage_hash and anchor-chain tampers name MISMATCH in verify_receipt and the recompute CLI; RW-D6 campaign-scoped NOT_SEALED prints the campaign's own first vintage with the corpus floor labelled beside it. LIVE PROOF VERIFIED FIRST-HAND (5/5): the live store seals 24V809 with cross_check OK and DO_NOT_DRIVE agreeing with parkIt: true; the diverged store seals nothing (FAILED + named); rcpt-00001 recomputes MATCH and carries exactly the 4 campaigns the live API returns for Porsche 911 MY2024 (24V155000, 24V809000, 25V896000, 26V682000), tags vs flags 4/4. All seals under FIXTURE ECDSA keys, labelled on every artifact. NO live nightly seal exists: the flat-file spine host (www-odi.nhtsa.dot.gov) remains unreachable from this egress (re-probed 2026-10-26, empty reply) and was NOT re-routed to the API — the file is the canon source. LIVE scope additionally requires (a) the first real nightly ingest and (b) live-key cutover (fixture keys at P0, owner's call) — scope items, not defects. Conditions RW-D7/RW-D8/RW-D9 (all LOW) are printed on card -2 and bind the next grammar/seal touch; no escalation-completeness claim beyond the live-stock-proven phrase families may appear in any copy. Nothing in this verdict speaks to any vehicle's safety, any specific VIN's repair state, or compliance with any law (gate C2/C5/C11). NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.","not_tested":["Live nightly ingest — no live nightly seal exists: the flat-file spine host (www-odi.nhtsa.dot.gov) is unreachable from the build egress (re-probed 2026-10-26) and the spine was NOT re-routed to the API; LIVE scope requires the first real nightly ingest","Production Herald custody — all seals are under FIXTURE ECDSA keys, labelled on every artifact (spec O3); live-key cutover is the owner's call and has not been exercised","Escalation completeness beyond the live-stock-proven phrase families — RW-D9: operate/use paraphrase families (“should not be operated”, “never operate”, “do not use”) tag nothing; no as-served instance found in the live stock sampled; bound to the recall-events/1.2 bump","Narrative park-outside text — RW-D7: a constructed rollaway-narrative shape (“parked outside the owner's home”) tags a false PARK_OUTSIDE; no live-stock instance; fix at recall-events/1.2 (owner-directed-voice requirement)","Genesis-link assertion — RW-D8: first-vintage prev_vintage_hash and first-anchor prev_anchor_hash tampers verify MATCH (content integrity unaffected); the assert lands at the next seal-store touch","Per-VIN unrepaired status — never determined by construction (gate C5): the consumer VIN lookup is not automated, no per-VIN code path exists, and receipts print scope_class CAMPAIGN-LEVEL only","Hosted or remote serving — v0.1 is local stdio only","The trademark screen for the Recall Witness name (owner-side, spec O1) — still open; it gates public surfaces under the name, not this local certification"],"scorecard_ref":"test-bench/results/eclipse-recall-witness-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-recall-witness-mcp-2026-10-26-2.json"},"id":"eclipse-recall-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-recall-witness-mcp.png","name":"Eclipse Recall Witness","name_status":"CONDITIONAL — working name, trademark screen owed (spec O1, owner-side); it gates any public surface under the name. Certification covers the local product's function under its working name, not the name","platforms":["MCP over stdio"],"pricing_model":"Free local v0.1; no price points exist in the approved price book for this product yet — pricing not yet set; nothing is priced or activated","problem_statements":["NHTSA serves only what a recall campaign says now — amended filings replace records in place. I need what the campaign said on a past date, sealed, so a posture answer recomputes offline instead of trusting today's screenshot","When a recall population grows or a remedy escalates to do-not-drive, I need that change sealed as dated drift — an escalation never quietly absorbed into an expansion","At sale time I need a check receipt that prints exactly what was actually checked — campaign-level, as served — and never dresses itself up as a per-VIN “open/clear” verdict or a safety determination"],"source_refs":["eclipse-recall-witness-spec-20261026.md","vehicle-recall-witness-gate-20261026.md","eclipse-recall-witness-mcp/bazaar-manifest.json","test-bench/results/eclipse-recall-witness-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Recall campaigns, witnessed: NHTSA's as-served record sealed night by night — sealed vintages, dated drift, and campaign-level check receipts that print exactly what was checked. The receipt warrants what the record said; it never warrants that a vehicle is safe.","tools":["get_campaign","get_campaign_vintage","list_campaign_vintages","get_drift_events","list_campaigns_for_vehicle","get_posture_at_date","get_anchor","get_churn_series","verify_receipt","issue_check_receipt","ingest_run","archive_seal","churn_publish"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — sunset claims witnessed against registry history: a \"deprecated\" or \"removed\" claim is PROVEN only when a witnessed snapshot pair supports it; the migration diff is generated from the witnessed before/after schemas, never scraped docs. A claim with no witnessed pair behind it returns UNPROVEN — there is no announcement input surface at all, and the bench's plausible announced claims (with evidence text supplied) all returned UNPROVEN.","Every ingested snapshot is SHA-256 hashed over its canonical JSON and hash-chained in ingest order (chain_hash = sha256(prev_hash + snapshot_hash)); every finding cites both snapshot hashes of the witnessed pair, recomputed independently at bench and matched exactly (from 7ebb2386…411f5 / to cd563c11…5c4ab on the bundled weather fixtures).","Detection over a witnessed pair: tools removed, tools newly deprecated, version changes, and schema-breaking changes (property removed / property type changed / required added) — bench-exact on the fixture pair: 1 removed (legacy_lookup), 1 newly deprecated (get_alerts), 1 schema-breaking (get_forecast, required_added: units), version 1.0.0→2.0.0; the unchanged tool (convert_units) appears nowhere in findings.","Tamper gate (bench defect D1, fixed v0.1.1, re-benched): every proof-issuing surface is gated on full chain verification — verify_sunset_claim returns UNPROVEN + chain_invalid on a tampered ledger, and detect_sunsets / migration_diff / ingest_snapshot refuse with CHAIN_INVALID; a one-bool edit to the ledger mints no PROVEN and no findings.","Migration diff for an agent's config: per used tool — removed / deprecated / schema_breaking (with witnessed schema-change detail) / unchanged / not_in_witnessed_snapshots, generated from witnessed before/after schemas only.","Honest scope: LOCAL / fixture in v0.1.1 — ingests local registry snapshot JSON files only; it does not crawl live registries, fetch any URL, or scrape documentation. Python 3 standard library only; no network code exists in the package; no payment anything, no accounts, keys, credentials, or checkout."],"categories":["Agent Infrastructure","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1 fix (repo @ 88f2aa6): probe 5 chain attacks PASS 4/4 + strict extras 9/9 — on a tampered ledger the previously-PROVEN claim returns UNPROVEN + chain_invalid: true, no forged PROVEN is minted, detect_sunsets / migration_diff / ingest_snapshot refuse CHAIN_INVALID; full prior suite re-run 44/44 (unwitnessed claims UNPROVEN, witnessed proof citing bench-recomputed snapshot hashes, fixture-pair detection exact, migration diff sane, hygiene 14/14). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 41/44, defect D1 HIGH — closed by this re-bench. Scope = LOCAL/fixture only: local JSON snapshot ingest, stdio transport, bundled weather fixtures. No live-registry claim is made or tested — none exists in v0.1.1, and the server honestly says so.","live_state_note":"Bench evidence: argus-batch-20261026/bench/sunset/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Live registry crawling — not in v0.1.1 by design (later phase); the server ingests local snapshot JSON files only and makes no live-registry claim","Hosted or remote serving — v0.1.1 is local stdio only","A schema_breaking claim type in verify_sunset_claim — by SPEC design the claim enum is deprecated|removed only; the schema-breaking proof surface is detect_sunsets / migration_diff, verified there at bench"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-sunset-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-sunset-mcp.png","name":"Eclipse Sunset","platforms":["MCP over stdio"],"pricing_model":"FREE — free local v0.1.1, open reference implementation; funnel role: the free radar feeds paid listing-hygiene and re-bench work. No payment anything in this server.","problem_statements":["A registry announcement says a tool my agent depends on is deprecated — I need that claim proven against witnessed registry history, not trusted from the announcement","When a server ships a new version, I need to know exactly which tools in my agent's config were removed, deprecated, or schema-broken — as a diff generated from the witnessed before/after schemas","If the snapshot ledger itself was tampered with, I need every proof surface to refuse or flag it — never mint claims from forged data"],"source_refs":["argus-batch-20261026/specs/eclipse-sunset-mcp-SPEC.md","eclipse-sunset-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/sunset/VERDICT.md","argus-batch-20261026/bench/sunset/REBENCH-1.md"],"status":"in-development","tagline":"MCP deprecation radar: detects deprecated/removed tools and versions from witnessed, hash-chained registry snapshots and generates a migration diff for an agent's config.","tools":["ingest_snapshot","detect_sunsets","migration_diff","verify_sunset_claim","chain_status"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — the tax answer ships as a sealed, vintage-stamped witness receipt (jurisdiction + rate + rule version at order time), so a later audit replays the EXACT basis; tax APIs return answers, not evidence. verify_receipt replays the exact fixture rule at the receipt's vintage: a receipt whose rate doesn't match its vintage's rule is INVALID, and an old receipt keeps verifying against the OLD rule after a newer vintage is added.","Forgery resistance benched, including the hard case: a receipt re-sealed so its own hash is self-consistent while claiming the new rate at the old vintage is still INVALID, because verification replays the fixture rule at the receipt's vintage instead of trusting the seal (bench forgery matrix 22/22).","No bare-answer path exists: every determination ships a sealed receipt (receipt_hash + inputs_hash + rule version + vintage), and receipt_basis returns the exact rule record that produced it, resolved by the receipt's own vintage. Unknown jurisdiction, category, or vintage returns a clean refusal — no rate is invented, no latest-fallback, no fuzzy match.","Honesty envelope by construction: every determination output carries demo_label 'DEMO — FIXTURE DATA — NOT TAX ADVICE — NOT REAL RATES', scope 'LOCAL / fixture-vintage ONLY', and source 'FIXTURE-DEMO'. The bundled table holds 13 rules across 5 fictional jurisdictions (Fixture Aurora/Boreal/Cascadia/Delta/Ember) — DEMO/fixture rates only, NOT tax advice, no live tax determination claim anywhere.","Fix-before-live defects disclosed on the bench record (all LOW, none hidden): D1 the seal is an unkeyed local SHA-256 hash seal — VALID means consistent with the fixture rule at its vintage, not server-issued, and _verify does not assert the source/demo_label/scope constants; D2 refusal responses carry no DEMO envelope (no rate or advice is emitted on a refusal); D3 the advertised additionalProperties: false schemas are not enforced in dispatch (extra argument keys are silently ignored). D1 must be closed before any hosted/live scope.","Python 3 standard library only; MCP over stdio; zero network calls and zero payment-processing code in the package (bench AST audit). Pricing is metadata only — paid access is via the Eclipse Bazaar bench-order path only; no checkout, payment, or buy-now surface exists."],"categories":["Trust & Receipts","Compliance & Regulation"],"certification":{"bench_verdict":"CERTIFIED (local, fixture-vintage)","certified":true,"certified_scope":"CERTIFIED (local, fixture-vintage) — Verity independent bench 2026-10-26 (repo @ ec06f2e): 81/81 checks passed, two consecutive runs. Replay fidelity 11/11 (an old receipt verifies against the OLD fixture rule after a newer vintage is added; receipt id/hashes recomputed independently per SPEC §6); forgery matrix 22/22 (naive tamper INVALID on every field; re-sealed forgeries — including the new rate claimed at the old vintage — still INVALID, because verify_receipt replays the fixture rule at the receipt's vintage instead of trusting the seal); N-check 18/18 (no bare-answer path; unknown jurisdiction/category/vintage refuse cleanly and no rate is ever invented); honesty sweep 12/12 (DEMO envelope on every determination output; zero real-rate, tax-advice, or live-determination claims); hygiene 18/18 (zero network/payment code; exactly the 4 spec tools). Scope = LOCAL / fixture-vintage ONLY: local fixture lookup, stdio transport, bundled fictional fixture rates (13 rules, 5 fictional 'Fixture *' jurisdictions). DEMO rates only — NOT tax advice; no live tax determination is made by the product or tested here. Defects D1–D3 (all LOW) stand on the record as fix-before-live and are not hidden: D1 unkeyed seal (VALID means 'consistent with the fixture rule at its vintage', not 'issued by this server'; _verify does not assert source/demo_label/scope constants), D2 refusal responses carry no DEMO envelope, D3 advertised additionalProperties: false schemas not enforced in dispatch (extra argument keys silently ignored). Any live phase remains behind the SPEC §2 counsel gate (licensed data source + legal counsel review + explicit owner gate), and D1 must be closed before any hosted/live scope.","live_state_note":"Bench evidence: argus-batch-20261026/bench/nexus-witness/VERDICT.md (Verity, independent bench over stdio JSON-RPC; rates and hashes recomputed independently from fixtures/rates.json + SPEC §6). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Live tax determination — not in v0.1 by design: no real jurisdiction, real rate, tax-advice, or filing surface exists; any live phase remains behind the SPEC §2 counsel gate (licensed data source + legal counsel review + explicit owner gate) and is out of scope for this verdict","Hosted or remote serving — v0.1 is local stdio only; bench defect D1 (unkeyed seal) must be closed before any hosted/live scope","Server-issued authenticity — the seal is an unkeyed local SHA-256 hash seal, disclosed in SPEC §2/§6; VALID means 'consistent with the fixture rule at its vintage', not 'issued by this server' (bench defect D1)"],"scorecard_ref":null,"scorecard_url":null},"icon":"eclipse-nexus-witness-mcp/icon-512.png","id":"eclipse-nexus-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-nexus-witness-mcp.png","name":"Eclipse Nexus Witness","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.25/check (PC-2) with sealed receipt, via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; v0.1 contains no payment, checkout, or billing code. Repository is PRIVATE (priced-product policy).","problem_statements":["My agent checked out a cross-border order last quarter — I need to prove exactly which rate, jurisdiction, and rule version produced its tax figure, not just re-ask an API what today's answer is","A tax API returned a number with no evidence attached — I need the determination itself to ship as a sealed, replayable witness receipt my auditor can verify","If someone edits the receipt after the fact — or re-seals it claiming a newer rate at an older date — I need verification to catch it by replaying the rule that was in force at the receipt's vintage"],"source_refs":["argus-batch-20261026/specs/eclipse-nexus-witness-mcp-SPEC.md","eclipse-nexus-witness-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/nexus-witness/VERDICT.md"],"status":"in-development","tagline":"Sales-tax determination witness for agent checkouts: sealed, vintage-stamped receipts (jurisdiction + rate + rule version at order time) an agent can attach to every order. LOCAL / fixture-vintage ONLY — fictional jurisdictions, DEMO rates, NOT tax advice, NOT real rates.","tools":["determine","verify_receipt","list_rules","receipt_basis"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — the claim pack is transferable on resale because it is bound to the product serial + sealed purchase proof (buyer mandate ref + retailer receipt ref), not to a retailer account login. verify_pack recomputes the seal from the serial, bindings, and transfer chain alone — no account credential, no original-holder proof. Bench: register → transfer in one process, then verify_pack by pack_id only in a fresh process = VALID with the original holder uninvolved; the exported pack object also verifies VALID in the fresh process with bindings intact.","Sealed bindings + chained transfers: the five bindings (serial, product_ref, buyer_mandate_ref, retailer_receipt_ref, purchase_ts) are immutable at registration; transfer appends a chained record (each transfer's prev_seal equals the actual superseded seal, genesis prev_hash GENESIS) and re-seals without ever editing the bindings. Bench tamper matrix: 5/5 bound fields → INVALID, 11/11 chain tampers → INVALID, 6/6 supplied-pack attacks (seal transplant, naive SHA-256 reseal without the HMAC key, chain truncation + holder rollback, replayed duplicate transfer, seal deleted, mandate swap) → INVALID; a tampered pack refuses transfer with PACK_INVALID and claim_check reports transferable:false.","Full-content seal (v0.1.1 fix for bench defect D1, MEDIUM): the seal now covers the complete pack object minus the seal field, and verify enforces strict structure — any key outside the specced top-level/binding/transfer sets, a missing or wrong-typed field, or a scope/seal_type outside the spec vocabulary (scope must be exactly LOCAL/fixture) verifies INVALID, supplied or stored. get_pack refuses structurally out-of-spec stored packs (PACK_INVALID) instead of serving injected or relabelled content as sealed pack content. Re-bench D1 attacks PASS 26/26, including bindings.injected_coverage = 'lifetime-full' and a top-level scope relabel to 'LIVE/production' — both INVALID.","Advertised schemas enforced at dispatch (v0.1.1 fix for bench defect D2, LOW): required fields present, declared types exact (an int purchase_ts or a list serial is a clean validation error, never coerced via str()), and extra argument keys rejected per additionalProperties: false. Re-bench D2 attacks PASS 24/24 — every rejected attempt registered nothing, a serial burned by a rejected attempt remains registrable with correct types, and rejected calls left a good pack untouched and VALID.","Disclosed seal break (not hidden): packs sealed under v0.1.0's projected seal verify INVALID under v0.1.1 — the bench crafted a pack with the exact v0.1.0 formula under the same demo key and confirmed the break is real. At LOCAL/fixture scope there is no migration: fixture packs are re-registered (SPEC Bench Fix addendum + BUILD-RECORD state this plainly). Any future scope upgrade would need a migration story.","Honest scope: LOCAL / fixture only — registrations operate on fixture purchase records supplied by the caller (refs/strings the caller asserts); no retailer, manufacturer, or payment network is contacted. Seals are HMAC-SHA256 with a local demo key (runtime-generated into gitignored keys/demo.key, mode 0600; bench hygiene 6/6 — no key material in tree or history). Python 3 standard library only; MCP over stdio; exactly the 5 specced tools; no payment anything. The pack is a witness record, not a warranty contract: no adjudication, coverage, eligibility, or enforceability claim exists anywhere in the product."],"categories":["Trust & Receipts","Agent Commerce / Procurement"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1/D2 fix round (repo @ 6fd6784): 96 probes recorded, 95 asserted PASS, 0 FAIL, 1 observation (O1, design-consistent, no condition attached). D1 attacks PASS 26/26 (supplied-pack injections/relabels/wrong-types → INVALID; store copies → INVALID + transfer refused; get_pack structural refusal 3/3); D2 attacks PASS 24/24 (wrong-type and extra-field arguments rejected cleanly on all five tools, zero coercion, nothing registered by a rejected call); P2 tamper matrix PASS 5/5 bound fields + 11/11 chain + 6/6 supplied-pack attacks; P4 negative space PASS 18/18 (unregistered serial = plain negative, duplicate serial SERIAL_ALREADY_REGISTERED, unknown tools NO_SUCH_TOOL); P1 mechanism spot-check PASS 3/3 (fresh-process verify VALID after transfer, no original holder). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 67 asserted PASS / 0 hard FAIL, defects D1 (MEDIUM, unsealed-field injection) + D2 (LOW, schemas unenforced) — both closed by this re-bench. The v0.1.0 seal break is verified real and its disclosure judged honest and complete for LOCAL/fixture scope: packs sealed under v0.1.0 verify INVALID under v0.1.1, no migration, fixtures re-registered. Scope = LOCAL/fixture only: caller-supplied fixture purchase refs, stdio transport, HMAC-SHA256 demo seal with a local demo key. The pack is a witness record, not a warranty contract — no adjudication, coverage, eligibility, or enforceability is claimed by the product or tested here. Observation O1 stands on the record: get_pack refusal is structural-only by design (a pure value tamper is still returned by get_pack but gated everywhere it matters — verify INVALID, claim_check transferable:false, transfer refused); consumers must treat verify_pack, not get_pack, as the validity gate (SPEC §5.3). Bench note D3 (informational, by design): transfer requires no holder authorization — possession of pack_id is a bearer capability, exactly as SPEC §3/§5 specify for v0.1; it must be revisited before any hosted/live scope.","live_state_note":"Bench evidence: argus-batch-20261026/bench/warranty/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, store copies only). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Live retailer, manufacturer, or payment integration — not in v0.1.1 by design: no third party is contacted and no claim is filed anywhere; registrations operate on caller-supplied fixture refs only","Hosted or remote serving — v0.1.1 is local stdio only; transfer is a bearer capability on pack_id possession (bench D3, informational, by SPEC design) and must be revisited before any hosted/live scope","Warranty adjudication, coverage, eligibility, or enforceability — none exists in the product at any scope; the pack is a witness record, not a warranty contract","Migration of v0.1.0-sealed packs — none exists by disclosed design: v0.1.0 packs verify INVALID under v0.1.1 and fixture packs are re-registered (SPEC Bench Fix addendum)"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-warranty-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-warranty-mcp.png","name":"Eclipse Warranty","platforms":["MCP over stdio"],"pricing_model":"FREE — free local v0.1.1; funnel role: free warranty registration drives Eclipse Procure order volume and Till receipts. No payment anything in this server — no price, no checkout, no payment language applies.","problem_statements":["My agent bought a product for me — I need the warranty evidence bound to the product's serial and the sealed purchase proof, not locked inside a retailer account login","When the product is resold, I need the claim pack to transfer with it and still verify — without the original buyer, their account, or their participation","If anyone adds a field to the pack, relabels its scope, or edits a binding or a transfer record after the fact, I need verification to fail — nothing altered may pass as sealed"],"source_refs":["argus-batch-20261026/specs/eclipse-warranty-mcp-SPEC.md","eclipse-warranty-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/warranty/VERDICT.md","argus-batch-20261026/bench/warranty/REBENCH-1.md"],"status":"in-development","tagline":"Warranty registration witness for agent purchases: binds serial, buyer mandate, and retailer receipt into one transferable claim pack. LOCAL/fixture scope only — the pack is a witness record, not a warranty contract; no adjudication, coverage, or enforceability is claimed.","tools":["register_warranty","get_pack","verify_pack","transfer_pack","claim_check"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — session-bound fingerprint chain: pin_session canonical-hashes (toolprint-canonical-v1, SPEC §3) every tool's name + description + inputSchema at session start and stores the pin as the genesis of a hash-chained session record; verify_call recomputes the hash of the exact description/schema presented at call time — presented hash == pinned hash = VALID, any difference = INVALIDATED, appended to the chain as a proof record carrying BOTH hashes. A swapped description cannot be quietly un-swapped: swap-back returns VALID again but the INVALIDATED proof record stays in the chain, unaltered. Bench: independent canonicalizer (written from SPEC §3 alone) reproduces all fixture fingerprints + the session fingerprint byte-exact; a 1-character description edit and a schema-only property change both INVALIDATE; bundled swaps give drift CHANGED×2 / SAME×1 / ADDED×0 / REMOVED×0 exactly; list reorder does NOT invalidate (fingerprints are per-tool, session tools sorted by name).","Session-bound, not a static scan: a tool list fully clean at pin time whose description is swapped AFTER pinning is caught by verify_call — a static pre-flight scanner (e.g. mcp-scan) has no session state to catch a post-pin swap. Controls bench-verified: verify on an unpinned session = UNKNOWN_SESSION (never VALID), on a never-pinned tool = UNKNOWN_TOOL, with a never-pinned description = INVALIDATED; unknown tool names (e.g. proxy_call) = NO_SUCH_TOOL refusal stating it does not proxy live MCP traffic.","Caller-anchored chain head (v0.1.1 fix for bench defect D1, MEDIUM): a bare hash chain is internally consistent after its LAST record is deleted, so tail truncation — typically deleting the INVALIDATED proof record — was undetectable in v0.1. v0.1.1 returns head_hash + record_count from pin_session, verify_call, and get_session_chain, and get_session_chain accepts them back as expected_head_hash / expected_record_count: anchored tail truncation = chain_valid:false, TAIL_TRUNCATION_SUSPECTED; a same-count forged tail = CHAIN_HEAD_MISMATCH; interior tamper (edit / delete / reorder of any non-tail record) stays self-detecting with no anchor needed (CHAIN_RECOMPUTE_FAILED). Without an anchor the response carries anchored:false and chain_valid asserts internal consistency only — never implied truncation detection (SPEC §10; caller duty: anchor at pin, re-anchor after every verify).","Independent recompute by design: fingerprint_tool returns the exact canonical JSON preimage of every fingerprint, so any caller can recompute every hash with any SHA-256 implementation; detect_drift reports per-tool SAME / CHANGED / ADDED / REMOVED vs the pin with both fingerprints, read-only (drift checks never append to the chain). Exactly 5 tools on the wire; every envelope carries scope LOCAL + canonicalization toolprint-canonical-v1; clean coded errors with no partial state (a failed pin creates no session, a refused verify appends no record).","Honest scope: LOCAL only — v0.1.1 operates only on caller-supplied tool lists/descriptions plus the bundled fixtures. It does NOT proxy live MCP traffic, does not connect to remote MCP servers, does not execute any described tool, and makes no network calls. Python 3 standard library only; MCP over stdio; no payment, checkout, metering-enforcement, or billing code — the $0.05/call term is a commercial term for hosted/commercial deployment, not a build feature."],"categories":["Agent Infrastructure","Trust & Receipts"],"certification":{"bench_verdict":"CERTIFIED (local)","certified":true,"certified_scope":"CERTIFIED (local) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 240c329): 18/18 PASS, deterministic across 2 runs. Anchored tail-truncation (the v0.1 D1 repro) detected as TAIL_TRUNCATION_SUSPECTED with chain_valid:false; unanchored reads explicitly carry anchored:false / anchor_match:null and assert internal consistency only; a same-count forged tail (independently recomputed record_hash, invisible to bare-chain recompute) is caught as CHAIN_HEAD_MISMATCH by the caller anchor alone; anchor material (head_hash + record_count) present and advancing on pin_session, verify_call, and get_session_chain, with tool_version 0.1.1 on every envelope. Regression spot-checks PASS: verbatim presented description = VALID, swapped-fixture search = INVALIDATED with pinned 332a2771… / presented 6246163e…, and the v1 fixture fingerprint + SPEC §3.1 canonical preimage are byte-exact unchanged by the fix. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local), 40/40 probes PASS, defect D1 (MEDIUM — tail truncation erased a proof record undetectably, falsifying SPEC §2.3's unqualified tamper claim) — closed by this re-bench via implementation (caller-anchored head) plus the qualified SPEC §10 claim. Scope = LOCAL only: a local verification engine operating on caller-supplied tool lists/descriptions plus bundled fixtures, stdio transport; it does NOT proxy live MCP traffic, does not connect to remote servers, does not execute described tools, and makes no network calls — no live-traffic claim is made by the product or tested here. Claim honesty PASS with 1 non-blocking observation on the record: SPEC §2.3's original unqualified sentence and §8 item 4 remain verbatim in the body, neutralized only by §10's supersession header; the document read whole is accurate. §9.3 signed/external anchoring for cross-party evidence remains open by design and is not claimed.","live_state_note":"Bench evidence: argus-batch-20261026/bench/toolprint/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, isolated state dirs, own canonicalizer from SPEC §3). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Live MCP traffic proxying or interception — not in v0.1.1 by design: the engine never proxies live traffic, connects to remote servers, or executes described tools; a live-traffic scope upgrade requires its own spec + bench","Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied tool lists + bundled fixtures","Cross-party evidence use — signed chain heads / external anchoring (SPEC §9.3) remain open by design and are not claimed; unanchored chain reads assert internal consistency only, never truncation detection","Per-call metering or payment enforcement — none exists in v0.1.1 by design: the $0.05/call (PC-3) term is commercial metadata for hosted/commercial deployment; no payment, checkout, or billing code is in the server"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-toolprint-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-toolprint-mcp.png","name":"Eclipse Toolprint","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.05/call (PC-3) for hosted/commercial deployment, via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; v0.1.1 contains no payment, checkout, metering-enforcement, or billing code. Repository is PRIVATE (priced-product policy).","problem_statements":["An MCP server showed my agent a benign tool description at review time, then silently swapped it mid-session — I need every call bound to the hash of the exact description the agent saw when it decided to call","A static scanner cleared a server once, at rest — I need a session-layer proof that catches a description or schema changed AFTER the pin, with the invalidation recorded so it cannot be quietly un-swapped","If someone deletes the proof record itself from the tail of the record store, I need that loss detected — not a shorter chain that still reports itself valid"],"source_refs":["argus-batch-20261026/specs/eclipse-toolprint-mcp-SPEC.md","eclipse-toolprint-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/toolprint/VERDICT.md","argus-batch-20261026/bench/toolprint/REBENCH-1.md"],"status":"in-development","tagline":"Pins MCP tool descriptions/schemas at session start and catches silent mid-session changes: every verified call carries the hash of the exact description the agent saw, and a swapped description is invalidated with a hash-chained proof record. LOCAL scope only — a local verification engine on caller-supplied tool lists + fixtures; it does NOT proxy live MCP traffic, connect to remote servers, or execute described tools.","tools":["pin_session","verify_call","get_session_chain","detect_drift","fingerprint_tool"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — return mandate cryptographically bound to the original order receipt, with condition/serial attestation at return initiation (SPEC §3): register_purchase seals order_ref + serial + amount + the full mandate record + the full receipt record together and derives receipt_hash + mandate_hash inside the sealed purchase; initiate_return authorizes only when the sealed purchase exists and its seal recomputes, the presented serial equals the sealed serial, the sealed mandate's scope explicitly includes returns, and a well-formed condition attestation {condition, attested_by, ts} is present. The sealed return record carries receipt_hash + mandate_hash + purchase_seal copied from the sealed purchase, so the return → receipt + mandate binding is recomputable by verify_return without trusting caller assertions. Bench: bindings independently recomputed from fixture data (purchase_id, both hashes, purchase HMAC seal, return HMAC seal — all match server values); seal-transplant forgery onto altered amount/serial/hashes/attestation rejected INVALID x8.","A receipt-free return can never authorize: no purchase record → DENIED / NO_PURCHASE_RECORD, and there is no override tool, no manual-approve path, and no way to mint a return except through the check chain (existence → seal → serial → mandate scope → attestation, in spec order). Bench N-check: wrong/case-variant/whitespace/empty serial → SERIAL_MISMATCH x4; mandate without returns scope → MANDATE_SCOPE_NO_RETURNS (including smuggled returns-mandate + force flags in the initiate args — the sealed mandate governs); missing/malformed attestation → ATTESTATION_MISSING x9; tampered purchase store (amount edited, mandate edited to ADD returns scope, receipt_hash edited) → SEAL_INVALID, never authorized. Denial is a result, not an exception, with a closed reason-code set (NO_PURCHASE_RECORD · SERIAL_MISMATCH · MANDATE_SCOPE_NO_RETURNS · ATTESTATION_MISSING · SEAL_INVALID); every denial is logged for list_denials. Override audit: tools/list = exactly the 5 spec tools; 10 override-shaped calls (admin_authorize, force_return, manual_approve, refund_now, …) all NO_SUCH_TOOL.","Process hardening (v0.1.1 fix for bench defect D1, MEDIUM): strict argument-type validation at dispatch against the advertised inputSchemas (ids must be strings; amount must be an integer, booleans rejected; mandate/receipt must be objects) plus store-level backstops and a catch-all tools/call path — no malformed input of any shape may terminate the process. Re-bench: 6/6 original crash vectors clean in fresh processes, 56-case wrong-type fuzz sweep + 15 protocol-garbage cases, server alive and answering tools/list (5 tools) after every case. Spec'd domain semantics preserved under the hardening: a malformed condition_attestation is still DENIED / ATTESTATION_MISSING (not a dispatch error) and null ids keep their §5 domain outcomes.","Response-shape conformance (v0.1.1 fix for bench defect D2, LOW): every response on every branch — including all verify_return INVALID paths and list_denials (response + stored denial entries) — now carries scope: \"LOCAL/fixture\" and seal_type: \"HMAC-SHA256 demo (local key)\" uniformly, per SPEC §5. Re-bench D2 audit reached and checked every INVALID branch via independently re-sealed records.","Honest scope: LOCAL/fixture only — v0.1.1 operates on caller-supplied fixture purchase records (receipt + mandate); no network calls; no merchant, carrier, payment, or logistics system is contacted. Authorization is a sealed local record, NOT a real-world returns/logistics action: it does not ship, receive, refund, restock, or instruct any third party. Seals are HMAC-SHA256 with a local demo key (runtime-generated into gitignored keys/demo.key, mode 0600; bench hygiene: demo key value absent from tree + full git history). Python 3 standard library only; MCP over stdio; exactly 5 tools; no payment or checkout code — the $1.00/return term is a pricing statement only."],"categories":["Trust & Receipts","Agent Commerce / Procurement"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1/D2 round (repo @ 985fe9f): 57/57 re-bench checks PASS, and the prior full bench suite re-run against v0.1.1 scores 83/83 (v0.1: 80/83). D1 (MEDIUM — unhashable-typed ids crashed the stdio process via uncaught TypeError at store lookups) CLOSED: the bench's crash vectors (list/dict purchase_id / return_id across initiate_return, get_return, verify_return) each return a clean JSON-RPC error in a fresh process with the server alive and answering tools/list afterwards; a 56-case wrong-type fuzz sweep over every advertised argument of all five tools plus 15 protocol-garbage cases killed no process; bool-as-int amount rejected as a type error, never accepted as 1. D2 (LOW — seal_type missing on verify_return INVALID branches and list_denials vs SPEC §5 'all responses carry scope + seal_type') CLOSED: every verify_return branch (VALID and all INVALID paths, reached via independently re-sealed records) and the list_denials response + stored denial entries now carry both fields uniformly. Mechanism spot-check PASS, semantics unshifted: happy path AUTHORIZED with the return record's receipt_hash + mandate_hash + purchase_seal identical to the sealed purchase and verify_return VALID; wrong serial → DENIED / SERIAL_MISMATCH. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), bench suite 80/83, the SPEC §3 novel mechanism passing in full (every bypass denied with the spec'd code, binding independently recomputed, seal-transplant forgery rejected x8, override audit: exactly the 5 spec tools and 10 override-shaped calls all NO_SUCH_TOOL) with defects D1 + D2 — both closed by this re-bench per the prior verdict's stated upgrade path. Scope = LOCAL/fixture only: caller-supplied fixture purchase records (receipt + mandate), stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Authorization is a sealed local record, NOT a real-world returns/logistics action — it does not ship, receive, refund, restock, or instruct any third party, and no merchant, carrier, payment, or logistics system is contacted; nothing about real merchant/carrier/refund integration is claimed by the product or tested here.","live_state_note":"Bench evidence: argus-batch-20261026/bench/boomerang/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, independent hashlib/hmac recomputation, no repo imports; fresh server process per D1 vector and per fuzz case). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Real-world returns, logistics, refund, or restock action — not in v0.1.1 by design (SPEC §7 non-goals): no merchant, carrier, payment, or logistics system is contacted and no third party is instructed; authorization is a sealed local record only","Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture purchase records","Payment, checkout, or per-return metering enforcement — none exists in v0.1.1 by design: the $1.00/return term is commercial metadata (Procure per-order pattern); no payment or checkout code is in the server","Production key custody — seals use an HMAC-SHA256 demo key generated locally (gitignored keys/demo.key); no production key claim is made"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-boomerang-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-boomerang-mcp.png","name":"Eclipse Boomerang","platforms":["MCP over stdio"],"pricing_model":"PRICED — $1.00/return (per executed return, Procure per-order pattern), via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; v0.1.1 contains no payment or checkout code (the price is a stated term only). Repository is PRIVATE (priced-product policy).","problem_statements":["My buying agent needs to return a purchase — I need the return authorized only against the original purchase receipt and the mandate that governed the purchase, never on a bare claim","A receipt-free or wrong-serial agent return, or a mandate that never included returns, must be denied with a machine-readable reason — and there must be no override or manual-approve path around the check","If the purchase record or the return record is tampered with after the fact, I need verification to fail — the return's binding to the receipt hash, mandate hash, and purchase seal must be independently recomputable"],"source_refs":["argus-batch-20261026/specs/eclipse-boomerang-mcp-SPEC.md","eclipse-boomerang-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/boomerang/VERDICT.md","argus-batch-20261026/bench/boomerang/REBENCH-1.md"],"status":"in-development","tagline":"Governed returns for agent purchases: a return is authorized only if it binds to the original purchase receipt + mandate, with condition/serial attestation at return initiation. LOCAL/fixture scope only — authorization is a sealed local record, not a real-world returns/logistics action; nothing is shipped, received, refunded, or restocked, and no merchant or carrier is contacted.","tools":["register_purchase","initiate_return","verify_return","get_return","list_denials"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — auto-translation of the sealed Procure/Till mandate chain into generic reason-code evidence format (SPEC §3): ingest_dispute seals the dispute + mandate-chain + receipt records into one case with a chain hash; map_evidence translates that sealed chain, per dispute reason class, into evidence sections where every evidence element is traced to a specific mandate/receipt/dispute record id (source_record_id) — an untraced element cannot be emitted. The mandate facts translated are exactly the agent-commerce facts incumbents do not carry: who authorized what (authorized_by, agent_id, action), the authorization scope, transaction-within-scope derivation, and the drift-abort log (out-of-scope attempts the agent aborted), included whenever present. Bench P1: 11/11 elements traced to existing record ids, source_type consistent, values faithful; within_scope derivation arithmetic verified.","Completeness honesty — a packet built from an incomplete mandate chain is marked INCOMPLETE with each missing element named (dispute_id, dispute_reason_class, dispute_amount, dispute_order_ref, mandate_chain, mandate_authorization, mandate_scope, receipt_record, receipt_order_ref_match, receipt_amount); a missing evidence section renders MISSING with zero elements and evidence is never fabricated. Bench anti-fabrication battery PASS: each gap case validated INCOMPLETE naming the exact gap, packet marked INCOMPLETE, section MISSING/empty, zero banned evidence strings in evidence JSON or text rendering; drift-abort absence handled honestly (no_events_declared, zero elements, nothing invented).","Seal-gated translation + full-packet seal (v0.1.1 fixes for bench defects D1/D2, both HIGH): map_evidence/build_packet recompute the case seal before translating — a tampered stored case is a hard refusal (SEAL_INVALID), no packet is stored and the attacker value is emitted nowhere (re-bench C1: 6/6). The packet seal covers the FULL packet including text_rendering — appended/fabricated text, stored text tamper, and an edit-any-field sweep (12/12) all verify INVALID (re-bench C2: 5/5).","Receipt attribution + no null elements (v0.1.1 fixes for bench defects D3/D5): the receipts[0] fallback is removed — only a receipt whose order_ref equals the dispute's is receipt evidence; a mismatched receipt (ORD-OTHER-999 under both unauthorized and processing_error) renders receipt sections MISSING with zero elements, the packet is INCOMPLETE, and the mismatched record_id/order_ref/amount/merchant occur nowhere in packet JSON or text (re-bench C3: 8/8). Null-valued dispute fields emit no elements — order_identification renders MISSING when no present values exist, partial nulls emit only present values (re-bench D5: 6/6).","Keyed seal + honest scope: seals are HMAC-SHA256 with a runtime-generated local DEMO key (keys/demo.key, gitignored, mode 0600) — external re-seal attacks (unkeyed SHA-256, wrong-key HMAC, foreign-key store) all verify INVALID while the legitimate key-holder flow verifies VALID (re-bench C4: 7/7); the demo key proves 'unchanged since sealed under this local demo key' only, not a production/network signature. LOCAL/fixture scope only — packet generation only: no card network, issuer, merchant, or platform is contacted, no network calls, and the tool never files, submits, or transmits anything. Reason-code mapping is a small generic table (GEN-* codes) labelled generic — not any card network's proprietary reason codes, no network affiliation claimed. Python 3 standard library only; MCP over stdio; exactly 5 tools (submit_packet/file_chargeback/transmit_packet -> NO_SUCH_TOOL); no payment or checkout code — the $5.00/filing term is a pricing statement only."],"categories":["Trust & Receipts","Agent Commerce / Procurement"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C4/D5 round (repo @ 3f0668c): 39/39 scoped probes PASS, builder suite re-run 23/23. C1/D2 (HIGH — build_packet/map_evidence never verified the case seal, so a tampered chain was re-sealed into a VALID packet) CLOSED: tampered stored case (authorized_by -> buyer:mallory) -> validate_case case_seal_valid=false, map_evidence + build_packet hard refusal SEAL_INVALID, no packet stored, attacker value emitted nowhere (6/6). C2/D1 (HIGH — packet seal excluded text_rendering, so fabricated text verified VALID) CLOSED: seal now covers the full packet incl. text_rendering; supplied + stored text tamper INVALID and edit-any-field sweep 12/12 INVALID (5/5). C3/D3 (MED — mismatched receipt silently used via receipts[0] fallback) CLOSED: receipt sections MISSING, packet INCOMPLETE, mismatched receipt traced nowhere under 2 reason classes (8/8). C4/D4 (MED — external re-seal verified under unkeyed SHA-256) CLOSED: HMAC-SHA256 demo-key seals; unkeyed/wrong-key/foreign-key re-seals INVALID, legitimate key-holder flow VALID (7/7). D5 (LOW — null-valued elements in present sections) CLOSED: no null elements, partial nulls emit only present values (6/6). Spot-check P1 regression PASS (7/7): complete fixture COMPLETE + case_seal_valid=true, 11/11 elements traced, within_scope derivation correct, all 5 sections present, get_packet VALID. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 45/51 probes, core mechanism (traceability + anti-fabrication battery) passing in full with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: caller-supplied fixture dispute + mandate-chain + receipt data, stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Packet generation only — the tool never files, submits, or transmits anything, no card network/issuer/merchant/platform is contacted, and the generic GEN-* reason-code table is not any network's proprietary codes and claims no network affiliation; nothing about real filing, submission, or network acceptance is claimed by the product or tested here.","live_state_note":"Bench evidence: argus-batch-20261026/bench/rebuttal/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, fresh server process + isolated data dir + isolated key file per scenario; attack cases reused from prior suite). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Filing, submission, or transmission to any card network, issuer, merchant, or platform — not in v0.1.1 by design (SPEC §9 non-goals): packet generation only, no network calls at all","Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture dispute + mandate-chain + receipt data","Payment, checkout, or per-filing metering enforcement — none exists in v0.1.1 by design: the $5.00/filing term is commercial metadata (PC-7 pattern); no payment or checkout code is in the server","Proprietary network reason codes or network affiliation — mapping is a small generic GEN-* table, labelled generic; no legal advice or win/loss prediction is provided","Production key custody — seals use an HMAC-SHA256 demo key generated locally (gitignored keys/demo.key); the seal proves unchanged-since-sealed under that local demo key only, no production key claim is made"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-rebuttal-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-rebuttal-mcp.png","name":"Eclipse Rebuttal","platforms":["MCP over stdio"],"pricing_model":"PRICED — $5.00/filing (PC-7 pattern), via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; v0.1.1 contains no payment or checkout code (the price is a stated term only). Repository is PRIVATE (priced-product policy).","problem_statements":["My agent made a purchase that is now disputed — I need a chargeback rebuttal evidence packet built from the original Procure/Till mandate and receipt chain, with every evidence element traced to its source record","If the mandate chain is incomplete or a receipt does not match the disputed order, the packet must say INCOMPLETE and name the gap — evidence must never be fabricated or borrowed from another order","I need the packet sealed so any tampering — including editing its human-readable text rendering — is detectable, and a tampered case must never be re-sealed into a valid packet"],"source_refs":["argus-batch-20261026/specs/eclipse-rebuttal-mcp-SPEC.md","eclipse-rebuttal-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/rebuttal/VERDICT.md","argus-batch-20261026/bench/rebuttal/REBENCH-1.md"],"status":"in-development","tagline":"Chargeback rebuttal evidence packets for agent purchases: turns a Procure/Till mandate + receipt chain into a generic reason-code packet with every element traced to a source record. LOCAL/fixture scope only — packet generation only; never files, submits, or transmits anything, no card network or issuer is contacted, and reason codes are a small generic table, not any network's proprietary codes.","tools":["ingest_dispute","map_evidence","build_packet","validate_case","get_packet"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — a crawl receipt binds crawler identity (Herald-card-shaped id), license-terms hash, and content fingerprint in one recomputable record (SPEC §3): licensing and proof-of-license are the same artifact. publish_terms seals the terms record (terms_hash + terms_record_hash); record_crawl's binding_hash covers crawler_id, publisher_id, terms_version, terms_hash, content_fingerprint, url, and ts, and receipts hash-chain per publisher (receipt_hash = sha256(prev + binding), genesis = 64 zeroes, chains never cross publishers). Bench: binding, terms, and chain hashes all match the bench's independent recomputation from the SPEC §3 formulas, and tampering any bound element in an object copy or a store copy verifies INVALID for the tampered receipt and its chain successor.","Ledger-membership verification + terms-seal enforcement (v0.1.1 fixes for bench defects D1/D2): VALID is returned only for a receipt present in the sealed ledger passing the full per-publisher chain walk — a standalone object resealed with the public formula (forged crawler, fingerprint of content never crawled, or an identity swap of a genuine receipt) verifies INVALID with chain_valid: false (re-bench C1: 10/10). record_crawl and verify_receipt recompute the terms-record seal before trusting stored terms: a seal-broken terms record refuses minting (TERMS_SEAL_INVALID) and drives prior receipts INVALID with terms_status: seal_invalid, per-record (re-bench C2: 12/12).","Sealed-only meter + consistent reports + strict structure (v0.1.1 fixes for bench defects D3/D4/D5): meter_report derives every count from sealed receipt records only — garbage, unparseable, or unsealed appended lines are excluded from all totals and surfaced as rejected_lines (re-bench C3: appended garbage + unsealed lines leave totals and breakdowns unchanged, rejected_lines: 2). There is no separate counter and no tool-surface mutation path (fake set_meter/increment_meter/mint tools return NO_SUCH_TOOL). Filtered reports reconcile with themselves: total_receipts equals each breakdown sum under every filter combination (re-bench D4: 9/9). A supplied receipt carrying any key outside the specced receipt schema, or a tampered position, verifies INVALID (re-bench D5: 6/6).","Revocation is a status, not a rewrite: revoke_terms appends a revocation record; receipts under that terms version then verify TERMS_REVOKED with binding_valid: true and chain_valid: true — a revoked receipt remains provably a receipt that was issued, under terms no longer in force. record_crawl under revoked terms returns a TERMS_REVOKED refusal and mints nothing (ledger count and meter provably unchanged); re-revoke returns already_revoked: true; unknown terms return TERMS_NOT_FOUND. Duplicate {publisher, version} terms publication is refused (TERMS_VERSION_EXISTS) and prior receipts never verify against substituted terms.","Honest scope + disclosed LOW: LOCAL/fixture — RECEIPT MECHANICS ONLY. No crawling, no fetching, no network calls of any kind, no marketplace; callers supply crawler identity refs, publisher ids, license terms, and content fingerprints (SHA-256 hashes) — never content itself; Herald-card ids are shape-validated only, never resolved or authenticated. Python 3 standard library only; MCP over stdio; exactly 5 tools (unknown names return NO_SUCH_TOOL). The meter is recorded at $0.01/call with charged: false — no payment, checkout, wallet, or charging code exists in this package. Known LOW D6 (non-blocking, fix-before-live, disclosed on the bench record): a corrupt non-JSON store line is tolerated by meter_report (counted in rejected_lines) but crashes the non-meter tools — the server exits loudly instead of answering; no false VALID and no inflated meter results."],"categories":["Trust & Receipts","Publishing"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C3/D4/D5 round (repo @ d3af623): 48/48 scoped probes PASS, 0 FAIL. C1 (D1, HIGH — a standalone receipt object resealed with the public formula verified VALID with chain_valid: true) CLOSED: non-ledger objects (resealed forgery at position 1 and 99, resealed identity-swap of a genuine receipt) return INVALID with chain_valid: false and in_ledger: false; forged receipt_id returns RECEIPT_NOT_FOUND; the genuine ledger receipt still verifies VALID by id and by object (10/10). C2 (D2, MEDIUM — the terms-record seal was never enforced) CLOSED: both store-swap variants (hash-only; text+hash with stale seal) make record_crawl refuse with TERMS_SEAL_INVALID (nothing minted, ledger unchanged) and prior receipts verify INVALID with terms_status: seal_invalid; an untouched publisher in the same store is unaffected (12/12). C3 (D3, MEDIUM — the meter counted unsealed ledger lines) CLOSED: after appending a non-JSON garbage line and a well-formed-but-unsealed line, meter_report totals stay at the sealed count with rejected_lines: 2 surfaced and breakdowns byte-identical (5/5). D4 (LOW — filtered meter reports were internally inconsistent) CLOSED: for filters {}, {publisher}, {crawler}, {publisher+crawler}, total_receipts equals every breakdown sum and metered_total_usd equals total × 0.01 (9/9). D5 (LOW — unbound fields on a supplied receipt were not authenticated) CLOSED: an extra field (license_scope) or a tampered position verifies INVALID with structure_valid: false (6/6). Spot-check PASS 6/6: happy-path hashes match the bench's independent recomputation and revocation semantics are unregressed (revoked receipts verify TERMS_REVOKED with binding_valid: true, chain_valid: true; record_crawl under revoked terms refuses and mints nothing). Known LOW, non-blocking, disclosed (D6, fix-before-live): a corrupt non-JSON store line is handled by meter_report (counted in rejected_lines) but crashes the non-meter tools via the shared loader — the server exits instead of answering; the failure is loud and safe-direction (no false VALID, no inflated meter) and is recorded as fix-before-live for any hosted/long-running deployment. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 49/49 asserted probes PASS with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: receipt mechanics only — no crawling, no fetching, no network calls, no marketplace; callers supply content fingerprints (SHA-256 hashes) and Herald-card-shaped crawler identity refs, never content; the $0.01/call meter is recorded, never charged in v0.1.","live_state_note":"Bench evidence: argus-batch-20261026/bench/crawlway/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code, all hashes recomputed independently from SPEC §3 formulas; builder suite 25/25). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Crawling, fetching, or any network access — not in v0.1.1 by design (SPEC §2 scope): receipt mechanics only; callers supply fingerprints (hashes), never content","Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture terms, identities, and fingerprints; known LOW D6 (a corrupt non-JSON store line crashes non-meter tools, failing loud) is fix-before-live for any hosted/long-running deployment","Payment, checkout, or charging — none exists in v0.1.1 by design: meter_report records the meter at $0.01/call with charged: false; the price is commercial metadata (PC-1 pattern) and no payment or checkout code is in the server","Identity resolution or authentication of Herald cards — v0.1.1 validates the herald:<kind>:<id> shape only; no card is resolved or authenticated","A marketplace or listing function — none exists in v0.1.1; receipts are sealed, verified, metered, and revoked locally only"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-crawlway-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-crawlway-mcp.png","name":"Eclipse Crawlway","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.01/call (PC-1 pattern), via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; v0.1.1 records the meter only — the meter is never charged in v0.1 and there is no payment or checkout code (the price is a stated term only). Repository is PRIVATE (priced-product policy).","problem_statements":["I publish content that agent crawlers access — I need a sealed license receipt per crawl that proves who crawled what, under which license terms, as one recomputable artifact","If my license terms change or are revoked, receipts under the old version must flip to TERMS_REVOKED without losing proof they were issued, and no new receipts may mint under revoked or substituted terms","My usage meter must derive only from sealed receipts — never from a counter that can drift, and never counting garbage or unsealed records that were appended to the store"],"source_refs":["argus-batch-20261026/specs/eclipse-crawlway-mcp-SPEC.md","eclipse-crawlway-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/crawlway/VERDICT.md","argus-batch-20261026/bench/crawlway/REBENCH-1.md"],"status":"in-development","tagline":"Pay-per-crawl licensing receipts for publishers: a sealed receipt binding crawler identity, license-terms hash, and content fingerprint in one recomputable record, hash-chained per publisher and revocable by terms version. LOCAL/fixture scope only — receipt mechanics only; no crawling, no fetching, no network calls, and the $0.01/call meter is recorded, never charged in v0.1.","tools":["publish_terms","record_crawl","verify_receipt","revoke_terms","meter_report"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — probe receipts are hash-chained into a listing's trust record, so SLA claims are witnessed history, not vendor self-report, and a badge auto-degrades on witnessed downtime (SPEC §2): every probe appends a receipt {seq, ts, target_id, vantage, vantage_mode, scope, ok, status, latency_ms, prev_hash, hash} where hash = sha256(canonical_json(receipt_without_hash)) and prev_hash is the previous receipt's hash for that target (genesis = 64 zero hex chars). Availability and badge tier are recomputed only from receipts; no tool accepts a self-reported uptime/SLA input. Bench: the bench independently recomputed every sha256 from the SPEC canonical form — match; field/ts edits, single-receipt rehash, middle/first deletion, and reorder on store copies were all detected.","No self-report path + badge ladder (original bench P1/P4 PASS): 14/14 canonical self-report shapes (uptime, availability, sla, sla_claim, claimed_uptime, availability_claim, self_report, self_reported_uptime, full Checkly-dashboard payload) refused SELF_REPORT_NOT_ACCEPTED on every tool, creating no target and no receipts; 12 setter/import tool names all NO_SUCH_TOOL. Exactly the 5 spec tools exist, with no setter/import/edit or badge/self-report input in any schema. Badge derived only from receipts in the window: 0 → NO_WITNESSED_HISTORY; 1–4 @100% → INSUFFICIENT_HISTORY; 5 @100% → UP; 19/20 = 0.95 → UP; 9/10 = 0.90 → DEGRADED; 4/5 = 0.80 → DEGRADED; 7/10 = 0.70 → DOWN; window honored exactly (default 20, clamps at 100). Availability math exact: localhost sequence [200,503,200,404,200,503,201] → 4/7 = 0.5714285714285714; fixture error/down → 0.0; connection-refused localhost → ok=false status=0 receipt; 0 receipts → NO_WITNESSED_HISTORY, availability null; targets isolated.","Redirects never followed + crash-proof + structural refusal (v0.1.1 fixes for bench defects D1/D2/D3, re-bench PASS): probes use a no-redirect opener — the registered endpoint's own response (incl. 3xx, recorded with its true status) is the witnessed outcome, no same-origin/cross-origin/external hop is ever probed (re-bench 2a/2b/2c: same-origin 302→503, cross-origin 302→200, external-shaped 302, loop and chain all witness 302 only, destination hit counts unchanged 0→0). Malformed arguments can no longer kill the process: target_id type-checked in every tool, urlparse ValueError → clean validation error, dispatch + main-loop guards map unexpected exceptions to clean isError (re-bench P6: 21/21 checks, aggregating 82 fresh-process vectors, 0 crashes). Advertised schemas are enforced at dispatch (unknown keys rejected structurally) and self-report detection is normalized (case/camelCase/separators/suffixes + nested scan) — 19 variant shapes all refused, availability stayed exactly 0.5, receipt count and badge unchanged.","Honest scope — LOCAL ONLY: probes execute only against localhost (127.0.0.1/localhost/::1 HTTP) or fixture:// endpoints; 17 external/non-local URL shapes (incl. 127.0.0.1@evil.com, hex/decimal IP, sub.localhost, file:, ftp:) all SCOPE_EXTERNAL_REFUSED; conflicting re-register TARGET_CONFLICT, identical idempotent; LOCAL + local-simulated labels verified on receipts, trust record, badge, and verify outputs; fixture seed never auto-loaded. 'Vantage points' are distinct local probe identities (local-vantage-a/b/c), labeled vantage_mode: local-simulated in every artifact — they are NOT geographically independent and are never described as such. Python 3 standard library only; MCP over stdio; exactly 5 tools. No checkout/payment code exists — the $299/mo feed license is a pricing term only.","Disclosed LOWs, open as documented for LOCAL scope (non-blocking): D4 — the receipt hash chain is unauthenticated (plain sha256, no key/signature, as specified): anyone with write access to the store file can append a correctly-hashed forged receipt or truncate the tail undetectably (bench on store copies: forged append verified valid=true checked=7; last-receipt deletion valid=true checked=5); consumers should pin chain_head from get_trust_record externally and call verify_chain separately (get_trust_record/badge_state do not embed chain validity); a future version should HMAC/sign receipts. D5 — vantage provenance is free-form: probe_now accepts arbitrary vantage names verbatim (a name like aws-us-east-1-real-geo appears in the receipt and per-vantage trust record), mitigated not eliminated by the vantage_mode: local-simulated stamp on every receipt, and the list form of vantages is uncapped while the count form caps at 10."],"categories":["Trust & Receipts","Certification & Testing"],"certification":{"bench_verdict":"CERTIFIED (LOCAL)","certified":true,"certified_scope":"CERTIFIED (LOCAL) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1–D3 round (repo @ b65c32e): 21/21 checks PASS, 0 FAIL (P6 aggregates 82 fresh-process vectors). D1 (HIGH — malformed arguments crashed the server process: list/dict target_id TypeError, invalid-IPv6 urlparse ValueError) FIXED: 25 original malformed cases + 57-vector fuzz sweep (wrong types on every arg of every tool, fresh process per vector) → 0 crashes, 0 tracebacks, every vector a clean JSON-RPC isError, process alive and tools/list responsive after each. D2 (HIGH — probes followed HTTP redirects, LOCAL scope bypassable by trampoline to an always-200 or external page) FIXED: redirects never followed, witnessed as-is — same-origin 302→/down(503), cross-origin 302→second-port /ok(200), external-shaped 302, redirect loop, and 302→302→503 chain all record status=302 only with destination hit counts unchanged (0→0). D3 (LOW — self-report refusal was an exact-key denylist and declared schemas were never enforced) FIXED: 19 variant shapes across all read/probe tools (uptime_pct, Uptime, UPTIME, selfReportedUptime, sla_pct, nested {meta:{uptime:…}}, unknown keys, register-time and nested-in-list forms) all refused cleanly, zero influence (availability exactly 0.5, receipt_count 2, badge unchanged). Regression spot-checks PASS: badge ladder 19×200+1×503 → availability 0.95 → UP; chain tamper on a store copy (seq-3 field edit) → valid=false, tampered_seqs=[3], pristine chain valid=true checked=6. New defects: none. Known LOWs remain open as documented for LOCAL scope, non-blocking (D4: hash chain unauthenticated — forged append / tail truncation undetectable under store-write access; pin chain_head externally, call verify_chain separately. D5: vantage names free-form and list form uncapped, mitigated by vantage_mode: local-simulated stamp). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (LOCAL), 72/76 checks PASS with HIGH defects D1/D2 and LOWs D3–D6 — D1/D2/D3 (and D6 bool-as-int as a side effect) closed by this re-bench. Scope = LOCAL only: probes run only against localhost or fixture:// endpoints, external probing refused; vantage points are local-simulated probe identities, NOT geographically independent; no self-report input accepted; $299/mo is a pricing term only — no checkout/payment code.","live_state_note":"Bench evidence: argus-batch-20261026/bench/outwatch/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code, all hashes recomputed independently from SPEC §2; builder suite 29/29). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["External or public network probing — refused by design in v0.1.1 (SCOPE_EXTERNAL_REFUSED): no live external monitoring is performed, tested, or claimed","Real geographic vantage independence — not in v0.1.1 by design: vantage points are local-simulated probe identities only, stamped vantage_mode: local-simulated on every receipt","Hosted or remote serving — v0.1.1 is local stdio only; known LOWs D4 (unauthenticated chain, tail truncation undetectable under store-write access) and D5 (free-form vantage names, uncapped list form) remain documented for LOCAL scope","Payment, checkout, or charging — none exists in v0.1.1 by design: the $299/mo feed license is commercial metadata / a stated pricing term only, and no payment or checkout code is in the server","Dashboards, alerting, badge issuance/revocation beyond the derived badge_state, or any certification claim by the product itself — none exists in v0.1.1; certification is Verity's bench verdict only"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-outwatch-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-outwatch-mcp.png","name":"Eclipse Outwatch","platforms":["MCP over stdio"],"pricing_model":"PRICED — $299/mo feed license, via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product; there is no payment or checkout code in this package (the price is a stated term only). Repository is PRIVATE (priced-product policy).","problem_statements":["I run or list MCP servers with SLA expectations — I need availability witnessed by probes and recomputable from hash-chained receipts, not vendor self-reported uptime","If a server goes down, its badge must degrade automatically from witnessed downtime receipts — no manual badge setter and no self-report path may influence it","I need to verify a server's witnessed history myself: recompute the chain, check tamper/gaps, and pin the chain head — within an honestly LOCAL scope, with localhost/fixture-only probing and local-simulated vantages plainly labeled"],"source_refs":["argus-batch-20261026/specs/eclipse-outwatch-mcp-SPEC.md","eclipse-outwatch-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/outwatch/VERDICT.md","argus-batch-20261026/bench/outwatch/REBENCH-1.md"],"status":"in-development","tagline":"Independent uptime/SLA witnessing for MCP servers: hash-chained probe receipts feed a recomputable trust record, availability recomputed only from receipts — no self-report accepted — and a badge that auto-degrades on witnessed downtime. LOCAL scope only — probes run only against localhost or fixture:// endpoints; vantage points are local-simulated probe identities, NOT geographically independent; no live external monitoring.","tools":["register_target","probe_now","get_trust_record","verify_chain","badge_state"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — a session mandate (Herald-shape RS256 JWS) is verified at open in a fixed order (authenticity → cap → allowlist → expiry/revocation → approval threshold) and its hash is sealed into the session_open record; every draw is counter-signed at draw time by the caller key and a witness sidecar key, hash-chained, citing the mandate hash and a running all-in total.","Named refusals + witness receipts — cap-breaching draws are refused by name before they happen (spec §5.4 named refusals, incl. the R-W1 trigger partition); refusals are logged unsigned and never move the total. At close, a witness receipt binds mandate-hash ↔ voucher-chain head ↔ settlement reference from the mock relay, with three signatures (witness, buyer, seller); the §6.4 offline verifier recomputes the whole pack from the artifact + public keys alone, and dispute_pack_get assembles a Docket-grade dispute pack.","Honest scope — local stdio, Python stdlib only, fixture sessions + mock relay, Tempo Moderato testnet SHAPES (chainId 42431, hard-pinned in code): no chain interaction, no RPC, no Stripe API, no live clearing, no deposit custody, no live Meter ingest (draw records are emitted in Meter's record grammar for later ingest). Every artifact carries value_class: \"test\" and network: \"tempo-moderato-42431\". Startup hard-refuses any mainnet marker, any Stripe key, any RPC/non-local endpoint, relay_mode other than mock, or value_class other than \"test\".","Disjoint surfaces, no money verbs — buyer and operator tool tables are disjoint, selected by ECLIPSE_TILL_MPP_WITNESS_SURFACE; no tool moves money, holds or releases a deposit, raises a cap, alters a mandate, counter-signs for a party, or issues a receipt for an unwitnessed session. The enabling MPP rail profile earned its own PASS (sandbox/fixture) but is never listed standalone (rail spec §1.4) — listings attach to the Witness only."],"categories":["Agent Commerce & Disputes","Trust & Receipts"],"certification":{"bench_verdict":"PASS-CONDITIONAL (sandbox/fixture)","certified":false,"certified_scope":"local stdio, fixture sessions + mock relay, Moderato testnet SHAPES, no chain interaction, no live clearing, no live Meter ingest, K6 claims only","live_state_note":"Label on record: MPP Session Witness — PASS-CONDITIONAL (sandbox/fixture), Verity re-bench of v0.1 @ 70cc818; the sole condition R-W1 was doc-only and is discharged by coordinator edits to the witness spec §5.4, verified on disk 2026-10-27. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. No test-bench scorecard is claimed for this listing; scorecard_ref is null.","not_tested":["Live clearing — not tested and not claimed: v0.1 runs fixture sessions against a local mock relay only; no chain interaction of any kind","Mainnet — not tested and refused by design: startup hard-refuses any mainnet marker; Moderato testnet shapes only (chainId 42431)","Live Meter ingest — not tested and not claimed: draw records are emitted in Meter's record grammar for later ingest only","Live protocol operation, Stripe API, deposit custody — absent at v0.1 by design; none exists in the package"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-mpp-session-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-mpp-session-witness-mcp.png","name":"Eclipse MPP Session Witness MCP","platforms":["MCP over stdio"],"pricing_model":"PRICED — witness receipts priced at the witness-receipt pattern and dispute-pack assembly at the Docket pattern in the house price book, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product, and no dollar figures are stated in this listing — figures live in the price book. Repository is PRIVATE (priced-product policy).","problem_statements":["My agent runs MPP sessions — I need session evidence a neutral witness sealed at draw time, not a log either party can rewrite afterwards","A session dispute needs a pack a third party can recompute offline from the artifact + public keys alone: the sealed mandate, the counter-signed draw chain, and the close receipt bound together","I need cap-breaching draws refused by name before they happen, with the refusal itself on record and the running total unmoved"],"source_refs":["eclipse-mpp-session-witness-mcp","mpp-session-witness-spec-20261026.md","rail-profile-mpp-spec-20261026.md"],"status":"in-development","tagline":"MPP session evidence / witness: mandate-sealed sessions, counter-signed draws, and witness receipts over fixture sessions and a local mock relay — Moderato testnet shapes only; no chain interaction, no live clearing, no live Meter ingest.","tools":["session_open","session_draw","session_close","session_status","receipt_get","receipt_verify","buyer_counter_sign","session_open_accept","session_close_accept","session_list","dispute_pack_get","revocation_present","anomaly_queue_read"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Novel mechanism — provenance-pointer attributes with byte-for-byte recompute (SPEC §1.1): every generated attribute carries {value, source_field, rule_id, source_value}, so any auditor can recompute why the feed claims what it claims — take the source row, apply the named rule (SPEC §3, machine-readable in rules.json, stable ids R01–R12) to source_value, and the result must equal value byte-for-byte; verify_feed does exactly this recompute over every attribute. Bench: independent recompute (written from SPEC §3/§4 + rules.json only, builder code never imported) reproduces the JSON fixture feed byte-for-byte — catalog cat_5820376e0fc71b86, feed feed_18337452aa65cc76, 9 entries, 85 attributes, every attribute with exactly the 4 provenance keys, rule_id present in rules.json with matching target, source_value byte-identical to the raw row; CSV fixture feed also deep-equals recompute; both feeds verify_feed → VERIFIED (P1 11/11).","Absent-never-invented + unmapped honesty (P2 14/14): an attribute no rule can produce is ABSENT — never invented, never defaulted, never LLM-guessed. The crafted no-rule row (price \"call for price in JPY\", weight \"heavy\", stock \"maybe\", no category field, keyword-free title) yields exactly {id, title}; fixture WID-008 carries exactly {id, title, brand} and explain_attribute on each absent attribute returns ATTRIBUTE_ABSENT by name. A source field consumed by no rule is reported in unmapped_fields with occurrence count + row indices (all 4 fixture unmapped fields — Legacy Code, Supplier Notes, internal_code, warehouse_bin — plus crafted fields), and provenance never points at an unmapped field. The target attribute set is closed (11 attributes) — nothing outside it can appear. Tamper naming (P3 6/6): value edits, provenance-only edits (source_value $129.99→$999.99), provenance swapped between products, invented extra attributes, and attribute deletion + unmapped-report wipe all return MISMATCH naming product + attribute; determinism (P4 3/3): identical catalog/feed hashes across fresh processes for JSON + CSV inputs.","Crash-proof supplied-feed path (v0.1.1 fix for bench defect D1, re-bench PASS): verify_feed's feed-object form — precisely the surface meant to receive untrusted feeds — now structurally validates supplied feeds (catalog_id non-empty string; entries a list of objects; attributes objects whose values are provenance objects; unmapped_fields a list) before recompute, with non-string id guards and dispatch-level inputSchema enforcement for all 5 tools plus last-resort exception guards in the handler and stdio loop. Re-bench: full suite 98/98 (P5 55/55) + expanded fuzz 156/156 on one persistent process with liveness after every vector (23 supplied-feed deep shapes, 80 wrong-type argument vectors across all 5 tools, raw protocol attacks) — every malformed input is a clean ToolError, no process death; tamper semantics preserved (missing entries/attributes/hash = MISMATCH, not validation errors). Explain sweep (P6 6/6): 99 explain_attribute calls (9 products × closed 11-attribute set) — every presented attribute is explainable and resolvable, every absent one ATTRIBUTE_ABSENT; no opaque-but-present attribute exists — the exact delta vs an LLM feed generator.","Honest scope — LOCAL/fixture ONLY: the local engine ingests caller-supplied rows (JSON), csv_text, or json_text plus the bundled fixtures (messy_catalog.json 9 products in per-row field-name dialects; messy_catalog.csv 8 products under one messy header). Deterministic transforms only — NO LLM calls, NO network calls; Python 3 standard library only (csv, hashlib, io, json, os, re, decimal, sys — hygiene P7 3/3); MCP over stdio; exactly 5 tools (unknown names return NO_SUCH_TOOL); every response carries scope: \"LOCAL/fixture\". No payment, checkout, hosting, account, or API-key code exists — the $49/mo figure is pricing metadata in SPEC §6/README only (future hosted form). Informational bench notes (non-blocking): currency tokenization is a substring match (SPEC silent; engine + recompute agree on every documented/standard form); duplicate product ids are both kept, explain resolves to the first entry; ragged-CSV extra cells are discarded by DictReader (no field name to report)."],"categories":["Trust & Receipts","Commerce Readiness"],"certification":{"bench_verdict":"CERTIFIED (local, fixture)","certified":true,"certified_scope":"CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 1e41e3f): full prior suite 98/98 PASS, 0 FAIL (P1 11/11 · P2 14/14 · P3 6/6 · P4 3/3 · P5 55/55 · P6 6/6 · P7 3/3), defects list empty, plus expanded wrong-type fuzz 156/156 PASS on one persistent server process with a liveness ping (list_rules → 12 rules) after every vector. D1 (HIGH — the verify_feed supplied-feed path performed no type validation; five malformed feed objects raised unhandled TypeError/AttributeError and killed the server process) CLOSED: the 5 original crash vectors (list/dict catalog_id; entries:[123]; entries:\"abc\"; attributes-as-string) all return clean ToolErrors with no process death, verified in the prior suite AND verbatim in the expanded fuzz (supplied-feed deep shapes 23 vectors; 8 wrong value types × every argument of all 5 tools = 80 vectors; raw protocol attacks — non-string tool names, non-dict arguments, malformed/truncated JSON lines — server keeps answering after each). Behavior preservation PASS: fixture transform seals to feed_18337452aa65cc76 (full hash 18337452aa65cc76eb57c986e0d8f3ff58f2d6b389a09cf16df9d33cee9e94a5) over catalog cat_5820376e0fc71b86 — exactly SPEC §4.1 — and deep-equals the bench's independent recompute (85 attributes, 9 entries; CSV fixture also deep-equals + VERIFIED); spot recompute of SHOE-001/price_cents, MUG-002/availability, BAG-009/category, LAP-003/weight_grams, TEE-004/category matches feed values + explain_attribute provenance; tamper semantics preserved 9/9 (missing entries/attributes/unmapped_fields/feed_hash and partial provenance records are MISMATCH, never validation errors; untampered copies by-object and by-feed_id VERIFIED). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 93/98 — the novel mechanism itself passed without exception (byte-for-byte independent recompute of all 85 fixture attributes, provenance always resolving to the real raw source value, absent-never-invented, tamper naming on value AND provenance, determinism, complete 99-call explain sweep); the sole condition was the D1 fix + P5 re-bench, now closed. Informational carry-overs, non-blocking (unchanged from v0.1): currency tokenization is a substring match (\"100 EURO\" yields EUR; SPEC does not define tokenization — recommend SPEC v0.2 state the token rule explicitly); duplicate product ids are both kept and explain_attribute resolves a duplicated product_key to the first entry; ragged-CSV extra cells beyond the header are discarded by the csv.DictReader restkey path (no field name, nothing to report). Scope = LOCAL/fixture only: local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only — no LLM calls, no network calls; no live catalogs benched or implied; $49/mo is a pricing term for the future hosted form only — no payment/checkout/hosting code.","live_state_note":"Bench evidence: argus-batch-20261026/bench/feedforge/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code; recompute.py written from SPEC §3/§4 + rules.json alone; builder suite 29/29). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product.","not_tested":["Live merchant catalogs or marketplace/catalog API sync (Shopify etc.) — not in v0.1.1 by design (SPEC §7): local engine over caller-supplied rows/CSV/JSON + bundled fixtures only","Hosted or remote serving — v0.1.1 is local stdio only; the $49/mo hosted bundle form is a future commercial shape, not a v0.1 feature, and no hosted service is live or sold in v0.1","LLM or network calls of any kind — none exist in v0.1.1 by design: deterministic documented rules (R01–R12, rules.json) only; Python 3 standard library only","Payment, checkout, hosting, accounts, or billing — none exists in v0.1.1 by design: the $49/mo figure is commercial metadata / a stated pricing term for the future hosted form only","Feed publishing or submission to any platform (Google/UCP endpoints etc.) — none exists in v0.1.1; feeds are sealed locally and verified by recompute only"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-feedforge-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-feedforge-mcp.png","name":"Eclipse Feedforge","platforms":["MCP over stdio"],"pricing_model":"PRICED — $49/mo hosted bundle pattern, via the Eclipse Bazaar bench-order path only. No checkout, payment, or buy-now link exists for this product, and no hosted service is being sold as live in v0.1: v0.1.1 is the local engine and contains no payment, checkout, hosting, metering, or billing code (the price is a stated term for the future hosted form only). Repository is PRIVATE (priced-product policy).","problem_statements":["My merchant catalog uses inconsistent field names, prices as strings (\"$1,299.00\", \"1299 USD\"), units embedded in text, and missing categories — I need an agent-grade, structured (UCP-ready) feed agents can actually buy from","Feed generators rewrite my catalog opaquely — when a price or category is wrong I cannot audit why; I need every attribute to carry its source field, rule, and source value so the whole feed recomputes byte-for-byte","I need honesty guarantees: attributes the source data cannot support must be absent, never invented or defaulted, and source fields the transform does not use must be reported as unmapped, never silently dropped"],"source_refs":["argus-batch-20261026/specs/eclipse-feedforge-mcp-SPEC.md","eclipse-feedforge-mcp/BUILD-RECORD.md","argus-batch-20261026/bench/feedforge/VERDICT.md","argus-batch-20261026/bench/feedforge/REBENCH-1.md"],"status":"in-development","tagline":"Converts a merchant's messy catalog into an agent-grade product feed with per-attribute provenance: every attribute records {value, source_field, rule_id, source_value} and verify_feed recomputes each byte-for-byte from the source rows and the documented deterministic rule set. LOCAL/fixture scope only — local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only, no LLM calls, no network calls; attributes no rule can produce are absent, never invented, and unmapped source fields are reported.","tools":["ingest_catalog","list_rules","transform_feed","verify_feed","explain_attribute"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Read permit status from the jurisdiction's own sanctioned source and seal it as a Herald-signed provenance receipt (status_as_served verbatim beside status_normalized — never merged)","Hash-chained witnessed history under a closed change law: STATUS_TRANSITION · RETRO_EDIT · FIELD_CHANGE · RECORD_ABSENT · RECORD_RESTORED; unchanged re-reads mint nothing","Coverage registry naming each covered jurisdiction and its sanctioned route (NYC via Socrata Open Data; Tallahassee–Leon County via Accela Citizen Access); every other jurisdiction is UNWITNESSED, never silently covered","Offline recompute: witness_verify and the standalone recompute.py reproduce payload hash, receipt hash, chain walk and seal state from the spec alone","Agency checklists served verbatim + cited + snapshot-sealed only; requirements synthesis refuses by name (REQUIREMENTS_SYNTHESIS_REFUSED)"],"categories":["Trust & Receipts","Compliance & Regulation"],"certification":{"bench_verdict":"CERTIFIED(local)","certified":true,"certified_scope":"CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-permits-mcp-2026-10-26-2.json (scoped re-bench of the card -1 PARTIAL fix round; card -1 retained append-only): the witnessed-ledger mechanism, fence/refusal battery, chain-tamper and unchanged-read behaviour all PASS at local scope. Per the card's own scope verdicts: the Accela Citizen leg is certified at FIXTURE conformance only — the §7.7 Florida dogfood exit gate (owner's own Accela account, ≥1 real chain, ≥2 reads) remains OUTSTANDING and owner-side, outside this verdict; the dual-source leg is OUT OF CERTIFIED SCOPE (no dual-route jurisdiction at P0; refusal path benches correctly). Signing posture at P0 is fixture-labelled (FIXTURE_SIGNED).","not_tested":["Live Accela Citizen reads under the owner's own account — the §7.7 Florida dogfood exit gate is outstanding and owner-side; certified scope for that leg is FIXTURE conformance only","Dual-source agreement/divergence on a real dual-route jurisdiction — out of certified scope at P0 (no dual-route jurisdiction exists)","Production Herald signing custody — P0 seals are fixture-labelled (FIXTURE_SIGNED)","Any jurisdiction beyond the coverage registry — UNWITNESSED by construction; no portal scraping or aggregator witness source exists"],"scorecard_ref":"test-bench/results/eclipse-permits-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-permits-mcp-2026-10-26-2.json"},"icon":"eclipse-permits-mcp/icon-512.png","id":"eclipse-permits-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-permits-mcp.png","name":"Eclipse Permits","name_status":"CONDITIONAL (working name 'Eclipse Permits' — brand §3 screen owed, owner item O1; bench name_status 2026-10-26)","platforms":["MCP over stdio"],"pricing_model":"PRICED — $10.00 per witnessed read with sealed receipt, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product; intake orders are reviewed and confirmed by the operator before any payment link is sent. Repository is PRIVATE (priced-product policy).","problem_statements":["I need to prove exactly what a permit office's own system said about a permit at a stated time — not re-ask it later and get a different answer","A permit status changed after the fact and I need a hash-chained history showing every transition, retro-edit and absence","I need a permit receipt a counterparty can verify offline, without trusting my server"],"source_refs":["eclipse-permits-mcp/README.md","eclipse-permits-mcp/server.json","test-bench/results/eclipse-permits-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Permit status witnessed: sealed per-read provenance receipts, hash-chained history, offline recompute. The receipt warrants the read; it never warrants the status.","tools":["session_open","coverage_list","permit_search","permit_get_current","witness_read","witness_history","receipt_get","witness_verify","witness_compare","checklist_list","checklist_get","watch_register","watch_list","watch_refresh"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Seal filing bytes exactly as published by the source (figure-canon/1.0) and extract figures bound to their value as printed and to a byte-range passage hash or an XBRL fact identity","Three-moment chains: a figure as released in an Item 2.02 exhibit, as filed in the periodic report, and as restated after an Item 4.02 non-reliance event","Receipts any holder can recompute offline with the shipped verifier (verify.py)","Coverage stated plainly: universe U1 (S&P 1500 constituent list as published by the index provider of record) plus any filer with an Item 4.02 8-K or 10-K/A / 10-Q/A in the window; period floor 2019-01-01 — figures outside the named universe or sealed snapshots are named as gaps, never answered from memory, estimation, or a live fetch"],"categories":["Trust & Receipts","Document Analysis"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Test Bench certification — UNCERTIFIED: no Test Bench scorecard exists for this product in test-bench/results/ and none is claimed; this listing is LISTED only"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-sec-figure-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-sec-figure-witness-mcp.png","name":"Eclipse SEC Figure Witness","name_status":"Working internal name — brand §3 screen owed (spec D6); the product never implies SEC or auditor endorsement","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.50/receipt with sealed receipt, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product; intake orders are reviewed and confirmed by the operator before any payment link is sent. Repository is PRIVATE (priced-product policy).","problem_statements":["I need to prove exactly which figure an SEC filing printed at a specific moment — as released, as filed, or as restated — not what a terminal shows today","A figure changed after an Item 4.02 non-reliance event and I need the full restatement chain, sealed and recomputable offline"],"source_refs":["eclipse-sec-figure-witness-mcp/README.md","eclipse-sec-figure-witness-mcp/server.json"],"status":"in-development","tagline":"Sealed SEC filing figures as filed + restatement chains, recomputable offline.","tools":["figure_at_moment","figure_history","release_figures","filing_figures","chain_get","chain_search","figure_verify","chain_verify","divergence_edgar_self","corpus_status","manifest_get","manifest_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Answer from a sealed snapshot only: which disposition notices (retraction, correction, concern) the named sources carry for a work, which source attests each one, and where the sources disagree","Source disagreements sealed as open divergence records — data for the reader, never silently resolved; there is no merged status field and no live passthrough","Reference-list audits (up to 500 identifiers) returned as sealed receipts, recomputable against the snapshot they were run on (audit_verify: MATCH or DIVERGES naming the first divergent field)","Drift between two snapshots sealed as an artefact: verdict changes, new events, new divergences"],"categories":["Trust & Receipts","Compliance & Regulation"],"certification":{"bench_verdict":"CERTIFIED(local, fixture scope)","certified":true,"certified_scope":"CERTIFIED(local, fixture scope) — Verity scoped re-bench 2026-10-26, standing card eclipse-scholarly-witness-mcp-2026-10-26-2.json (card -1 PARTIAL(local, fixture scope) retained append-only and superseded), scope language exact from the card: sealed snapshot srw-20261026-ea6bc90cf693, duplicate-bearing audit receipts recompute MATCH on both verification surfaces with tamper-by-name divergence, receipts carry the full §9.3 field set incl. the CC-BY attribution, disposition answers carry the §6.3 as-of block on all branches, work_resolve surfaces per-pin source labels, and the reinstatement-only population shape is consistent under amendment A3. Fixture signer (FIXTURE_SIGNED) — no live/production claim; PubMed errata coverage window 2023-01-01..2026-10-26 remains disclosed in the manifest known_bounds.","not_tested":["Live/production signing — receipts and snapshot are FIXTURE_SIGNED (house fixture HMAC key, disclosed in the seal block); no live claim attaches until a live signer decision (spec O3) is taken","Live source ingest — answers serve from the sealed snapshot only; no live passthrough exists or was tested"],"scorecard_ref":"test-bench/results/eclipse-scholarly-witness-mcp-2026-10-26-2.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-scholarly-witness-mcp-2026-10-26-2.json"},"id":"eclipse-scholarly-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-scholarly-witness-mcp.png","name":"Eclipse Scholarly Witness","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.50/receipt with sealed receipt, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product; intake orders are reviewed and confirmed by the operator before any payment link is sent. Repository is PRIVATE (priced-product policy).","problem_statements":["I need to know whether a paper my agent cited was retracted, corrected, or flagged — with the notice provenance sealed, not a live search result","Two sources disagree about a paper's disposition and I need the disagreement preserved as data, not silently resolved","I need a reference-list audit receipt I can recompute later against the exact snapshot it ran on"],"source_refs":["eclipse-scholarly-witness-mcp/README.md","eclipse-scholarly-witness-mcp/server.json","test-bench/results/eclipse-scholarly-witness-mcp-2026-10-26-2.json"],"status":"in-development","tagline":"Disposition-notice witness: sealed retraction/correction/concern events with provenance, open divergences, recomputable reference audits.","tools":["work_resolve","disposition_lookup","reference_audit","audit_verify","drift_since","divergences_list","snapshot_status","manifest_get","manifest_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Legal-status event ledger per subject — every event pinned to the hash of the source record that asserts it, inside a named sealed snapshot","Claims divergence receipts — the claim set as published vs the claim set as granted, diffed mechanically claim by claim","Assignment-chain witness — recorded conveyances sealed as a sequence with its gaps named as gaps","Source-drift witness — the upstream source surface is fingerprinted per snapshot and its drift is sealed as product output","Offline recompute of every artefact from the named snapshot package with the shipped standalone verifier (verifier.py)"],"categories":["Trust & Receipts","Compliance & Regulation"],"certification":{"bench_verdict":"PARTIAL","certified":false,"certified_scope":"PARTIAL(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, card eclipse-patent-witness-mcp-2026-10-26.json: certification WITHHELD on three MED defects (PW-D1, PW-D2, PW-D4); this product is NOT certified. The card's scope language is binding: scope caps at local, FIXTURE scope — every seal is FIXTURE_SIGNED under fixture keys over fixture extracts; the mechanism (sealed legal-status event ledger, claims divergence, assignment-chain witness, source-drift witness) was measured certified-grade and every derivation was independently recomputed byte-identical, but no CERTIFIED verdict exists for this product. Live ODP ingest is MEASURED BLOCKED (bench re-verified HTTP 401 without an operator ODP key) and no live seal exists.","not_tested":["Certification — withheld pending a fix round on PW-D1/PW-D2/PW-D4 (PW-D3 as rider) plus a scoped re-bench","Live ODP ingest and any live seal — measured blocked without an operator ODP key (HTTP 401)","Patent search, full-text retrieval, status lookup, fee/deadline calculators, monitoring — these verbs do not exist on any surface by construction"],"scorecard_ref":"test-bench/results/eclipse-patent-witness-mcp-2026-10-26.json","scorecard_url":"https://eclipsebazaar.com/cards/eclipse-patent-witness-mcp-2026-10-26.json"},"id":"eclipse-patent-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-patent-witness-mcp.png","name":"Eclipse Patent Witness","name_status":"Working name — INTERNAL until the brand §3 + TM screen pass (spec O1; bench name_status 2026-10-26). The name and descriptor never imply USPTO endorsement.","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.50/receipt with sealed receipt, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product; intake orders are reviewed and confirmed by the operator before any payment link is sent. Repository is PRIVATE (priced-product policy).","problem_statements":["I need the USPTO record of a patent as a sealed sequence of states I can recompute offline — not a live status lookup I have to trust","I need to prove how a patent's claim text diverged between publication and grant, claim by claim","I need the recorded assignment chain for a patent with its gaps named as gaps"],"source_refs":["eclipse-patent-witness-mcp/README.md","eclipse-patent-witness-mcp/server.json","test-bench/results/eclipse-patent-witness-mcp-2026-10-26.json"],"status":"in-development","tagline":"Sealed witness of the USPTO patent record: legal-status event ledgers, claim-text divergence receipts, and recorded assignment chains — each recomputable offline from a named snapshot. Record state only; not a legal opinion, not a status service.","tools":["subject_ledger_get","subject_ledger_verify","claims_divergence_get","claims_divergence_verify","assignment_chain_get","assignment_chain_verify","source_drift_list","snapshot_status","manifest_verify"],"vendor":"Cyan Eclipse Technologies"},{"capabilities":["Screens run locally in a zero-egress process against a locally sealed USPTO bulk corpus snapshot (vintage + records root named on every artefact)","Every screen sealed as a recomputable two-layer receipt: what queries were run, against which snapshot, returning which records — provable later by offline recompute without trusting the server","Lifecycle witness: for filed marks, status reads sealed as hash-chained event records with registry dates verbatim","No verdict by construction: no clearance, risk, score, registrability, or infringement field exists anywhere; it files nothing and computes no deadlines (such requests refuse by name)"],"categories":["Trust & Receipts","Compliance & Regulation"],"certification":{"bench_verdict":null,"certified":false,"certified_scope":null,"not_tested":["Test Bench certification — UNCERTIFIED: no Test Bench scorecard exists for this product in test-bench/results/ and none is claimed; this listing is LISTED only","Live TSDR status reads — require the operator's own TSDR key, held outside the product tree; without it the witness-read tool reports TSDR_KEY_NOT_CONFIGURED and seals nothing"],"scorecard_ref":null,"scorecard_url":null},"id":"eclipse-trademark-witness-mcp","listing_class":"mcp","logo":"branding/logos/eclipse-trademark-witness-mcp.png","name":"Eclipse Trademark Witness","platforms":["MCP over stdio"],"pricing_model":"PRICED — $0.50/receipt with sealed receipt, via the Eclipse Bazaar bench-order path (order intake) only. No checkout, payment, or buy-now link exists for this product; intake orders are reviewed and confirmed by the operator before any payment link is sent. Repository is PRIVATE (priced-product policy).","problem_statements":["I screened a candidate mark and need a receipt proving exactly which queries ran against which corpus snapshot and what they returned","I need trademark screening evidence counsel can recompute offline, without the candidate mark ever being transmitted anywhere"],"source_refs":["eclipse-trademark-witness-mcp/README.md","eclipse-trademark-witness-mcp/server.json"],"status":"in-development","tagline":"Trademark screening witness: sealed corpus, recomputable search receipts. A screening witness, not a search engine and not an opinion machine — it renders no verdict.","tools":["tm_screen_execute","tm_corpus_manifest_get","tm_receipt_get","tm_receipt_verify","tm_receipt_recompute","tm_lifecycle_chain_get","tm_lifecycle_verify","tm_corpus_manifest_verify"],"vendor":"Cyan Eclipse Technologies"}],"sources":["bazaar-manifest.json files in agent-wallet-mcp/, agent-ready-mcp/, certbridge-mcp/, florida-bid-intel/, eclipse-apply-mcp/","Test Bench scorecards in test-bench/results/ (latest run per tool, 2026-10-24)","hostbridge-mcp/README.md + eclipse-connect-relay/README.md (no bazaar-manifest exists for these)","mcp-product-slate-20261023.md (spec-stage entries)","eclipse-mail-spec-20261024.md (spec approved, not built)","Wave-1 product bazaar-manifest.json files (18 products) + Test Bench scorecards, publish pass 2026-10-25","Publish pass 4 (2026-10-25): listing_class taxonomy backfilled per connectors/tools slate §6 (Connect relay reclassified as anchor connector; Test Bench / Stocktake / Press / Herald Card Kit listed as tools from real in-house artifacts); Eclipse 100 wave-1 manifests (Meter, Tripwire, Umbra) + standing Test Bench scorecards","Publish pass 4 top-up (2026-10-25): Eclipse 100 wave-1 completions — Blackbox + Docket CERTIFIED(local) verbatim from manifests + standing Test Bench scorecards (Blackbox run 3 of 22/22; Docket run 7, 19 pass / 1 na of 20; FAILED/PARTIAL history retained in the bench repo)","Publish pass 5 (2026-10-26): Eclipse 100 wave 2 (Countermark, Census, Crosswalk, Redteam, Span — CERTIFIED(local), NOVELTY_PROVEN) + Eclipse Airtime CERTIFIED(local/simulator) 23/23 (PARTIAL card retained) + Till Ads Rail P1 extension CERTIFIED(local/simulator) 100/100 (test mode only, NOT PROVEN IN STRIPE) + Eclipse Friction listed in-development (spec complete, 16 P0 tools, build dispatched; no bench run yet)","Publish pass 10 (2026-10-26): Eclipse Crosslist MCP — CERTIFIED(split per facet) per standing card -4 (R1/R2/R7 identity gates closed; only LOWs standing: R3/R8/R9/D5/D7/D8); Rook listing pass with §5.5 logo + Family A local scope emblem (root+ledger scope); Crosslist suite dogfood assert made catalog-derived (50/50 at 80, re-verified at 81)","Publish pass 11 (2026-10-26): Eclipse Verbatim MCP — CERTIFIED(local) per standing card -2 (scoped re-bench 5/5 scopes PASS; full-spec-literal recompute 2277/2277 both layers under canon verbatim-canon/1.1, snapshot usc26-119-124-de68dcc8b3db; cite-check hostile battery 0 false MATCH); Rook listing pass with §5.5 logo (monogram VE) + Family A local scope emblem; name CONDITIONAL (spec D1 TM screen owner-side; fallbacks Quire → Schedule); registry manifest staged + validated, NOT published (packaging queue behind Friction)","Publish pass 12 (2026-10-26): Eclipse Verbatim — Executive Orders MCP — CERTIFIED(local) per standing card -3 (scoped re-bench #3 of fix round 2, commit 56537e4; FULL census 9 → 5 all genuine; 186/186 ranges; extraction precision/recall 1.000; EO-D1-4/EO-D1-5 LOWs standing, synthetic-only, with pre-reseal sweep condition); Rook listing pass with §5.5 logo + Family A local scope emblem; name CONDITIONAL (inherits the pending Eclipse Verbatim TM screen, owner-side; family fallbacks Quire → Schedule); registry manifest staged, NOT published (packaging queue); snapshot eo-20261022-26818c895dee, FIXTURE seal","Publish pass 13 (2026-10-26): Eclipse Sunset MCP — CERTIFIED (local, fixture) per Verity REBENCH-1 (argus-batch-20261026/bench/sunset/; v0.1.1 @ 88f2aa6, D1 chain-gate fix; re-bench probe 5 PASS 4/4 + strict extras 9/9, full prior suite 44/44; prior VERDICT v0.1.0 CONDITIONAL 41/44 retained as history); Rook listing pass with §5.5 logo; FREE funnel (SPEC §6); registry manifest published v0.1.1 (io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-sunset-mcp); no test-bench scorecard issued for this bench — scorecard_ref null, none claimed","Publish pass 14 (2026-10-27): Eclipse Warranty MCP — CERTIFIED (local, fixture) per Verity REBENCH-1 (argus-batch-20261026/bench/warranty/; v0.1.1 @ 6fd6784, D1 full-content seal + D2 schema-enforcement fix round; re-bench 95 asserted PASS / 0 FAIL, D1 attacks 26/26, D2 attacks 24/24; prior VERDICT v0.1.0 CONDITIONAL retained as history; v0.1.0 seal break verified real by the bench and disclosed in the SPEC addendum — no migration, fixtures re-registered); Rook listing pass with §5.5 logo; FREE funnel into Eclipse Procure (SPEC §1); registry published v0.1.1 (io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-warranty-mcp); repo PUBLIC; no test-bench scorecard issued for this bench — scorecard_ref null, none claimed","Publish pass 15 (2026-10-27): Eclipse Toolprint MCP — CERTIFIED (local) per Verity REBENCH-1 (argus-batch-20261026/bench/toolprint/; v0.1.1 @ 240c329, Bench Fix D1 caller-anchored chain head; re-bench 18/18 PASS deterministic x2 runs; prior VERDICT v0.1 CONDITIONAL (local) 40/40 with D1 MEDIUM tail-truncation retained as history — closed by the re-bench; 1 non-blocking claim-honesty observation on §2.3 wording, neutralized by SPEC §10 supersession); Rook listing pass with §5.5 logo; PRICED $0.05/call (PC-3), bench-order path only, no checkout/payment/buy-now links; registry published v0.1.1 (io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-toolprint-mcp); repo PRIVATE (priced-product policy); scope LOCAL only — not a proxy, no remote connections, no tool execution; no test-bench scorecard issued for this bench — scorecard_ref null, none claimed","Publish pass 16 (2026-10-27): Eclipse MPP Session Witness MCP — PASS-CONDITIONAL (sandbox/fixture) per Verity re-bench of v0.1 @ 70cc818 (sole condition R-W1 doc-only, discharged by coordinator edits to witness spec §5.4, verified on disk); Rook listing pass; PRICED at the witness-receipt pattern + Docket pattern, bench-order path only, no figures in listing, no checkout/payment/buy-now links; repo PRIVATE; scope local stdio, fixture sessions + mock relay, Moderato testnet shapes only — no chain interaction, no live clearing, no live Meter ingest, K6 claims only; rail profile PASS (sandbox/fixture) never listed standalone (rail spec §1.4); PASS-CONDITIONAL is not CERTIFIED (certified: false); no test-bench scorecard claimed — scorecard_ref null","Publish pass 17 (2026-10-27): Eclipse Feedforge MCP — CERTIFIED (local, fixture) per Verity REBENCH-1 (argus-batch-20261026/bench/feedforge/; v0.1.1 @ 1e41e3f, Bench Fix D1 supplied-feed validation round; re-bench 98/98 PASS + expanded fuzz 156/156; prior VERDICT v0.1 CONDITIONAL (local, fixture) 93/98, sole defect D1 HIGH, retained as history — closed by the re-bench; fixture feed hash unchanged feed_18337452aa65cc76); Rook listing pass with §5.5 logo; PRICED $49/mo hosted bundle pattern, bench-order path only, no checkout/payment/buy-now links, no hosted service sold as live in v0.1; registry published v0.1.1 (io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-feedforge-mcp); repo PRIVATE (priced-product policy); scope LOCAL/fixture only — deterministic transforms only, no LLM calls, no network calls; no test-bench scorecard issued for this bench — scorecard_ref null, none claimed"],"vendor":"Cyan Eclipse Technologies","verdicts_synced_from":"test-bench/results via sync_verdicts.py"}