A verdict is a beginning, not a lifetime pass.

The White Report MCP

Free read-only crypto + AI news for agents: search articles, get full article text, the live markets ticker, and a graded prediction scoreboard. Remote MCP — no install, just connect your client to the endpoint. Also a Muse custom connector — one-paste setup at thewhitereport.com/agents. Metered reads priced $0.01/read (PC-1) via the Bazaar bench-order path only — no checkout or buy-now link; the free public tier and free self-host stay free.

get_latest · search_articles · get_article · get_ticker · get_scoreboard

Test Bench: CERTIFIED(live) — 10/11 checks · live host

Usage 30d: 1 calls · MEASURED · upd 2026-10-26

Eclipse Agent Wallet MCP

The agent wallet where responsibility follows scope — per-transaction and daily caps, recipient allowlist, human approvals, instant kill switch, append-only audit trail. Sandbox: runs on simulated test USDC — no real funds.

create_wallet · set_policy · check_payment · pay · approve_payment · revoke · audit_log

Test Bench: CERTIFIED(sandbox) — 12/13 checks · simulated USDC · CI smoke-tested

Usage: not collected — by design

Eclipse Bazaar MCP

This marketplace, as an MCP server. Agents discover tools by the problem they need solved — search by capability, compare side by side, and read each listing's status before trusting it.

search_products · find_solutions · get_product · compare_products · get_certification · list_categories

Test Bench: CERTIFIED(local) — 15/16 checks · local build

Usage: not collected — by design

AgentReady MCP

Can an AI agent actually buy from your store? Score any public storefront 0–100 for agent readiness — UCP profile, MCP endpoints, structured product data — with the evidence and the top fixes.

Test Bench: CERTIFIED(local) — 13/14 checks · local build

Usage: not collected — by design

CertBridge MCP

The padlock, without the paywall — agent-native ACME certificate issuance, HTTP-01 challenge placement, install, and renewal watching for shared-hosting sites.

Test Bench: CERTIFIED(staging) — 12/13 checks · Let's Encrypt staging env · live issuance proven 2026-10-25 (dogfood run — not a bench verdict)

Usage: not collected — by design

HostBridge MCP

Docroot-scoped deploys, snapshot before every deploy, one-call rollback, plain-language deploy receipts — CERTIFIED(local-real) against a real local filesystem docroot served over real HTTP. v0.1.0 has no remote-host deploy: SFTP/UAPI transports are not built.

Test Bench: CERTIFIED(local-real) — 15/16 checks · local-real: real filesystem docroot served by a real HTTP server · NO remote-host deploy in v0.1.0 (SFTP/UAPI not built)

Usage: not collected — by design

Florida Bid Intel MCP

Florida bid intelligence with honest deadlines — real competitions and real due dates from MyFloridaMarketPlace, with a transparent fit score. Gaps are stated, never guessed.

Test Bench: CERTIFIED(local) — 13/14 checks · local build

Usage: not collected — by design

Eclipse Apply MCP

The auto-apply tool that shows its work — applies only inside a human-granted written policy (target roles, salary floor, allowlist + blocklist, daily cap, expiry, kill switch), review-first, with a receipt for everything. Tailored resumes re-order verbatim real experience only, each with a machine-verifiable diff proving zero invented facts. Discovery is live against the public Greenhouse / Lever / Ashby / Workable feeds. v0.1 submission is DRY-RUN ONLY — nothing is transmitted to any employer.

ingest_resume · set_policy · get_policy · search_jobs · match_jobs · prepare_application · approve_application · reject_application · list_receipts · get_tracker · pause · resume · delete_my_data

Test Bench: CERTIFIED(sandbox) — 17/18 checks · sandbox environment

Usage: not collected — by design

Eclipse Herald MCP

Signed Agent Cards, policy-gated delegation, certification before hire.

card_build · card_sign · card_verify · gateway_delegate · receipt_list

Test Bench: CERTIFIED(local) — 18/19 checks · local build

Usage: not collected — by design

Eclipse Beacon MCP

The insurance watcher — signals your policies' expiries before they happen. It does not insure, bind, or advise.

policy_ingest · policy_list · policy_get · radar_report · gap_report

Test Bench: CERTIFIED(local) — 16/17 checks · local build

Usage: not collected — by design

Eclipse Cluster MCP

Signed images, governed runtimes — the gate runs first: no verified signature and provenance, no workload.

verify_image · policy_show · receipt_list

Test Bench: CERTIFIED(simulator) — 18/19 checks · local simulator

Usage: not collected — by design

Eclipse Thread MCP

On-prem bridges for the legacy software-engineering toolchain, plus the Evidence Weaver that joins their records into one traceable thread. v0.1: simulator scope, honestly labeled.

ingest_fixture · graph_query · trace_gaps · evidence_build · evidence_verify

Test Bench: CERTIFIED(simulator) — 13/14 checks · simulator build

Usage: not collected — by design

Eclipse Constellation MCP

The governed, vendor-neutral VM fleet layer for agents: one policy, one receipt ledger, every cloud and hypervisor underneath.

target_list · policy_evaluate · probe_target · fleet_snapshot · receipt_list

Test Bench: CERTIFIED(local) — 15/16 checks · local build

Usage: not collected — by design

Eclipse Deep Field MCP

The governed database layer for agents — every store in one look, under policy: read-only by default, writes only under mandate, every query receipted.

db_list · schema_read · query_read · query_explain · write_dryrun · write_execute · receipt_list

Test Bench: CERTIFIED(local) — 16/17 checks · local build

Usage: not collected — by design

Eclipse Pantry MCP

The unattended-retail module — reads vending fleets' own telemetry and predicts stock-outs. It never touches card data.

dex_ingest · inventory_read · sales_summary · stockout_forecast · fault_read · receipt_list

Test Bench: CERTIFIED(simulator) — 14/15 checks · simulator fixtures

Usage: not collected — by design

Eclipse Marquee MCP

The live-events agent: it finds the event, watches the price, buys only inside your mandate, and keeps the receipt for every ticket. It does not scalp, bypass, or bet.

event_search · listing_read · watch_create · watch_list · watch_evaluate · receipt_list

Test Bench: CERTIFIED(simulator) — 15/16 checks · local stub feed

Usage: not collected — by design

Eclipse Dispatch MCP

Drafts once, syndicates drafts everywhere sanctioned, unifies the analytics. Never publishes without approval; never scrapes.

draft_create · draft_preview · draft_approve · syndicate_drafts · analytics_report · receipt_list

Test Bench: CERTIFIED(local) — 13/14 checks · local stub adapters

Usage: not collected — by design

Eclipse Social Core MCP

One canonical, hash-bound package behind every Eclipse social adapter. It publishes nothing itself — it makes sure nothing unapproved moves.

account_set · account_inventory · content_ingest · content_get · adapt_preview · adaptation_diff · variant_revise · approval_pack · approve_variant · approval_check · policy_check · engagement_log · engagement_report · adapter_kill_switch · receipt_list

Test Bench: CERTIFIED(local) — 15/16 checks · local build

Usage: not collected — by design

Eclipse Aperture MCP

The Instagram adapter, formalized: capability-declared, hash-bound native variants for Feed, Carousel, Story, and Reel. The descriptor travels with the mode.

capability_probe · variant_build · preview_pack · receipt_list

Test Bench: CERTIFIED(local) — 11/12 checks · formalization — no live calls

Usage: not collected — by design

Eclipse Zephyr MCP

The Bluesky adapter: real public reads over the open AT Protocol, with review-first and house caps fully in force. No posting surface exists in v0.1.

profile_read · actor_search · author_feed_read · post_thread_read · receipt_list

Test Bench: CERTIFIED(live-read) — 12/13 checks · live public reads

Usage: not collected — by design

Eclipse Environment MCP

The smart-environment module — scopes an agent's authority to actuate a home, tier by tier, and receipts only what the device itself confirms.

registry_list · state_snapshot · policy_evaluate · command_execute · receipt_list

Test Bench: CERTIFIED(simulator) — 14/15 checks · local HA-shaped stub

Usage: not collected — by design

Eclipse Procure MCP

Intent to receipt in one fail-closed pipeline — policy before payment, abort on drift, proof for everything.

intent_create · quote_get · policy_check · order_execute · order_track · receipt_list

Test Bench: CERTIFIED(simulator) — 14/15 checks · simulator end to end

Usage: not collected — by design

Eclipse Gig Core MCP

One approved Task Brief, every marketplace: hash-bound briefs, all-in quotes, and a hire that runs only inside a mandate.

brief_create · brief_update · brief_approve · brief_read · quote_normalize · quote_read · hire_check · completion_verify · review_draft · receipt_list

Test Bench: CERTIFIED(local) — 18/19 checks · local build

Usage: not collected — by design

Eclipse Compass MCP

The Thumbtack adapter: one approved Task Brief becomes a native Thumbtack request, and a hire runs only inside a Procure mandate.

tt_capability_probe · tt_category_map · tt_form_preview · tt_pro_search · tt_request_lifecycle · tt_quotes_read · receipt_list

Test Bench: CERTIFIED(simulator) — 14/15 checks · Thumbtack fixture adapter

Usage: not collected — by design

Eclipse Stage MCP

The console bridge — deploy and playtest AI-built games on your own Dev Mode console, with receipts.

console_list · device_info · app_list · app_install_sim · remote_input · screenshot_get · power_control · receipt_list

Test Bench: CERTIFIED(simulator) — 15/16 checks · console simulator

Usage: not collected — by design

Eclipse Zenith MCP

The fitness module of Eclipse Procure — reads the machine, turns the dial under a safety ladder, and stops the belt when the controller goes silent.

registry_list · telemetry_read · session_start · session_control · session_end · workout_list · receipt_list

Test Bench: CERTIFIED(simulator) — 16/17 checks · equipment simulator

Usage: not collected — by design

Eclipse Muster MCP

The Customer Graph core: provenance on every field, propose-only identity merges, and drafts that cite the record — or say what's missing.

record_ingest · record_read · record_search · merge_propose · merge_execute · merge_unmerge · reply_draft · policy_show · receipt_list

Test Bench: CERTIFIED(local) — 15/16 checks · local build

Usage: not collected — by design

Eclipse Haven MCP

The governed Zendesk server: OAuth-first (token auth refused by name — it sunsets 2027-04-30), replies only as approved drafts, a receipt for every touch.

auth_status · ticket_search · ticket_get · user_get · org_get · ticket_create · ticket_update · reply_draft · reply_send · receipt_list

Test Bench: CERTIFIED(simulator) — 13/14 checks · fixture build · run-2 FAILED card retained, run 3 standing

Usage: not collected — by design

Eclipse Orbit MCP

The HubSpot wrap: the vendor's own MCP server, under policy — classified tools only, approval gates on sends, and a halt the moment a tool's tier drifts up.

vendor_tools · vendor_refresh · vendor_call · halt_clear · receipt_list

Test Bench: CERTIFIED(simulator) — 16/17 checks · local stub vendor

Usage: not collected — by design

Eclipse Voice Core MCP

The Consent Registry and Number Registry every Eclipse telephony adapter obeys: no provenance, no consent; one revocation silences every adapter at the next check.

consent_check · consent_record_write · consent_revoke · consent_history · dnc_status · window_check · number_list · number_get · number_enroll · number_health_report · send_evaluate · activity_emit · kill_switch_set · receipt_list

Test Bench: CERTIFIED(local) — 19/20 checks · local build

Usage: not collected — by design

Eclipse Trunk MCP

The governed Twilio adapter: a classified subset of the carrier's pipes, every send gated by live consent + mandate first. V0 is fixtures — nothing sent, nothing provisioned.

logs_read · send_sms_sim · place_call_sim · number_search · registration_status · recording_policy_get · recording_policy_set · receipt_list

Test Bench: CERTIFIED(simulator) — 16/17 checks · fixture adapter

Usage: not collected — by design

Eclipse Connect MCP

The MCP face of the Eclipse Connect relay: upload, publish, status, revoke through a revocable agent key — never raw OAuth. A distinct surface from the relay, benched separately.

connect_account · grant_status · upload_video · publish_video · revoke_grant

Test Bench: CERTIFIED(dogfood-facade) — 14/15 checks · facade over the live relay

Usage: not collected — by design

Eclipse Envoy MCP

The signed front door for agent-to-agent business: counterparties vetted into risk tiers, told exactly what their tier allows, negotiated with in drafts. It binds nothing — only the owner binds Cyan Eclipse.

identity_get · inquiry_open · fact_request · scope_draft_open · proposal_submit · room_send · attestation_submit · receipt-grade audit

Test Bench: CERTIFIED(local) — 17/18 checks · local build · offline fixtures

Usage: not collected — by design

Eclipse Fathom MCP

DeFi, measured honestly: a signed protocol registry, dual-source risk reads that render DIVERGENT instead of averaging, and an allowance audit that flags the unlimited grants. Reads only — no execution surface exists.

registry_list · registry_verify · position_read · health_read · depeg_watch · allowance_audit · address_check · exposure_read

Test Bench: CERTIFIED(local) — 16/17 checks · reads only · fixture transport

Usage: not collected — by design

Eclipse Codex MCP

Banking regulation as data: a citation-exact versioned library, a deadline engine that knows rule clocks from guidance cadences, local sanctions screening with no auto-clear, and exam-evidence packs whose gap section cannot be suppressed.

library_search · obligation_map · deadline_compute · clock_status · screen_lookup · screen_disposition_record · evidence_pack_build · receipt_verify

Test Bench: CERTIFIED(local) — 18/19 checks · synthetic fixture institution

Usage: not collected — by design

Eclipse Till MCP

Bazaar checkout for agents — a separate server from the discovery MCP: hash-bound all-in quotes, Wallet-mandate verification against the all-in total, signed buyer-bound entitlements, and a non-delivery refund that fires itself. Sandbox test credits only. Ads Rail P1 extension: charge-time mandate enforcement for ad spend — Stripe test mode only, NOT PROVEN IN STRIPE.

catalog_price · quote_get · purchase_execute · buyer_approve · entitlement_verify · delivery_status · refund_request · receipt_get

Test Bench: CERTIFIED(local) — 23/24 checks · sandbox test credits only · Ads Rail P1: CERTIFIED(local/simulator) — 100/100, test mode only, NOT PROVEN IN STRIPE

Usage: not collected — by design

Eclipse Book MCP

The Markets core: one canonical book across exchanges and prediction markets, criteria verbatim + hash-pinned, fee truth or FEE_UNVERIFIED, resolutions verified only against their own named source — and no probability field, ever. Market data + venue access layer — not an exchange.

instrument_ingest · book_ingest · quote_get · fee_schedule_register · position_open · resolution_verify · order_draft · venue_status

Test Bench: CERTIFIED(local) — 16/17 checks · data only · not an exchange

Usage: not collected — by design

Eclipse Forecast MCP

The Polymarket adapter: the venue’s prices with their criteria, liquidity, and resolution state attached — token/outcome mapping pinned from the venue’s own arrays. Data only; the US trading surface is absent by design.

forecast_sync · market_list · market_get · book_get · quote_get · resolution_get · venue_status · receipt_list

Test Bench: CERTIFIED(local) — 13/14 checks · data only · no US trading surface

Usage: not collected — by design

Eclipse Strike MCP

The Coinbase public-data adapter: products and level-2 books normalized into the suite’s one book, unmapped statuses preserved verbatim, fee truth or FEE_UNVERIFIED. Coinbase’s account MCPs are re-implemented nowhere — no account tools exist.

product_list · product_get · book_get · quote_get · venue_status · receipt_list

Test Bench: CERTIFIED(local) — 13/14 checks · public data only · no account tools

Usage: not collected — by design

Eclipse Meter MCP

Cross-provider agent spend analytics — one ledger for tokens, tools, and payments. Every record is signed at ingest and hash-chained; the retry share of spend is computed from links, not estimated; attestation exports verify offline with the public key only. Meter reports and never blocks — enforcement is Tripwire. Local v0.1 — fixture transport only; live ingest is not built.

meter_ingest · cost_record_list · spend_rollup · budget_posture · cost_attest_get · adapter_list · receipt_list

Test Bench: CERTIFIED(local) — 19/20 checks · local build

Usage: not collected — by design

Eclipse Tripwire MCP

Runaway enforcement for agent spend: deterministic velocity, loop, spawn, and cap-trajectory detectors over recorded event streams — and a freeze that is verified against the Wallet before it is ever recorded confirmed. A backend that lies about freezing gets FREEZE_UNCONFIRMED and a critical owner page, never a success record. Sandbox only — fixture streams, the sandbox Wallet, test USDC.

tripwire_wallet_bind · tripwire_rule_set · tripwire_arm · tripwire_disarm · tripwire_ingest · freeze_now · unfreeze · tripwire_events · tripwire_status

Test Bench: CERTIFIED(local) — 18/19 checks · local build

Usage: not collected — by design

Eclipse Umbra MCP

Cross-registry lookalike, typosquat, and silent-endpoint-change watch for agent identities. Findings issue only in a closed state vocabulary, each backed by a reproducible evidence pack and signed under a dedicated findings key — a witness, never an accuser, with no enforcement verb at any tier. Local v0.1 — snapshot import only; live crawling is gated per registry and not built.

snapshot_import · watchlist_set · diff_run · similarity_scan · finding_issue · finding_get · finding_list · finding_verify · rebuttal_file · receipt_list · receipt_verify

Test Bench: CERTIFIED(local) — 18/19 checks · local build

Usage: not collected — by design

Eclipse Blackbox MCP

The tamper-evident flight recorder for agent actions: an append-only, hash-chained record signed at ingest by a recorder-held key the recorded agent never touches. The agent's credential can only append — no read, verify, or export path — and the recorder grades evidence from proof, receipting its own gaps as signed INGEST_GAP events. No update, delete, or redact verb exists. Local v0.1 — single-store; the hosted recorder is owner-gated and not built.

record_append · record_verify_chain · record_read · record_export_pack · record_status

Test Bench: CERTIFIED(local) — 22/22 checks · local build

Usage: not collected — by design

Eclipse Docket MCP

Agent-to-agent dispute process — structured claims, evidence packs, recorded determinations. Not a court, not a legal judgment. The pack assembles from the underlying product's receipts alone, byte-identical for both parties; narratives are data with zero state effect, and outcomes are process states the underlying machine executes or declines. Expiry records silence, never a default judgment. Local v0.1 — Till fixture receipts; arbitration-as-service is owner + counsel gated. PRICED $5.00/filing (PC-7) via the Bazaar bench-order path only — no checkout or buy-now link; free local v0.1 stays free, and the third-party filing rail is counsel-gated.

dispute_file · evidence_pack_get · submission_add · determination_record · dispute_withdraw · dispute_status

Test Bench: CERTIFIED(local) — 19/20 checks · local build

Usage: not collected — by design

Eclipse Countermark MCP

One verification call for third-party agent cards and payment mandates — a receipted verdict a merchant can rely on, across formats. Every verdict enumerates the checks actually performed and carries provenance; presented-only artifacts cap at UNRESOLVED, and there is no approve, release, or trust-score surface. Local v0.1 — fixture issuers + fixture revocation feed; live issuer discovery is not built.

verify_card · verify_mandate · verify_revocation_status · verification_receipt

Test Bench: CERTIFIED(local) — 23/24 checks · local build

Usage: not collected — by design

Eclipse Census MCP

Agent discovery & inventory of record — from authorized sources only. Every item traces to a receipted discovery event, and an item that cannot cite one cannot render; source claims stay attributed and are never promoted to Census verdicts, and every export carries its coverage gaps. Local v0.1 — fixture sources only; tenant connectors are gated and not built.

census_sources · census_discover · census_list · census_get · census_shadow · census_reconcile · census_export · census_diff · receipt_list · receipt_verify

Test Bench: CERTIFIED(local) — 23/24 checks · local build

Usage: not collected — by design

Eclipse Crosswalk MCP

Multi-regime AI-obligation mapping — which AI laws bind your systems, what evidence satisfies each. A versioned obligation library with as-of resolution and a role dimension; candidate classifications bind to the exact fact-set hash and the determination stays permanently empty and customer-owned. Evidence machinery, never verdicts. Local v0.1 — synthetic fixture deployer only; live customer data is counsel-gated.

library_search · library_provision · obligation_map · classification_candidates · obligation_coverage · clock_rules · clock_status · evidence_pack_build · evidence_pack_verify · receipt_verify

Test Bench: CERTIFIED(local) — 21/22 checks · local build

Usage: not collected — by design

Eclipse Redteam MCP

Adversarial simulation for AI agents — sandboxed twins only, never the production agent. No tool accepts a free-form target: probe construction sits downstream of a signed, in-date authorization record and a registration proof, so an unauthorized target refuses before any probe exists. Reports are signed and verify offline. Local v0.1 — fixture twins only; external runs are counsel-gated. PRICED $2.00/run (PC-8) via the Bazaar bench-order path only — no checkout or buy-now link; free local v0.1 stays free.

rt_register_target · rt_suites_list · rt_run_suite · rt_report

Test Bench: CERTIFIED(local) — 26/27 checks · local build

Usage: not collected — by design

Eclipse Span MCP

Delegation-chain governance: spawn limits, depth caps, mandate attenuation. Every proposed spawn is checked against a total componentwise attenuation order walked to an owner-signed root, with subtree budgets enforced at every ancestor — chain-laundering by splitting spawns across children is arithmetically impossible. Local v0.1 — check-and-record, not blocking enforcement in external frameworks.

root_register · root_revoke · budget_set · chain_view · node_effective_mandate · spawn_check · spawn_record · spawn_close · chain_verify · ancestry · subtree

Test Bench: CERTIFIED(local) — 23/24 checks · local build

Usage: not collected — by design

Eclipse Airtime MCP

Mandate-bound ad operations. Spend enforcement happens before the platform call — a refusal makes zero calls — ad copy may publish only as claims drawn from a signed claims record, and every mutation or refusal seals into an advertiser-held evidence ledger that survives the account. No override tool exists; more spend is a new signed mandate. Local/simulator P0 — simulator transport only; no live spend exists.

mandate_issue · mandate_check · copy_screen · campaign_create_draft · campaign_set_status · audience_attach · ledger_get · appeal_pack_export

Test Bench: CERTIFIED(local/simulator) — 23/23 checks · simulator only · no live spend

Usage: not collected — by design

Eclipse Friction MCP

A signed, agent-only friction board: agents file infrastructure friction as findings backed by hash-chained trace packs the board verifies before surfacing — in a closed 15-class vocabulary (Emic-12 + house classes), never as free-text posts. Vendors answer on the record, and a fix closes only after a clean replay verifies it. No scores, no rankings, no leaderboard. Local v0.1 — local stdio board only; the hosted/public board is P1 and not built. Vendor findings feed $499/mo — interest only, not yet sold; no checkout or order path is open.

friction_file · friction_import · friction_get · friction_list · friction_verify · friction_supersede · friction_subject_register · friction_feed_read · friction_acknowledge · friction_rebut · friction_fix_claim · friction_fix_submit · friction_gate_check · friction_radar_digest · friction_board_status · friction_receipt_verify

Test Bench: CERTIFIED(local) — 41/41 checks · local build

Usage: not collected — by design

Eclipse BidMatrix MCP

Drop in a solicitation, get back the compliance matrix — every requirement row is a verbatim quote with its section + line locator, and sections that yield nothing are flagged SILENT_EMPTY instead of silently dropped. Deadlines extract under strict formats only; vague or relative dates are flagged by name, never fabricated. Local v0.1 — caller-supplied text or local file; no SAM.gov fetch, no PDF parsing.

solicitation_shred · compliance_matrix · requirements_checklist · deadline_extract · set_aside_summary

Test Bench: CERTIFIED(local) — 25/26 checks · local build

Usage: not collected — by design

Section 508 Evidence MCP

WCAG 2.1 A/AA audits of supplied HTML that produce the deliverable federal buyers actually require: ACR/VPAT-ready evidence. Every finding is bound to its criterion, a verbatim snippet, and an element locator; the 15 criteria static markup cannot decide are reported NOT_STATICALLY_DECIDABLE with reasons — never silently passed, and a zero-failure audit still claims conformance NONE. Local v0.1 — static analysis of supplied HTML; no rendered DOM, no browser.

audit_html · acr_report · checks_list

Test Bench: CERTIFIED(local) — 19/20 checks · local build

Usage: not collected — by design

FedScope MCP

Federal + state opportunity search with deterministic fit and newcomer scoring and plain-language summaries — not a raw API wrapper. Every score decomposes into named factors with per-factor points; every summary names the record fields it traces to and flags absent facts instead of inventing them. Exactly 4 read-only tools; no fetch verb exists. Local v0.1 — caller-supplied / bundled local datasets; no live SAM.gov fetch.

opportunity_search · opportunity_score · opportunity_summarize · validate_dataset

Test Bench: CERTIFIED(local) — 21/22 checks · local build

Usage: not collected — by design

Eclipse Health Check MCP

Scan an MCP server or agent configuration for security posture — 23 checks in 7 categories, every finding cited to file + line with severity and fix bound to the check definition, and a score that never prints without its decomposition. The scanner reads targets only: it never executes, imports, or probes them, and credential values are masked in its evidence. Local v0.1 — static scanner; no live probing.

health_scan · health_scan_config · health_checks_list · health_explain_check

Test Bench: CERTIFIED(local) — 21/22 checks · local build

Usage: not collected — by design

Eclipse Legacy Recon MCP

Point an agent at a codebase: architecture map, dependency/EOL risk list with rule-cited claims, and modernization estimate inputs — never an estimate. Claims keep DECLARED / OBSERVED / INFERRED separate, and anything not statically determinable reports UNKNOWN with the reason instead of a guessed stack. Local v0.1 — read-only static recon at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md), CERTIFIED(local) at that scope. The former universal claim FAILED at card -10 and stays on the record: this shelf does not hide its failures.

recon_scan · architecture_map · dependency_risk_list · modernization_inputs

Test Bench: CERTIFIED(local) — 30/30 checks · local build · at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md): Positive DECLARED, OBSERVED, and INFERRED reports only within CLAIM-SCOPE.md, with evidence or basis carried in the output; OBSERVED is not exhaustive · withdrawn W1–W9 named in CLAIM-SCOPE.md and the catalog entry · scoped re-bench card -11 supersedes the card -10 FAILED standing at the former universal claim; all 11 scorecards retained append-only

Usage: not collected — by design

Eclipse Steward MCP

Team-chat agent governance — a signed, version-chained mandate is the whole authority: the agent surface holds no dispatch verb and no credential, the gate re-checks mandate, kill, disclosure, quiet windows, and caps at dispatch, and every read is receipted. Chat content never governs — an in-chat mandate amendment refuses even from the workspace owner. It governs the agent — it never monitors the people. Local/simulator v0.1 — fixture adapters for Slack, Teams, Discord; no live platform, no real messages. Name CONDITIONAL (trademark screen pending; fallback Eclipse Usher); the spec's 7 owner decisions ship at their spec defaults, carried in the catalog manifest.

workspace_bind · mandate_issue · mandate_amend · draft_approve · gate_dispatch · kill_issue · disclosure_check · receipt_verify · read · draft_propose

Test Bench: CERTIFIED(local) — 27/28 checks · local build

Usage: not collected — by design

Eclipse Mail MCP

A governed email identity for an agent: scoped grants (send/read/search only), review-first sending where the owner approves the exact draft — signature included — and a kill switch that fails closed on every surface. Inbound mail is evidence, never instructions: SPF/DKIM/DMARC verdicts set the trust tier, no valid signed envelope means never agent-tier, and the §5 fraud firewall is by construction — payment, credential, trust, and disclosure instructions from email are non-actionable because no tool can adopt them; detection opens an out-of-band verification workflow keyed to the registry number-of-record. Local / fixture-only v0.1 — synthetic fixture mailbox behind the live transport seam; NO live mailbox, NO live sending, no real credentials. One disclosed PARTIAL: the fraud detector's detection prong is pattern-bounded on extended evasions (7/12) — an evasion loses the flag only, never protected state; a semantic detector pass is required before any live claim. (Working name.)

grant_issue · fixture_load · list_inbox · read_message · search_messages · ingest_message · draft_create · draft_approve · send_message · reply_message · get_grant_status · revoke · audit_list · fraud_list · registry_list · signature_set · template_register · allowlist_add · freeze_correspondent · unfreeze_correspondent

Test Bench: CERTIFIED(local / fixture-only) — 48/49 checks · local / fixture-only build

Usage: not collected — by design

Eclipse Proof MCP

Governed video production for agents: timelines assemble freely, but export executes only against a Herald-signed approval pinning the exact edit-decision fingerprint — post-approval drift refuses, every adapter mutation is read-back-verified (the Resolve API fails silently), and Proof Print seals render evidence — captions verbatim — to the approval. No code-exec tool exists on any surface. Local v0.1 — benched against a declared simulated Resolve-shaped adapter; no live-Resolve claim (no Resolve Studio seat on the build VM).

project_open · project_attest · timeline_read · timeline_fingerprint · export_presets_list · template_list · media_import · clip_place · clip_trim · text_set · template_instantiate · marker_set · approval_request · export_execute · session_close · proof_print_verify · proof_trace_fingerprint · proof_trace_diff

Test Bench: CERTIFIED(local) — 35/37 checks · local build · simulated Resolve-shaped adapter — no live Resolve claim

Usage: not collected — by design

Eclipse Charter MCP

Personal-finance governance across all of the owner's accounts: policy-of-record drift named with both values, cross-account wash-sale watch including the IRA trap (Rev. Rul. 2008-5) caught pre-settlement, fee math against policy ceilings, and a permanent grant-keeper — Schwab grants AGING at day 5, EXPIRED_FAIL_CLOSED at day 7. Not a bank. Not an investment adviser. Charter checks your rules — it never writes them. Local v0.1 — Plaid-shaped fixture adapter and fixture-form dogfood; no live Plaid claim.

policy_upsert · policy_get · accounts_snapshot · positions_get · lots_get · activity_get · drift_check · wash_scan · fee_report · grant_status · document_ingest

Test Bench: CERTIFIED(local) — 24/24 checks · local build · Plaid-shaped fixture adapter — no live Plaid

Usage: not collected — by design

Eclipse Colophon MCP

The catalog of record for books: a signed TitleRecord per title — only signed versions enforce — with rights, prices and royalties recomputed line-by-line from record terms and checked everywhere the book sells, in a closed 8-class divergence vocabulary. Discovered editions are quarantined, the price-match trap fires CRITICAL at check time, and pirate sources refuse by name — there is no price-write verb. Local/simulator v0.1 — synthetic fixtures only; no live retailer or KDP data.

calibre_diff_record · calibre_ingest_library · divergence_get · divergence_list · divergence_resolve · drift_check_feed · drift_check_listing · drift_scan_catalog · edition_list · epub_check · onix_build · onix_diff · onix_validate · record_get · record_history_get · record_rights_cell · record_sign_version · record_upsert_edition · record_upsert_title · royalty_ingest_report · royalty_ledger_get · royalty_reconcile · royalty_run_get

Test Bench: CERTIFIED(local/simulator) — 19/19 checks · synthetic fixtures only

Usage: not collected — by design

Eclipse Tether MCP

The mandate layer between an agent and a moving machine: physical task authority exists only inside a Herald-signed mandate pinning agent × robot serials × human-authored task templates × workspace envelope × speed/force ceilings × occupancy × window, enforced at a site bridge that is the only routed path to the robot — and every session, refusals and human overrides included, seals into an offline-verifiable evidence pack. No direct-motion surface exists. Simulator v0.1 — ROS 2 + Gazebo + UR-class arm sim; no hardware claim.

fleet_discover · session_open · task_templates_list · task_dispatch · task_status · task_abort · telemetry_read · image_read · session_close · mandate_register · mandate_revoke · template_register · template_revoke · site_freeze_set · session_reattest · pack_verify · pack_render · pack_compare · gauge_check_mandate · gauge_check_template · gauge_check_pair · gauge_limits_list

Test Bench: CERTIFIED(simulator) — 31/31 checks · simulator only · no hardware

Usage: not collected — by design

Eclipse Proving MCP

Governed bench access for agents: physical bench authority exists only inside a Herald-signed mandate pinning agent × board × operation classes × exact artifact hashes, enforced at the bridge holding the target connections — an artifact one byte off its pin refuses, receipted, with no override anywhere on the surface — and every session, gaps and refusals included, seals into an offline-verifiable evidence pack. Fuse programming, PMIC/voltage configuration, and boot-strap changes are permanently refused: no tool exists. Simulator v0.1 — adapters are simulated-PS (evidence class: emulator); no live transport exercised and no hardware claim.

bench_discover · session_open · session_status · target_connect · target_attest · register_read · memory_read · console_read · artifact_load · memory_write · target_run · target_halt · power_set · target_reset · persistent_write · session_close · pin_verify · pin_show · pin_status · gate_run · pack_verify · gate_assertions_check

Test Bench: CERTIFIED(simulator) — 10/10 checks · simulator only · simulated-PS adapters (emulator class) · no live transport exercised

Usage: not collected — by design

Eclipse Wageward MCP

Governed HR + payroll operations for agents: agents prepare runs and filing packets, a human approves the exact run — fingerprint-bound and Herald-signed, with any post-approval drift refused by name — bank changes verify through the employee's own channel, SSNs/bank numbers exist only as keyed-HMAC tokens, and every packet carries the statement that approval does not transfer payroll-tax liability. Approval-and-evidence rail ONLY — submit-class tools (payroll_run_submit / filing_submit) are ABSENT by design; local v0.1 over a synthetic workforce, no live provider, money, or filing.

workforce_roster_read · compensation_read · pay_history_read · payroll_run_prepare · payroll_run_diff · run_fingerprint_get · filing_packet_prepare · anomaly_scan · change_request_open · change_request_status · access_ledger_read · synthetic_workforce_generate · pin_verify · run_reconcile · change_check · access_pack_verify

Test Bench: CERTIFIED(local) — 20/20 checks · approval-and-evidence rail only · submit-class tools absent by design · synthetic workforce only

Usage: not collected — by design

Eclipse Covenant MCP

Consent-enforcement + evidence for real-estate lead work: every lead carries a Herald-signed provenance record (classes never blended), and outreach executes only through a send-time Gate — mandate × per-channel consent scope × named-seller coverage × no open revocation × fresh DNC scrub × fair-housing guards — with every send and refusal sealed into an evidence pack for the broker of record. Consent rules are versioned data packs; missing or stale packs fail closed. P0 synthetic only — no live outreach; counsel HARD GATE stands before any P1 live use.

lead_intake · consent_attach_certificate · consent_record_read · consent_history · revocation_record · lead_context_read · outreach_text · outreach_call_place · outreach_email · followup_sequence_plan · showing_schedule · copy_screen · criteria_screen · consent_record_verify

Test Bench: CERTIFIED(local/simulator) — 40/40 checks · P0 synthetic only · counsel hard gate before any P1 live outreach

Usage: not collected — by design

Eclipse Meridian MCP

Governed telehealth operations: encounters execute only when licensure × consent × mandate verify at encounter time against the patient's attested location; AI-drafted notes live cryptographically outside the record until the treating clinician signs the exact fingerprint; minimum-necessary PHI reads are purpose-declared and every read — granted or refused — seals a hash-chained access record. Not a healthcare provider. Synthetic scope only — no live PHI, no real EHR connection; NO signing capability exists in this product (no note_finalize-class tool, in any phase) and no prescribing surface; P1 requires HIPAA counsel + executed BAA + a design partner.

mandate_upsert · mandate_get · license_verify_at_encounter · consent_set_required · encounter_gate_check · encounter_schedule · encounter_start_gate · encounter_pack_get · intake_template_get · intake_status_get · note_draft_create · note_fingerprint_get · note_sign_request · note_signed_status_get · note_addendum_create · patient_context_get · appointment_get · access_pack_get · access_pack_verify

Test Bench: CERTIFIED(local, synthetic scope) — 22/22 checks · synthetic only · no signing capability exists in the product

Usage: not collected — by design

Eclipse Consent MCP

Per-agent, per-purpose consent receipts for personal data — a grant an agent must present, and a revocation that propagates. Processors present a receipt id at action time and get ALLOW/DENY synchronously against current state, so a revocation binds at the very next check; a grant without full provenance is void, and a grantee can never write its own consent (CONSENT_SELF_ASSERTED). Local v0.1 — fixture subjects only, enforced by the product (SUBJECT_NOT_FIXTURE); real-subject processing and jurisdiction packs are held (G-COUNSEL), consumer grant UX held (G-OWNER).

consent_grant · consent_check · consent_revoke · consent_history · consent_dependents

Test Bench: CERTIFIED(local) — 23/24 checks · local build · fixture subjects only

Usage: not collected — by design

Eclipse Lineage MCP

Agent provenance — spawn trees, model/config lineage, and version ancestry: who spawned whom, running what, changed when. A behavior-relevant config change mints a new generation identity instead of editing the old one (GENERATION_IMMUTABLE); per-root signed hash chains verify offline and name the first broken link; prompts and configs are recorded as hashes only — there is no prompt_get. Local v0.1 — self/consented emission only; corroboration is labeled UNVERIFIED by construction (no per-agent key registry in v0); framework adapters (G-LIVE) and hosted lineage (G-OWNER) are held, not built.

lineage_spawn · lineage_config_change · lineage_retire · lineage_tree · lineage_verify

Test Bench: CERTIFIED(local) — 10/10 checks · local build · scoped re-bench run 3

Usage: not collected — by design

Eclipse Attest MCP

Signed performance attestations for agents, issued only against settled, receipt-backed work — reputation that travels because its evidence does. Wash and self-dealing are excluded by construction (WASH_EXCLUDED), outcomes are a closed vocabulary with banded value — no stars, no free-text reviews — and evidence diversity is computed from the registry's accountable identity, so a Sybil cluster cannot inflate it by assertion. Local v0.1 — Till settlement receipts are the only admitted evidence class; public feeds/leaderboards (G-COUNSEL) and new evidence classes (G-OWNER) are held gates, not built.

attest_issue · attest_verify · attest_list_subject · attest_revoke · attest_dispute

Test Bench: CERTIFIED(local) — 10/10 checks · local build · scoped re-bench (C12 diversity)

Usage: not collected — by design

Eclipse Revoke MCP

Signed revocation lists for agent cards, keys, and mandates — an issuer revokes once, and subscribers learn it from a signed, epoch-versioned feed they can check offline, with staleness announced, never silent. Only the original issuer (or its recorded successor) can originate a revocation; any other signer refuses REVOKE_NOT_ISSUER and is receipted as a violation attempt. Local v0.1 — own-issuer feed + offline check over fixture issuers; external distribution (G-REG/G-LIVE) and emergency classes (G-COUNSEL) are held gates, not built; no enforcement verb exists.

revoke_issue · revoke_counter_notice · list_publish · revocation_check · feed_status · feed_acknowledge

Test Bench: CERTIFIED(local) — 13/13 checks · local build

Usage: not collected — by design

Eclipse Keyhold MCP

Credential leases, never raw keys — scoped, expiring leases over NON-OAuth static credentials (raw API keys, PATs) under Wallet policy semantics: allowlist scope, expiry, use-count cap, audience binding, per-lease kill switch. The secret is sealed on the operator's own machine under the owner master key; the server holds ciphertext and contains no decrypt path; redemption injects the credential after the model's view ends. Local v0.1 — first-party scope, one redemption class (https_static_key), fixture transport; third-party custody is HELD (G-COUNSEL + G-OWNER + security review; may conclude never); name CONDITIONAL (trademark screen owed, G-TM).

secret_enroll · lease_issue · lease_status · lease_list · lease_revoke · redemption_audit

Test Bench: CERTIFIED(local) — 13/13 checks · local build · first-party scope (59/59 probes)

Usage: not collected — by design

Eclipse Loft MCP

Governed design-to-print authority for agents: fabrication runs only inside a signed mandate pinning agent × printer serial × design pin × slicer build × profile hash × material × envelope × site class × window, enforced at a bridge holding the only printer credentials. The bridge re-slices the pinned inputs at dispatch and hash-matches the toolpath before any printer contact — hand-edited toolpaths, poisoned profiles, slicer drift and material swaps refuse by name before heat — and every print and refusal seals into an evidence pack verified offline by Loft Proof. No raw G-code surface exists, and config writes are permanently refused. Simulator v0.1 — host-shaped sim printers only (OctoPrint virtual + virtual Klipper/Moonraker); no live printer exercised. Proof verifies only against a trusted signer anchor — unanchored packs report PRINT_UNVERIFIED by design. Geometry: declared geometry only.

design_register · design_inspect · design_pin_get · printers_discover · session_open · job_prepare · job_dispatch · job_status · job_abort · telemetry_read · session_close

Test Bench: CERTIFIED(simulator) — 12/12 checks · simulator only · host-shaped sim printers · no live printer exercised · Proof requires a trusted signer anchor

Usage: not collected — by design

Eclipse Corona MCP

Sealed render-proof for deployed websites: the verifier renders the served artifact across a pinned matrix (Chromium/Firefox/WebKit × three viewports), runs a closed vocabulary of mechanical probes at each cell, hashes every screenshot, and seals measurements + hashes into a signed pack bound to the deployed artifact's hashes — recomputed offline by anyone. The publish gate may say 'verified live' only while a PASS served pack's hashes equal the deployed manifest; any served-byte change invalidates the proof, and the gate blocks the word 'verified', never the publish. Local verifier only, at the P0 ceiling — no hosted/live scope. A pack proves identity and mechanical soundness of the pinned bytes only — never that an asset is semantically the right asset; semantic approval is the separate human act on the contact sheet. Name CONDITIONAL — trademark screen pending (fallbacks: Eclipse Transit, Eclipse Behold, Eclipse Lantern).

verify_deploy · verify_page · pack_inspect · pack_recompute · probe_registry

Test Bench: CERTIFIED(local) — 25/27 checks · local verifier only · P0 ceiling · render-proof packs bound to deployed artifact hashes · no semantic-correctness claim · name CONDITIONAL (TM screen pending)

Usage: not collected — by design

Eclipse Crosslist MCP

Publish once, tracked everywhere: selecting a registry (Eclipse Bazaar, Official MCP Registry, Glama, Smithery) materializes that registry's own verb set and native data model as MCP tools — with native|adapted|absent provenance and honest absences (Glama carries ZERO write verbs; claim execution refuses permanently) — while one Herald-signed mandate submits a single canonical manifest across registries and a hash-chained ledger tracks each registry's listing state with Herald-sealable receipts. No union index, no cross-facet search, no fused ranking. Certified at split per-facet scopes — root+ledger and the Bazaar facet CERTIFIED(local); Official CERTIFIED(live-read) with writes CERTIFIED(fixture) only, NOT live-write certified; Smithery CERTIFIED(live-read) for search/get with the rest CERTIFIED(fixture); Glama CERTIFIED(fixture-read) only; Herald dependency FIXTURE ONLY (ECDSA P-256 fixture verification; production RSA-JWS not exercised). Receipts are sealable / pending — never sealed. Known limitations: deeply nested error envelopes (depth 4+) can escape detection and error-shaped data keys can be refused by mistake; resubmission repair runs just before mandate verification (nothing is written or accepted first); a submitted track whose registry record is entirely absent has no automatic exit — it stays submitted rather than inventing a state; a Glama submit against its absent native verb consumes the mandate nonce, so a later legitimate use can read as a replay.

list_registries · select_registry · deselect_registry · invoke_facet_tool · ledger_create_track · ledger_submit · ledger_status · ledger_poll · ledger_list_tracks · ledger_receipts · + 33 facet verbs (Bazaar 8 · Official 8 · Glama 8 read-only · Smithery 9)

Test Bench: CERTIFIED(split per facet) — 39/40 checks · root+ledger CERTIFIED(local) · Bazaar CERTIFIED(local) · Official CERTIFIED(live-read), writes fixture only · Smithery CERTIFIED(live-read) search/get, rest fixture · Glama CERTIFIED(fixture-read) only · Herald FIXTURE ONLY · receipts sealable/pending, never sealed · no live-write claim · dogfood: full real catalog tracked + served through the Bazaar facet

Usage: not collected — by design

Eclipse Verbatim MCP

Title 26 as a sealed object: the OLRC-published text (release point Public Law 119-124) is sealed at ingest under the published canonicalization verbatim-canon/1.1 — per-section hashes for all 2,277 sections, dual Merkle roots, a signed manifest — and its headline verb is cite-check: a quoted passage gets a byte-for-byte verdict (MATCH / DIVERGES with the first divergence localized / NOT_IN_CORPUS) against the sealed text. OLRC editorial notes are sealed in a separate EDITORIAL layer and never served as statute. An independent implementation written from the spec alone reproduces the seal exactly — 2,277/2,277 in both layers. CERTIFIED(local) — local stdio only, no hosted scope. No advice surface: no tool interprets, explains, applies, or calculates anything; Title 26 statute only — no CFR; the corpus is a dated snapshot at the named release point, never described as current law. Known limitations: a MATCH for a repealed section carries no status field (D-5); 115 identifier-absent sections are reachable only via manifest paging, search, or unclaimed cite-check (D-6); the cite-check candidate pre-filter can only produce non-MATCH outcomes, never a false MATCH (D-7); two spec-clarification errata candidates are on record (prose-form title citations, D-8; nested-note text rule, D-9). Signing uses labelled Herald FIXTURE keys only — never production custody. Name CONDITIONAL — trademark screen (spec D1) is owner-side and still open (fallbacks: Eclipse Quire, Eclipse Schedule).

get_section · search · notes_get · cite_check · section_verify · manifest_get · manifest_verify · corpus_status · snapshot_list · lineage

Test Bench: CERTIFIED(local) — 5/5 checks · scoped re-bench scopes all PASS · full-spec-literal recompute 2277/2277 both layers · canon verbatim-canon/1.1 · snapshot usc26-119-124-de68dcc8b3db · cite-check hostile battery: 0 false MATCH · Herald FIXTURE keys only · name CONDITIONAL (TM screen pending)

Usage: not collected — by design

Eclipse Roll MCP

Filing prep + proof for business & government filings: a filing is prepared, approved, and evidenced as a Herald-signed DELTA between the registry-of-record's own current state — read back through its sanctioned public surface at prep time — and the exact artifact to be submitted; after the human submits via the registry's own channel, Proof re-reads the registry and seals proof-of-filing only if the public record changed exactly as approved (a mismatch seals FILED_UNVERIFIED + a Radar discrepancy — never a partial seal). Renewal Radar tracks deadlines against registry state; the built dogfood subjects are CETech's own Florida annual report, SAM.gov renewal watch, and VetCert radar entry — all labelled fixtures. CERTIFIED(local) at FIXTURE scope: every Gauge adapter is a labelled fixture and NO live registry read has been exercised yet. NO submission verb exists on any surface, in any name — prep-and-seal only; the human always submits. UPL fence at the tool layer: advice / selection / interpretation / clearance refuse by name (ADVICE_CLASS_REFUSED). The bench arc is on the record: first bench FAILED (23/34 — revocation not propagating into live sessions; Proof certifying a filing the read-back had refuted), the fix round closed D1–D10, and the scoped re-bench passed 17/17 attacking the fix code with fresh shapes. Name CONDITIONAL — trademark screen pending (fallbacks: Eclipse Seal, Eclipse Record).

session_open · registry_record_get · filing_prepare · filing_diff · pack_get · pack_seal · pack_verify · pack_render · pack_compare · radar_entries_list · radar_entry_get · radar_refresh · + mandate + gauge surfaces (18 tools, 5 disjoint surfaces)

Test Bench: CERTIFIED(local) — 17/17 checks · scoped re-bench (first bench FAILED — baseline card retained) · FIXTURE scope · Gauge adapters labelled fixtures · no live registry read exercised · no submission verb exists · UPL fence ADVICE_CLASS_REFUSED · counsel gate stands pre-P1 · name CONDITIONAL (TM screen pending)

Usage: not collected — by design

Eclipse Verbatim — Executive Orders

Executive Orders as sealed objects: Federal Register full-text XML sealed per section under canon-eo/1.0 into snapshot eo-20261022-26818c895dee — 1,315 orders, per-section hashes, a signed manifest — with a disposition graph extracted from the orders' own sealed sections: 10,667 edges, each pinned to the hash of the asserting section and typed by provenance (TEXT / FR_NOTE / NARA_TABLE). Where the consulted sources disagree, the disagreement itself is sealed as a DIVERGENCE record — 823, status OPEN, never resolved by the product. CERTIFIED(local) — local stdio only, no hosted scope. Coverage is measured, not assumed: sealed text runs from 2000 (the Federal Register full-text XML floor, measured — the 1994 assumption was falsified); 258 orders are EXCLUDED_NAMED (NO_FR_FULL_TEXT_XML), never silently absent, and pre-2000 orders ride in a labelled unsealed metadata+edges layer reaching back to 1931. No tool characterizes legal effect — no status field exists anywhere in the product; a disposition answer is an edge set + as_of + a coverage window + the standing completeness sentence. Bench arc on the record: PARTIAL on cards -1/-2 (certification withheld on EO-D1-2 alone — whole-cue scope emission trusted the savings idiom), the fix round closed it: the FULL census went 9 → 5 with every survivor re-derived by the bench from the sealed asserting text, 186/186 stated ranges re-derived verbatim, extraction precision/recall 1.000 on a fresh labelled sample. Two LOW findings (EO-D1-4, EO-D1-5) stand synthetic-only, corpus-swept, with a pre-reseal sweep condition. The snapshot seal is a labelled FIXTURE seal — never production Herald custody. Name CONDITIONAL — inherits the pending Eclipse Verbatim trademark screen (family fallbacks: Eclipse Quire, Eclipse Schedule).

search_orders · get_order · get_section · cite_check · verify_manifest · disposition · revocation_chain · resolve_authority · graph_divergences · corpus_status

Test Bench: CERTIFIED(local) — scoped re-bench #3 · 7/7 checks · FULL census 5 genuine · 186/186 ranges · precision/recall 1.000 · suite 76/76 · snapshot eo-20261022-26818c895dee · FIXTURE seal · name CONDITIONAL

Usage: not collected — by design

Eclipse Flood Witness

Flood evidence over sealed snapshots of FEMA's public National Flood Hazard Layer: an offline evidence engine that seals NFHL county extracts per partition under flood-canon/1.0 and mints geometry determinations as signed, independently recomputable receipts — the standalone verifier ships in the tree, and anyone can re-derive a receipt from its sealed snapshot. Two Florida partitions are sealed: Leon (snapshot nfhl-fl-leon-20260611-bec93b592c31 — 12,099 features) and Monroe (nfhl-fl-monroe-20261022-4776f79b6d7c — 9,664 features); the operative index fw-index-202610-abd4c392bd16 enumerates all 67 Florida counties and names the other 65 NOT_SEALED — Miami-Dade is NOT_SEALED (pending), never silently absent. Subjects are geometry (FOOTPRINT / STRUCTURE_POINT / PARCEL); an address is refused as a subject. BFE has exactly three outcomes and no datum-conversion code path exists; drift between vintages is classified by causal source record across a closed 12-class grammar. CERTIFIED(local) — local stdio only; the runtime has no live-query path. This is an evidence-grade receipt witness only: never a determination of record, never an SFHDF, never lender-compliant, never an insurance-required/not-required answer, and never a statement that a property is "safe" — determination-shaped, insurance-shaped, risk-score, and live-query tool names are refused by name. Bench arc on the record: card -1 PARTIAL(local); the fix round closed FW-D1..D7 and the scoped re-bench verified all seven FIXED against fresh shapes, not the builder's regressions. Flag-1 qualifier: the LOMC override branch (LOMC_OVERRIDE_APPLIES) is FIXTURE-PROVEN ONLY — the LOMA layer is absent from FEMA's county shapefile distribution, the sealed corpus holds zero LOMA/LOMR-F records, and the branch has never fired on real sealed data. One LOW (FW-D8) stands as a printed condition: a LOMR case wholly removed in a later vintage did not raise drift — fixed in code after the bench; it must hold before any second-vintage drift output is published. All seals are FIXTURE_SIGNED (Herald fixture key) and labelled as such. Nothing here states or implies endorsement by, affiliation with, or certification from FEMA or any government agency — FEMA/NFHL/FIRM name the public data source only. Name CONDITIONAL — working name, trademark screen owed. PRICED — witnessed reads $7.50 single-parcel · $12.00 footprint/parcel (PC-5) via the Bazaar bench-order path only — no checkout or buy-now link; free local v0.1 stays free.

determine · verify_receipt · receipt_get · drift_report · watch_set · watch_list · coverage_status · manifest_get · manifest_verify · geocode_explore

Test Bench: CERTIFIED(local) — scoped re-bench · 7/7 checks · 2 sealed partitions (Leon 12,099 · Monroe 9,664 features) · Miami-Dade NOT_SEALED · Flag-1: LOMC override FIXTURE-PROVEN ONLY · FW-D8 printed condition · FIXTURE_SIGNED seals · name CONDITIONAL

Usage: not collected — by design

Eclipse Recall Witness

Recall campaigns, witnessed: NHTSA serves what a campaign says now and overwrites what it said — this product seals the saying. The recalls flat file seals nightly into a hash-chained anchor (recall-anchor/1.0) and every campaign's full payload seals as an immutable vintage under recall-canon/1.0; a campaign that disappears seals as a tombstone vintage, never a silent drop. Drift between consecutive vintages seals as events across the closed recall-events/1.1 grammar — POPULATION_EXPANSION · REMEDY_CHANGE · ESCALATION_DO_NOT_DRIVE · ESCALATION_PARK_OUTSIDE · CORRECTION · CLOSURE, each with closed subtypes — an escalation is never absorbed into an expansion. Advisory detection is normalized token-pattern matching harvested from the live escalation stock (BMW/Mazda/Ford/Ferrari “advised not to drive”, Porsche 24V809 “should not drive”, GM/Kia park-outside) and cross-checked against the API's own parkIt/parkOutSide flags: 15/15 live campaigns agree. Posture-at-date derives exclusively from sealed vintages — before the first vintage the answer is NOT_SEALED, printed with its reason and the campaign's own first-vintage date. Mandate-bound check receipts run one live CAMPAIGN-LEVEL check and seal what it returned. CERTIFIED(local, FIXTURE scope) — local stdio only. Every receipt prints scope_class: CAMPAIGN-LEVEL and the three standing sentences byte-exact: “This record states what NHTSA served at the stated time. It is not a safety determination about any vehicle.” · “This receipt proves a check was made and what it returned. It is not a legal determination of compliance with any law.” · “Per-VIN unrepaired status is NOT determined by this check.” A specific VIN is never called “open” — per-VIN unrepaired status is never determined here (the consumer VIN lookup is never automated; no such code path exists in the tree). Bench arc on the record: card -1 PARTIAL(local, FIXTURE scope); the fix round closed RW-D1..RW-D6 and the scoped re-bench verified all six FIXED against fresh shapes, not the builder's regressions (136 checks, 127 pass). LIVE-PROVEN at cross-check + check-issuance scope against api.nhtsa.gov: the live cross-check seals 24V809 with cross_check OK, its DO_NOT_DRIVE tag agreeing with parkIt: true; an altered-summary hold-out sealed nothing (FAILED + named); one live check receipt (rcpt-00001, Porsche 911 MY2024) carries exactly the 4 campaigns the live API returns and recomputes MATCH. NOT live: the nightly flat-file spine — www-odi.nhtsa.dot.gov remains unreachable from the build egress (re-probed 2026-10-26, empty reply) and was NOT re-routed to the API, because the flat file is the canon source; LIVE scope waits on the first real nightly ingest and live-key cutover (owner). Churn is MEASURING: counters seal inside every anchor from night one and no rates exist before a day-90 segment seals. Three LOW conditions stand printed on card -2, all riding the recall-events/1.2 / next-seal touch: RW-D7 — the park-outside matcher can tag narrative “parked outside” rollaway text as a false PARK_OUTSIDE (no live-stock instance); RW-D8 — the chain walk does not yet assert the genesis links (first-vintage/first-anchor prev-hash tampers verify MATCH; content integrity unaffected); RW-D9 — operate/use paraphrase families tag nothing, so no escalation-completeness claim is made beyond the live-stock-proven phrase families. All seals are under FIXTURE ECDSA keys, labelled seal_key_class: FIXTURE on every artifact. Pricing is NOT YET SET — no price points exist in the approved price book for this product; nothing is priced or activated. Name CONDITIONAL — working name, trademark screen owed.

get_campaign · get_campaign_vintage · list_campaign_vintages · get_drift_events · list_campaigns_for_vehicle · get_posture_at_date · get_anchor · get_churn_series · verify_receipt · issue_check_receipt · ingest_run · archive_seal · churn_publish

Test Bench: CERTIFIED(local) — FIXTURE scope · scoped re-bench · 127/136 checks · RW-D1..D6 FIXED verified · live cross-check + 1 live check issuance PROVEN (api.nhtsa.gov) · nightly spine FIXTURE-proven — first live ingest pending · churn MEASURING · RW-D7/RW-D8/RW-D9 LOW conditions printed · FIXTURE keys · name CONDITIONAL

Usage: not collected — by design

Eclipse Sunset

MCP deprecation radar: sunset notices are witnessed against registry history, so a “deprecated” claim is provable — and the migration diff is generated from the witnessed before/after schemas, not scraped docs. Each ingested snapshot is SHA-256 hashed over its canonical JSON and hash-chained in ingest order; every finding cites both snapshot hashes of the witnessed pair. A claim with no witnessed pair behind it returns UNPROVEN — there is no announcement input surface at all. Detection over a witnessed pair: tools removed, tools newly deprecated, version changes, schema-breaking changes. Every proof-issuing surface is gated on full chain verification: a tampered ledger yields UNPROVEN + chain_invalid, never a minted claim. CERTIFIED (local, fixture) — Verity re-bench of v0.1.1 (2026-10-26): probe 5 chain attacks PASS 4/4 + strict extras 9/9, full prior suite re-run 44/44; defect D1 (HIGH) closed. Scope is LOCAL/fixture only: local JSON snapshot ingest, stdio transport, bundled weather fixtures — no live registry is crawled and no live-registry claim is made or tested. FREE — the free radar feeds paid listing-hygiene and re-bench work; no payment anything in this server.

ingest_snapshot · detect_sunsets · migration_diff · verify_sunset_claim · chain_status

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · probe 5 chain attacks 4/4 + strict extras 9/9 · full suite 44/44 · D1 (HIGH) closed · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · FREE funnel

Usage: not collected — by design

Eclipse Nexus Witness

Sales-tax determination witness for agent checkouts: the tax answer ships as a sealed, vintage-stamped witness receipt (jurisdiction + rate + rule version at order time), so a later audit replays the exact basis — tax APIs return answers, not evidence. Verification replays the exact fixture rule at the receipt's vintage: a re-sealed receipt claiming the new rate at the old vintage is still INVALID, and an old receipt keeps verifying against the OLD rule after a newer vintage is added. Unknown jurisdiction, category, or vintage refuses cleanly — no rate is ever invented. CERTIFIED (local, fixture-vintage) — Verity independent bench 2026-10-26: 81/81 checks, two consecutive runs. Scope is LOCAL / fixture-vintage ONLY: fictional jurisdictions, DEMO/fixture rates, NOT tax advice, NOT real rates — no live tax determination is made or claimed. Fix-before-live defects (all LOW, disclosed, not hidden): D1 the seal is an unkeyed local hash seal (VALID means consistent with the fixture rule at its vintage, not server-issued); D2 refusal responses carry no DEMO envelope; D3 the advertised additionalProperties: false schemas are not enforced in dispatch. Any live phase is counsel-gated (SPEC §2). PRICED $0.25/check (PC-2) via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

determine · verify_receipt · list_rules · receipt_basis

Test Bench: CERTIFIED (local, fixture-vintage) — Verity bench 2026-10-26 · 81/81 checks ×2 runs · replay 11/11 · forgery 22/22 · honesty 12/12 · D1/D2/D3 LOW fix-before-live disclosed · evidence: Verity VERDICT (no test-bench scorecard issued) · LOCAL/fixture-vintage only · DEMO rates · NOT tax advice · PRICED $0.25/check (PC-2), bench-order path only

Usage: not collected — by design

Eclipse Warranty

Warranty registration witness for agent purchases: serial, buyer mandate, and retailer receipt are bound into one sealed, transferable claim pack. The pack is transferable on resale because it is bound to the product serial + sealed purchase proof, not to a retailer account login — transfer appends a chained record and re-seals, and verification recomputes the seal from the serial, bindings, and transfer chain alone, with no account credential and no original holder. The v0.1.1 seal covers the complete pack object and verify enforces strict structure, so nothing added, relabelled, or retyped passes as sealed; the advertised tool schemas are enforced at dispatch with no coercion. CERTIFIED (local, fixture) — Verity re-bench 2026-10-26: 95 asserted PASS / 0 FAIL; D1 + D2 closed. Scope is LOCAL/fixture only: caller-supplied fixture purchase refs, HMAC-SHA256 demo seal with a local demo key — the pack is a witness record, not a warranty contract; no adjudication, coverage, or enforceability is claimed, and no retailer or manufacturer is contacted. Disclosed: packs sealed under v0.1.0 verify INVALID under v0.1.1 (no migration — fixtures are re-registered). FREE — the funnel into Eclipse Procure; no payment anything in this server.

register_warranty · get_pack · verify_pack · transfer_pack · claim_check

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · 95 asserted PASS / 0 FAIL · D1 attacks 26/26 · D2 attacks 24/24 · D1+D2 closed · v0.1.0 seal break disclosed (no migration — fixtures re-registered) · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · witness record, not a warranty contract · FREE funnel

Usage: not collected — by design

Eclipse Toolprint

Session-bound fingerprint chain for MCP tool descriptions: at session start every tool's name, description, and schema is canonical-hashed and pinned as the genesis of a hash-chained session record; at call time the presented description is re-hashed — the hash of the exact description the agent saw when it decided to call — and any difference is INVALIDATED as a proof record carrying both hashes, which stays in the chain even if the description is swapped back. Static scanners inspect a server once, at rest; Toolprint catches the post-pin swap they structurally cannot. CERTIFIED (local) — Verity re-bench 2026-10-26: 18/18 PASS across 2 runs; the v0.1.1 caller-anchored chain head closes D1 — tail truncation (deleting the proof record) is detected against the caller's anchored head_hash + record_count, and unanchored reads are labelled anchored:false. Scope is LOCAL only: a local verification engine operating on caller-supplied tool lists + fixtures — it does NOT proxy live MCP traffic, does not connect to remote servers, does not execute described tools, and makes no network calls. PRICED $0.05/call (PC-3) via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

pin_session · verify_call · get_session_chain · detect_drift · fingerprint_tool

Test Bench: CERTIFIED (local) — Verity re-bench 2026-10-26 · 18/18 PASS ×2 runs · D1 tail-truncation closed (caller-anchored head) · prior v0.1 bench 40/40 CONDITIONAL · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL only · not a proxy · PRICED $0.05/call (PC-3), bench-order path only

Usage: not collected — by design

Eclipse Boomerang

Governed returns for agent purchases: registration seals the order ref, serial, amount, mandate, and receipt together and derives the receipt and mandate hashes inside the seal; a return authorizes only when the sealed purchase exists and verifies, the presented serial matches, the sealed mandate scope explicitly includes returns, and a condition attestation is present at initiation — the sealed return record carries the receipt hash, mandate hash, and purchase seal, recomputable without trusting caller assertions. A receipt-free return has no authorization path, and there is no override or manual-approve tool. CERTIFIED (local, fixture) — Verity re-bench 2026-10-26: 57/57 PASS + full cross-check 83/83; D1 + D2 closed. Scope is LOCAL/fixture only: caller-supplied fixture purchase records, HMAC-SHA256 demo seal with a local demo key — authorization is a sealed local record, not a real-world returns or logistics action; nothing is shipped, received, refunded, or restocked, and no merchant, carrier, payment, or logistics system is contacted. PRICED $1.00/return (Procure per-order pattern) via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

register_purchase · initiate_return · verify_return · get_return · list_denials

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · 57/57 PASS · full cross-check 83/83 · D1+D2 closed · prior v0.1 bench CONDITIONAL (mechanism full pass) · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · sealed record, not a real-world returns action · PRICED $1.00/return, bench-order path only

Usage: not collected — by design

Eclipse Rebuttal

Chargeback rebuttal evidence packets for agent purchases: the sealed Procure/Till mandate chain — who authorized what, the authorization scope, and the drift-abort log — is auto-translated into generic reason-code evidence sections, with every evidence element traced to a specific mandate, receipt, or dispute record id. An incomplete chain is marked INCOMPLETE with each missing element named, and evidence is never fabricated. CERTIFIED (local, fixture) — Verity re-bench 2026-10-26: 39/39 PASS; D1–D5 closed. Scope is LOCAL/fixture only: caller-supplied fixture dispute, mandate-chain, and receipt data, HMAC-SHA256 demo seal with a local demo key — packet generation only; it never files, submits, or transmits anything, and no card network, issuer, merchant, or platform is contacted. Reason codes are a small generic table, not any network's proprietary codes, and no network affiliation is claimed. PRICED $5.00/filing (PC-7) via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

ingest_dispute · map_evidence · build_packet · validate_case · get_packet

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · 39/39 PASS · D1–D5 closed · prior v0.1 bench CONDITIONAL 45/51 (mechanism full pass) · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · packet generation only, never files/submits/transmits · generic reason codes, no network affiliation · PRICED $5.00/filing, bench-order path only

Usage: not collected — by design

Eclipse Crawlway

Pay-per-crawl licensing receipts for publishers: a sealed receipt binds crawler identity, license-terms hash, and content fingerprint in one recomputable record — licensing and proof-of-license are the same artifact — hash-chained per publisher and revocable by terms version, with the meter derived only from sealed receipts. CERTIFIED (local, fixture) — Verity re-bench 2026-10-26: 48/48 PASS; C1–C3/D4/D5 closed. Scope is LOCAL/fixture only — receipt mechanics only: no crawling, no fetching, no network calls, no marketplace; callers supply content fingerprints (SHA-256 hashes), never content. One known LOW disclosed (D6, fix-before-live): a corrupt non-JSON store line crashes the non-meter tools, failing loud. The meter is recorded at $0.01/call, never charged in v0.1. PRICED $0.01/call (PC-1) via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

publish_terms · record_crawl · verify_receipt · revoke_terms · meter_report

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · 48/48 PASS · C1–C3/D4/D5 closed · D6 LOW disclosed (corrupt store line crashes non-meter tools, fails loud; fix-before-live) · prior v0.1 bench CONDITIONAL 49/49 asserted · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · receipt mechanics only, no crawling/fetching · meter recorded, never charged · PRICED $0.01/call, bench-order path only

Usage: not collected — by design

Eclipse Outwatch

Independent uptime/SLA witnessing for MCP servers: local-simulated probes issue hash-chained availability receipts feeding a recomputable trust record, and a badge auto-degrades on witnessed downtime — availability is recomputed only from receipts; no self-report is accepted. CERTIFIED (LOCAL) — Verity re-bench 2026-10-26: 21/21 PASS (P6 aggregates 82 fresh-process vectors); D1–D3 closed. Scope is LOCAL only — probes run only against localhost or fixture:// endpoints; vantage points are local-simulated probe identities, NOT geographically independent; no live external monitoring. Known LOWs disclosed (D4: unauthenticated chain — forged append / tail truncation undetectable under store-write access, pin chain_head externally; D5: free-form vantage names, list form uncapped). PRICED $299/mo feed license via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

register_target · probe_now · get_trust_record · verify_chain · badge_state

Test Bench: CERTIFIED (LOCAL) — Verity re-bench 2026-10-26 · 21/21 PASS · P6 = 82 fresh-process vectors · D1–D3 closed · D4/D5 LOWs disclosed (unauthenticated chain / tail truncation; free-form vantage names) · prior v0.1 bench CONDITIONAL (LOCAL) 72/76 · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL only · localhost/fixture-only probing · vantages local-simulated, not geographically independent · PRICED $299/mo feed, bench-order path only

Usage: not collected — by design

Eclipse MPP Session Witness MCP

MPP session evidence / witness: mandate-sealed sessions, counter-signed draws, and witness receipts over fixture sessions and a local mock relay — Moderato testnet shapes only; no chain interaction, no live clearing, no live Meter ingest.

session_open · session_draw · session_close · session_status · receipt_get · receipt_verify · buyer_counter_sign · session_open_accept · session_close_accept · session_list · dispute_pack_get · revocation_present · anomaly_queue_read

Test Bench: PASS-CONDITIONAL (sandbox/fixture) — local stdio, fixture sessions + mock relay, Moderato testnet SHAPES, no chain interaction, no live clearing, no live Meter ingest, K6 claims only

Usage: not collected — by design

Eclipse Feedforge

Converts a merchant's messy catalog into an agent-grade product feed with per-attribute provenance: every attribute records {value, source_field, rule_id, source_value} and verify_feed recomputes each byte-for-byte from the source rows and the documented deterministic rule set (R01–R12) — an attribute no rule can produce is absent, never invented, and unmapped source fields are reported. CERTIFIED (local, fixture) — Verity re-bench 2026-10-26: 98/98 PASS + expanded fuzz 156/156; D1 closed. Scope is LOCAL/fixture only — local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only, no LLM calls, no network calls. PRICED $49/mo hosted bundle pattern via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product, and no hosted service is being sold as live in v0.1.

ingest_catalog · list_rules · transform_feed · verify_feed · explain_attribute

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 2026-10-26 · 98/98 PASS · fuzz 156/156 · D1 closed · prior v0.1 bench CONDITIONAL 93/98 (sole defect D1 HIGH) · evidence: Verity VERDICT + REBENCH-1 (no test-bench scorecard issued) · LOCAL/fixture only · deterministic transforms only, no LLM/network · attributes absent, never invented · PRICED $49/mo bundle pattern, bench-order path only

Usage: not collected — by design

Eclipse Permits

Permit status witnessed: sealed per-read provenance receipts, hash-chained history, offline recompute. The receipt warrants the read; it never warrants the status.

session_open · coverage_list · permit_search · permit_get_current · witness_read · witness_history · receipt_get · witness_verify · witness_compare · checklist_list · checklist_get · watch_register · watch_list · watch_refresh

Test Bench: CERTIFIED(local) — CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-permits-mcp-2026-10-26-2.json (scoped re-bench of the card -1 PARTIAL fix round; card -1 retained append-only): the witnessed-ledger mechanism, fence/refusal battery, chain-tamper and unchanged-read behaviour all PASS at local scope. Per the card's own scope verdicts: the Accela Citizen leg is certified at FIXTURE conformance only — the §7.7 Florida dogfood exit gate (owner's own Accela account, ≥1 real chain, ≥2 reads) remains OUTSTANDING and owner-side, outside this verdict; the dual-source leg is OUT OF CERTIFIED SCOPE (no dual-route jurisdiction at P0; refusal path benches correctly). Signing posture at P0 is fixture-labelled (FIXTURE_SIGNED).

Usage: not collected — by design

Eclipse SEC Figure Witness

Sealed SEC filing figures as filed + restatement chains, recomputable offline.

figure_at_moment · figure_history · release_figures · filing_figures · chain_get · chain_search · figure_verify · chain_verify · divergence_edgar_self · corpus_status · manifest_get · manifest_verify

Test Bench: no bench verdict on record

Usage: not collected — by design

Eclipse Scholarly Witness

Disposition-notice witness: sealed retraction/correction/concern events with provenance, open divergences, recomputable reference audits.

work_resolve · disposition_lookup · reference_audit · audit_verify · drift_since · divergences_list · snapshot_status · manifest_get · manifest_verify

Test Bench: CERTIFIED(local, fixture scope) — CERTIFIED(local, fixture scope) — Verity scoped re-bench 2026-10-26, standing card eclipse-scholarly-witness-mcp-2026-10-26-2.json (card -1 PARTIAL(local, fixture scope) retained append-only and superseded), scope language exact from the card: sealed snapshot srw-20261026-ea6bc90cf693, duplicate-bearing audit receipts recompute MATCH on both verification surfaces with tamper-by-name divergence, receipts carry the full §9.3 field set incl. the CC-BY attribution, disposition answers carry the §6.3 as-of block on all branches, work_resolve surfaces per-pin source labels, and the reinstatement-only population shape is consistent under amendment A3. Fixture signer (FIXTURE_SIGNED) — no live/production claim; PubMed errata coverage window 2023-01-01..2026-10-26 remains disclosed in the manifest known_bounds.

Usage: not collected — by design

Eclipse Patent Witness

Sealed witness of the USPTO patent record: legal-status event ledgers, claim-text divergence receipts, and recorded assignment chains — each recomputable offline from a named snapshot. Record state only; not a legal opinion, not a status service.

subject_ledger_get · subject_ledger_verify · claims_divergence_get · claims_divergence_verify · assignment_chain_get · assignment_chain_verify · source_drift_list · snapshot_status · manifest_verify

Test Bench: PARTIAL — PARTIAL(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, card eclipse-patent-witness-mcp-2026-10-26.json: certification WITHHELD on three MED defects (PW-D1, PW-D2, PW-D4); this product is NOT certified. The card's scope language is binding: scope caps at local, FIXTURE scope — every seal is FIXTURE_SIGNED under fixture keys over fixture extracts; the mechanism (sealed legal-status event ledger, claims divergence, assignment-chain witness, source-drift witness) was measured certified-grade and every derivation was independently recomputed byte-identical, but no CERTIFIED verdict exists for this product. Live ODP ingest is MEASURED BLOCKED (bench re-verified HTTP 401 without an operator ODP key) and no live seal exists.

Usage: not collected — by design

Eclipse Trademark Witness

Trademark screening witness: sealed corpus, recomputable search receipts. A screening witness, not a search engine and not an opinion machine — it renders no verdict.

tm_screen_execute · tm_corpus_manifest_get · tm_receipt_get · tm_receipt_verify · tm_receipt_recompute · tm_lifecycle_chain_get · tm_lifecycle_verify · tm_corpus_manifest_verify

Test Bench: no bench verdict on record

Usage: not collected — by design

Eclipse Split

Pre-agreed revenue splits for multi-agent tasks: split weights are sealed into the delegation mandate at spawn time and settled against attestation-backed completion records — the split cannot be renegotiated after the work is done; settlement binds mandate hash + completion record ids + per-agent amounts into one sealed, recomputable record (partial-completion renormalization per the documented §6 rule). CERTIFIED (local, fixture) — Verity: v0.1.1 re-bench 35/35 (D1–D4 closed) + v0.1.2 Amendment #1 delta-bench 94/94, 0 defects. Scope is LOCAL/fixture only — allocation math and sealed records only: no money movement, no payment rails, wallets, or payouts; fixture completion records with unkeyed SHA-256 demo seals (a keyed seal is required before any non-fixture use). A settlement event is a per-order settlement OR an MPP session close-out — the accumulated session settles as ONE settlement event (Amendment #1; definition only, no MPP/payment capability). PRICED $1.00/settlement event via the Eclipse Bazaar bench-order path only — no checkout, payment, or buy-now link exists for this product.

create_mandate · record_completion · settle · verify_settlement · amend_weights · supersede_mandate

Test Bench: CERTIFIED (local, fixture) — Verity re-bench 35/35 (v0.1.1, D1–D4 closed) + Amendment #1 delta-bench 94/94, 0 defects (v0.1.2) · prior v0.1 bench CONDITIONAL 65/69 · evidence: Verity REBENCH-1 + DELTA-BENCH-AMENDMENT-1 (no test-bench scorecard issued) · LOCAL/fixture only · allocation math + sealed records only, no money movement · unkeyed demo seals — keyed seal fix-before-live · settlement event = per-order OR session close-out as ONE event · PRICED $1.00/settlement event, bench-order path only

Usage: not collected — by design

Eclipse Brake

Third-party halt authority for agent fleets: runtimes poll a local policy endpoint, a BRAKE verdict halts the fleet within the poll interval, and the runtime returns a signed halt receipt proving it actually stopped — a fleet is HALTED only when every enrolled runtime's valid receipt binds to the verdict hash; no receipt means the episode closes UNPROVEN-HALT, never softened. The episode pack recomputes offline from the pack alone. CERTIFIED (LOCAL/simulator) — Verity re-bench of v0.1.1 fixed and independently verified all D1–D10 defects from the v0.1.0 FAIL bench (43/43; F-B14 decisive 5/5), returning CONDITIONAL on condition C1 (ND1); Verity spot re-bench of v0.1.2 CLOSED C1: all five close-statement strip variants return verified: false, BRAKE_VERIFY_FAIL:5, downgraded: true per §6.6; honest paths verify unchanged. Scope is LOCAL/simulator only — local policy endpoint + fixture runtime, no live fleets; fixture HMAC signing. PRICED $199/mo per fleet via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product; hosted fleet shape waits Gate B1.

fleet_enrol · verdict_issue · fleet_status · episode_pack_get · receipt_verify · policy_poll · halt_receipt_submit · runtime_reenrol

Test Bench: CERTIFIED (LOCAL/simulator) — Verity re-bench v0.1.1: D1–D10 fixed, 43/43 + F-B14 5/5; spot re-bench v0.1.2: C1 (ND1) CLOSED — 5/5 strip variants FAIL:5 downgraded: true, honest paths unchanged 3/3, ND2 fixed, ND3 accepted spec-correct, builder suite 51/51, spot probes 13/13 · evidence: Verity spot re-bench report (no test-bench scorecard issued) · LOCAL/simulator only · local policy endpoint + fixture runtime, no live fleets · fixture HMAC signing · PRICED $199/mo per fleet, bench-order path only

Usage: not collected — by design

Eclipse Benchkit

Free vendor self-bench SDK: run your declared check battery locally, emit a sealed scorecard in the Assay scorecard format, and let a verifier harness re-run a random sample — fabricated self-benches become statistically detectable. CERTIFIED (local/fixture) — fixture vendor servers only; a spot-check receipt is not a house bench verdict and not a certification of any vendor server.

benchkit_run_begin · benchkit_check_record · benchkit_scorecard_seal · benchkit_scorecard_get · benchkit_export_get · spotcheck_request · spotcheck_run · spotcheck_receipt_get · spotcheck_recompute · anomaly_queue_read

Test Bench: CERTIFIED (local/fixture) — CERTIFIED (local/fixture) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-benchkit.md): CERTIFIED (local/fixture). All prior v0.1.0 FAIL defects closed and independently verified — D1 (sample predictable to vendor) and D2 (F-B14 startup/config fence absent) blockers, M1–M4 majors (seal counts unsigned, recompute unauthenticated, keys hardcoded, verifier token missing), m1–m5 minors. Builder suite 27/27 fresh process. The decisive property holds adversarially: the spot-check sample is unknowable pre-reveal from every public input probed (6,005 candidate nonces from public state matched none; caller-supplied verifier/vendor nonces refused by name, 0 manifests). Two NEW minors recorded, neither gating this scope: N1 fence-scan encoding edges (sk_live_ form, uppercase scheme, scheme-less endpoints) and N2 seed-commitment provenance (commitment first appears in the manifest at draw time; unpredictability rests on per-draw CSPRNG regardless). Scope binds exactly: vendor self-bench SDK in the Assay scorecard format with verifier spot-check sampling, against fixture vendor servers only — local/fixture scope. A spot-check receipt is a statement about a sample of one sealed scorecard, powered as stated on its face — not a house bench verdict and not a certification of any vendor server.

Usage: not collected — by design

Eclipse Payseal

Pre-payment verdict binding a purchase order, a spending mandate, and a delivery receipt into one token — MATCH, MISMATCH, or PARTIAL_DELIVERY only when all three agree under the six agreement checks; delivered value is derived from accepted lines at PO prices, never trusted at face value, and verdict evidence recomputes offline from the export alone. CERTIFIED (LOCAL/simulator, fixture triples) — fixture PO / mandate / delivery-receipt triples only; no live invoice, mandate service, delivery system, or payment rail is touched. Payseal issues verdicts only: it never executes, authorizes, or guarantees a payment. PRICED $0.10/call via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

payseal_evaluate · payseal_verdict_get · payseal_verify · payseal_dispute_handoff · payseal_evaluation_list · payseal_anomaly_queue_read

Test Bench: CERTIFIED (LOCAL/simulator, fixture triples) — Verity narrow re-bench v0.1.2: R-P1 closed (derived valuation; re-signed forgeries fail at check 3), R-P2 spot-verified, 38/38, F-P9 recomputed · evidence: Verity re-bench report (no test-bench scorecard issued) · LOCAL/simulator only · fixture triples only · verdict only, no payment execution · PRICED $0.10/call, bench-order path only

Usage: not collected — by design

Eclipse Settleseal

Three-way reconciliation — mandate ledger vs rail settlement records (x402/MPP/card shapes) vs bank payout — performed neutrally over normalized records, with every unmatched item sealed as an exception receipt a third party can recompute offline from the export + public keys alone; the 11-class exception taxonomy names exactly which leg is missing or which field, amount, or fee diverged, and nothing unmatched is ever a silent drop. CERTIFIED (simulator, fixture records) — fixture records on all three legs only; Settleseal moves no money, initiates no payout, corrects no ledger, and instructs no rail; no live rail or bank integration. PRICED $299/mo via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

settle_run_open · settle_leg_ingest · settle_leg_seal · settle_match · settle_exception_list · settle_run_receipt_get · settle_exception_ack · settle_export_get · settle_verify · settle_exception_get

Test Bench: CERTIFIED (simulator, fixture records) — Verity re-bench v0.1.1: B1/B2/B3 blockers fixed + re-proven, M1 two-leg classes ratified (SPEC §2.5 enum 8→11), 27/27, F-S9 SETTLE_VERIFY_PASS · evidence: Verity re-bench report (no test-bench scorecard issued) · simulator only · fixture records only, moves no money · PRICED $299/mo, bench-order path only

Usage: not collected — by design

Eclipse Mockmint

Watermarked synthetic-counterparty mint for commerce testing: fake merchants, agents and APIs whose every artifact carries the §4.4 synthetic watermark. CERTIFIED (LOCAL/sandbox) — local/sandbox only, no real counterparty is impersonated or connected to. Detection boundary stated on its face (Amendment A1): bare payload values with every structural field removed are NO_WATERMARK_FOUND — detection is not claimed at that level. CERTIFIED (LOCAL/sandbox) — local/sandbox only; no real counterparty is impersonated or connected to. PRICED $49/mo via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

mockmint_mint · mockmint_activate · mockmint_emit · mockmint_api_call · mockmint_list · mockmint_retire · mockmint_verify_watermark · mockmint_detect · mockmint_export

Test Bench: CERTIFIED (LOCAL/sandbox) — Verity re-bench v0.1.1: D1-D10 fixed + re-proven, 49/49, detection boundary as measured (bare payload = NO_WATERMARK_FOUND) · evidence: Verity re-bench report (no test-bench scorecard issued) · LOCAL/sandbox only · PRICED $49/mo, bench-order path only

Usage: not collected — by design

Eclipse Reviewseal

Receipt-bound review corpus: every review bound to a sealed purchase receipt, with a recomputable verified-share statistic. CERTIFIED (LOCAL/simulator, fixture corpus) — fixture corpus only, no live marketplace integration. An evidence pack is recomputable but not tamper-evident against its own holder (re-bench n1). CERTIFIED (LOCAL/simulator, fixture corpus) — fixture corpus only; no live marketplace, no real review, no real buyer. An UNBOUND review is a fact about evidence, never a verdict that the review is fake. PRICED $0.01/review via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

corpus_open · review_submit · review_correct · review_tombstone · corpus_status · snapshot_seal · corpus_export_get · verified_share_get · verified_share_recompute · review_binding_check · anomaly_queue_read

Test Bench: CERTIFIED (LOCAL/simulator, fixture corpus) — Verity re-bench v0.1.1: receipt-bound corpus, verified-share recomputed from pack alone (7/10 exact), fail-closed fences · evidence: Verity re-bench report (no test-bench scorecard issued) · LOCAL/simulator only · fixture corpus only · PRICED $0.01/review, bench-order path only

Usage: not collected — by design

Eclipse Continuity

Agent identity-continuity chains: signed links across model/config changes — same principal, new model, verified offline. CERTIFIED (local/fixture) — fixture principals/models/keys only, local stdio, no live registry or identity claim. CERTIFIED (local/fixture) — fixture identity events only; no live registry, no production identity store. Continuity proves continuity, not trustworthiness. PRICED $0.05/verification via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

chain_genesis · chain_append · chain_head · chain_export · continuity_verify · continuity_verify_prefix

Test Bench: CERTIFIED (local/fixture) — Verity spot re-bench v0.1.2: C1 pin discipline closed (130 probes refuse/bind exactly), fork/revocation semantics verified · evidence: Verity spot re-bench report (no test-bench scorecard issued) · LOCAL/fixture only · PRICED $0.05/verification, bench-order path only

Usage: not collected — by design

Eclipse Regulens

Regulation-change impact receipts: fixture publications witnessed and deterministically mapped to your declared controls. CERTIFIED (LOCAL/simulator) — fixture corpus only, local stdio, no live ingestion. Not legal advice; not a compliance determination. CERTIFIED (LOCAL/simulator) — fixture corpus only; not legal advice; not a compliance determination. PRICED $199/mo via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

publication_witness · publication_get · control_set_declare · control_set_get · impact_map · impact_receipt_get · impact_verify

Test Bench: CERTIFIED (LOCAL/simulator) — Verity spot re-bench v0.1.2: N1-N3 closed, §6.2 face posture 14/14, F-R13 exact recompute · evidence: Verity spot re-bench report (no test-bench scorecard issued) · LOCAL/simulator only · fixture corpus only · not legal advice · PRICED $199/mo, bench-order path only

Usage: not collected — by design

Eclipse Scapegoat

Failure attribution is a recompute over the hash-chained record set — the verdict names the causal action and ships the proof path. CERTIFIED (local) — fixture record sets only; causal evidence, NOT a legal liability determination. CERTIFIED (local) — fixture record sets only; causal evidence, NOT a legal liability determination. PRICED $10/verdict via the Eclipse Bazaar bench-order/intake path only — no checkout, payment, or buy-now link exists for this product.

attribution_submit · attribution_run · verdict_get · proof_verify · methodology_get

Test Bench: CERTIFIED (local) — Verity spot re-bench v0.1.2: C1/N1 closed, proof-path attacks fail at named steps, honest pack passes · evidence: Verity spot re-bench report (no test-bench scorecard issued) · local only · fixture record sets only · NOT a legal liability determination · PRICED $10/verdict, bench-order path only

Usage: not collected — by design

Eclipse Sponsorline

Per-action-class sponsor acceptance receipts — a sponsor signs payments, publishing, or contracting separately, never one blanket acceptance. PASS-CONDITIONAL (local) — fixture sponsors/parties only. A Sponsorline receipt evidences that a sponsor signed stated acceptance terms for a stated action class at a stated time. It does not itself create, transfer, or enforce legal liability. Enforceability is a counsel question (§10) and is not claimed.

party_enrol · acceptance_present · acceptance_sign · acceptance_decline · acceptance_revoke · acceptance_status · action_check · sponsor_pack_get · receipt_verify

Test Bench: PASS-CONDITIONAL (local) — PASS-CONDITIONAL (local) — Verity bench of v0.1.0, 2026-10-27 (argus101-program-20261027/wave2/bench-sponsorline.md): builder suite 25/25 re-run from clean state; decisive fixture F-S14 independently reproduced in a fresh process from pack + pinned keys alone (payments ACTIVE with per-action 5000 / aggregate 20000 limits and window on the receipt face; publishing and contracting UNACCEPTED by derivation over the complete chain; same descriptor COVERED-BY-RECEIPT as payments, CLASS_MISMATCH as publishing and contracting); 44/44 adversarial probes (pack-smuggled keys ignored, forged signatures fail at receipt_signatures, revocation replay, presented-status substitution, receipt-face tampering, malformed-args battery with store byte-identical, cross-surface byte-identical NO_SUCH_TOOL refusals, all 6 ordered class pairs CLASS_MISMATCH, 300-op seeded fuzz). PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture sponsors/parties only, value_class "test" on all artifacts, fixture HMAC stand-in for the Herald pattern (no live Herald key), no counsel-gate (§10) surface built or claimed. Conditions applied at ship: C1 — the bench's library-helper condition: the internal helper behind F-S14 branch (c) is not exposed on any tool surface and is not cited standalone in this listing or the README (verifier surface is receipt_verify only); C2 — the §11.2 liability fence is carried verbatim in the README, in the full manifest of record (server.legacy.json), and in this listing (the registry server.json description is the ≤100-char short form per the registry limit). All 3 builder deviations (D1 enrolment record_type, D2 unchained PRESENTATION_NOT_FOUND refusal, D3 SPEC.md §11.4 enumeration) were ACCEPTED at bench.

Usage: not collected — by design

Eclipse Morphguard

Payee-detail drift evidence over fixture records — before paying a known payee, Morphguard compares the bank/rail details presented against a continuous, hash-chained fingerprint history and returns CLEAR or BLOCK plus a drift receipt naming exactly which field classes changed. CERTIFIED (local, fixture payee records) — fixture payee records only; verdict to caller only, never executes payment; verification uses pinned fixture keys (HMAC fixture stand-in — not public keys); export packs carry fixture detail tokens for recompute and are not value-free.

payee_enroll · payee_check · payee_reenroll · payee_status · drift_receipt_get · chain_verify · payee_retire · chain_export · anomaly_queue_read

Test Bench: CERTIFIED (local, fixture payee records) — CERTIFIED (local, fixture payee records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-morphguard.md) returned PASS-CONDITIONAL at that scope subject to conditions C-1..C-4; the spot re-bench of v0.1.1 in the same record CLOSED C-1 and confirmed C-2/C-3/C-4: builder suite 32/32 re-run from clean state; decisive fixture F-G9 independently reproduced in a fresh process from pack file + local pinned fixture keys alone (drift classes exactly [bank_id, rail], last_agreeing_seq=4, head_fingerprint == fingerprint(drifted set)); C-1 long chains verified end-to-end at 23/30/40 records (verify args >20k generic cap, within the 200k pack limit) and chain_export labels witnessed only when its embedded transcript actually verified (refusal/failed transcripts downgrade to UNWITNESSED_EXPORT); 28-check adversarial battery on the verify layer (tamper, swap, deletion, forged signatures, pack-carried keys rejected at keys_pinned, wrong/swapped pinned keys fail) and 300-step model-checked state fuzz with 0 illegal transitions. Scope is exactly: local stdio MCP, fixture payee records only, verdict to caller only (never executes payment), HMAC pinned-fixture-keys signing (fixture stand-in, not public keys), no counsel-gate (§10) live phase built or claimed. Export packs carry fixture detail tokens for recompute and are NOT value-free (C-3); drift receipts carry fingerprints + changed field classes only, never values. chain_verify proves integrity of the records presented, not completeness of history (C-4): a consistently pruned prefix verifies as that shorter chain, so callers needing completeness must pin the head fingerprint + record count out-of-band.

Usage: not collected — by design

Eclipse Adproof

Pre-publication substantiation gate for fixture marketing claims — no sealed pointer, no publish; the published fixture artifact carries the pointer. CERTIFIED (local/fixture) — fixture claims/documents only, fixture publish pipeline only. The pointer proves substantiation was BOUND, not that it substantiates — substantiation adequacy is the publisher's/counsel's call. RSA key generation uses the random module (Mersenne Twister), not a CSPRNG — fixture keys only.

adproof_claim_submit · adproof_bind · adproof_gate_check · adproof_publish · adproof_pointer_verify · adproof_export

Test Bench: CERTIFIED (local/fixture) — CERTIFIED (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-adproof.md) returned PASS-CONDITIONAL (local/fixture) subject to condition C1; the spot re-bench of v0.1.1 in the same record CLOSED C1 and F2: builder suite 26/26 re-run from clean state; bencher-written independent C1 probes — orphan bind (locally hashed real fixture claim never submitted, and an arbitrary 'a'*64 hash) refused CLAIM_NOT_SUBMITTED with no pointer, no store.json created, zero state and zero metering; the full zero-submit path never reaches PUBLISHED or VERIFY_PASS; submitted binds meter exactly once and idempotent re-binds do not double-meter; future-bound pointer at the gate refuses POINTER_BOUND_IN_FUTURE (F2, not POINTER_MISMATCH, no gate receipt). Decisive fixture F-A10 independently reproduced: VERIFY_PASS in a fresh subprocess with a new empty data dir (no store.json created — genuinely offline/stateless), and tamper classes fail at their named steps (claim word altered VERIFY_FAIL:1, Herald signature stripped VERIFY_FAIL:3, presented-digest substitution both variants VERIFY_FAIL:1). Scope is exactly: local stdio MCP, fixture claims/documents only, fixture publish pipeline, offline pointer verification from artifact+document+pointer+gate receipt+chain segment+pinned public keys; value_class 'test' on all artifacts; no advertising-claims counsel-gate (SPEC §10) live phase built or claimed. Load-bearing label (SPEC §11.1, verbatim): the pointer proves substantiation was BOUND, not that it substantiates — substantiation adequacy is the publisher's/counsel's call. F5 standing fence: RSA key generation uses the random module (Mersenne Twister), not a CSPRNG — fixture-only; CSPRNG keygen + re-bench required before any scope above fixture.

Usage: not collected — by design

Eclipse Feeseal

Fee-schedule sealing + fee-verification witness over fixture transactions — every fee charged is sealed against the published fee-schedule version in force; overcharges against that version are detected automatically. CERTIFIED(local, fixture transactions) — fixture schedules + fixture transactions only; no real fee is charged, audited, refunded, or adjusted by Feeseal.

feeseal_schedule_present · feeseal_schedule_get · feeseal_check · feeseal_batch_check · feeseal_verify · feeseal_dispute_handoff · feeseal_chain_list · feeseal_anomaly_queue_read

Test Bench: CERTIFIED(local, fixture transactions) — CERTIFIED(local, fixture transactions) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-feeseal.md), clean bench, NO conditions: builder suite 29/29 re-run clean by bencher; decisive fixture F-F9 independently reproduced in fresh processes — batch spanning the v1 (250 bps) to v2 (300 bps) succession boundary recomputes exactly, including OVERCHARGE +70 (charged 350 vs v1-prescribed 280); relabelling the overcharged transaction as schedule_version 2 does not move the verdict (sealed in-force v1 governs, VERSION_CLAIM_MISMATCH on the verdict's face), and an edited sealed schedule copy fails at step 1 (FEESEAL_VERIFY_FAIL:step1_schedule_seal, UNVERIFIED_EXPORT). Bencher adversarial battery 33/33: forged signatures, presented-verdict substitution, schedule-swap, 21-call malformed-args battery, refusal-must-not-mutate, key custody, metering exactness, determinism — all pass. Scope is exactly: local stdio MCP, fixture schedules + fixture transactions only, value_class 'test' on all artifacts; no real fee is charged, audited, refunded, or adjusted by Feeseal and no live marketplace is touched; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): every fee charged is sealed against the published fee-schedule version in force; overcharges against that version are detected automatically. Advisory F-2/F-3 (non-blocking, do not limit scope): signing is an HMAC fixture stand-in for Herald RS256 (disclosed; live phase would need real Herald signing + re-bench); sealed effective_to is derived, never mutated; feeseal_verify step 4 does not independently anchor prev_hash (not exploitable without the Herald key; v0.2 hardening note).

Usage: not collected — by design

Eclipse Trueprice

Quote-sealing + checkout drift witness over fixture quote/checkout pairs — quote + full terms are hash-sealed at quote time; checkout drift of any term produces a drift receipt in a Docket-grade evidence pack format. CERTIFIED(local, fixture quote/checkout pairs) — fixture pairs only; no real quote or checkout is sealed or judged, and Trueprice never blocks or alters a checkout.

quote_seal · checkout_verify · seal_status · drift_receipt_get · seal_verify · seal_pack_export · anomaly_queue_read

Test Bench: CERTIFIED(local, fixture quote/checkout pairs) — CERTIFIED(local, fixture quote/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-trueprice.md) PASS-CONDITIONAL(local, fixture quote/checkout pairs) with conditions C1–C4, plus delta re-bench of v0.1.1 in the same record: C1, C2, C4 CLOSED at scope and C3 satisfied as scope wording (C3 persists as a scope limit, not a defect). Builder suite 35/35 at v0.1.0 and 44/44 at v0.1.1 (35 prior + 9 new TestBenchFixes011) re-run clean-state by bencher both times; decisive fixture F-T8 independently reproduced in fresh processes at both benches — quote sealed at T=2026-10-27T01:00:00Z, checkout drifting in exactly 3 named terms verified DRIFT, pack re-verified in a verifier-only subprocess from pack + pinned keys alone with drift re-derived exactly {unit_price, fees_as_stated, subscription_terms, total_all_in}. Delta re-bench independent probes 11/11 PASS with fresh bench-generated keys: stored counter-signature stripped/forged/absent-label-injected all SEAL_DEFECT with no verdict, intact MATCH; tampered stored receipt RECEIPT_UNVERIFIED and never served (idempotent re-verify also withholds it), intact served; DRIFT pack with drift_receipts dropped fails at step drift_receipt; key material nested 4 deep rejected key_material_in_pack; quote_ref drift fixture DRIFT ['quote_ref'] exactly. Scope is exactly: local stdio MCP, fixture quote/checkout pairs only, value_class 'test' on all artifacts; no live storefront, cart, payment page, price feed, or merchant system is touched, no real quote or checkout is sealed or judged, and Trueprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): quote + full terms are hash-sealed at quote time; checkout drift of any term produces a drift receipt in a Docket-grade evidence pack format — admissibility is a court's decision; Trueprice warrants the pack's recomputability, not its admission. C3 scope limit (standing): scope stays local/fixture until signing is real Herald RS256; v0.1.x verification is NOT public-key verification — the pinned key file holds a shared HMAC secret, not a public key, and any holder of it can forge seals; no RS256 / public-key / third-party-verifiability claim is licensed.

Usage: not collected — by design

Eclipse Kitseal

Continuous loadout sealing for agents over fixture loadouts — an operator-declared fixture configuration is genesis-sealed and every change streams as a hash-chained signed delta receipt; the current config is a recompute, never a stored claim. CERTIFIED(local, fixture loadouts) — fixture loadouts only; no real agent is sealed or streamed, and a seal attests presentation, sequence, and hashes — not runtime state.

loadout_seal_genesis · loadout_apply_delta · loadout_status · subscription_add · loadout_pack_export · feed_read · current_config_recompute · receipt_verify

Test Bench: CERTIFIED(local, fixture loadouts) — CERTIFIED(local, fixture loadouts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-kitseal.md) PASS-CONDITIONAL(local) with conditions C1–C2, plus delta re-bench of v0.1.1 in the same record: C1 CLOSED, C2 CLOSED at scope (local) — the v0.1.0 carve-out is LIFTED and no new findings were raised. Builder suite 34/34 at v0.1.0 and 40/40 at v0.1.1 (34 prior + 6 new TestReadPathVerifyC1C2) re-run clean-state by the bencher both times; decisive fixture F-K11 independently re-run in a fresh subprocess (pack + pinned key file only) at both benches, both branches PASS — verified:true, recomputed config_hash == loadout_status head hash 6ff16dd3…b7c6c @ seq 6, final tools [tool-alpha, tool-beta, tool-delta]; seq-3 withheld → KITSEAL_VERIFY_FAIL:gap@3, current_config:null, verified_through:2, export labelled STALE_OR_PARTIAL. Delta probes: tampered store (head result_config_hash set to deadbeef… + delta-1 Kitseal signature zeroed) → loadout_status, feed_read and the pack face all fail closed KITSEAL_VERIFY_FAIL:signature@1, state UNVERIFIED, no head hash asserted, no feed items served; deleted seq-3 record → gap@3 explicit (gaps:[3], gap_at:3), chain_complete_through=2 (verified prefix only); receipt_verify: isolated genuine seq-4 receipt → verified:false at genesis@0, gapped prefix → gap@2, tampered predecessor → signature@2, full chain → verified:true. Scope is exactly: local stdio MCP, fixture loadouts only, operator-declared fixture configurations, value_class 'test' throughout — now including loadout_status, feed_read, and pack-face head/state fields, which verify-before-serve; no real agent is sealed or streamed, Kitseal connects to no runtime, and no configuration is captured from any system; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): an agent's full tool/permission configuration is sealed and streamed; every change emits a delta receipt to subscribers (employers, insurers, auditors). Mandatory gloss (SPEC §11.3): sealed = an operator declared this configuration, in this order, at these times — recompute it yourself. Observation F4 (standing): signing is an HMAC-SHA256 fixture stand-in for the Herald pattern; symmetric fixture keys mean the operator/Kitseal key holder set is a local trust domain — consistent with (local) scope, to be revisited at any post-counsel gate.

Usage: not collected — by design

Eclipse Shelfprice

Listing view-to-checkout drift witness over fixture listing/checkout pairs — the price + full view terms are hash-sealed at view time; checkout drift of any term produces a signed drift receipt recomputable from the buyer-held pack. CERTIFIED(local, fixture listing/checkout pairs) — fixture pairs only; no live marketplace is touched, and Shelfprice never blocks or alters a checkout.

view_seal · checkout_verify · seal_status · drift_receipt_get · seal_verify · seal_pack_export · anomaly_queue_read

Test Bench: CERTIFIED(local, fixture listing/checkout pairs) — CERTIFIED(local, fixture listing/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-shelfprice.md) PASS-CONDITIONAL(local, fixture listing/checkout pairs) with conditions C1–C4 and a stored-path carve-out, plus delta re-bench of v0.1.1 in the same record (stored paths only): C1 CLOSED, C2 CLOSED, C3 CLOSED at scope — the carve-out is LIFTED and no new findings were raised. Builder suite 33/33 at v0.1.0 and 43/43 at v0.1.1 (33 prior + 10 new TestStoredPathIntegrity) re-run clean-state by the bencher both times; decisive fixture F-SP8 independently reproduced in a fresh process at both benches — seal at fixture T=2026-10-27T01:00:00Z (listing v3), checkout drifting exactly price + one fee + returns terms, pack re-verified in a verifier-only subprocess from pack + pinned fixture keys alone (fresh empty data dir, no state files written): verified True, verdict DRIFT re-derived, drifted exactly [unit_price, fees_as_stated, total_all_in, returns_terms_hash]. Delta probes 26/26 PASS: stored term_hashes rewritten to the drifted checkout's hashes and Herald signature zeroed both meet SEAL_DEFECT with no verdict issued and no record appended (the DRIFT-to-signed-MATCH laundering is dead); tampered stored verdict, backdated stored seal, forged seal_hash/2030 expiry, and tampered drift receipt all refuse SEAL_DEFECT and are never served, while intact controls serve normally on every path. Scope is exactly: local stdio MCP, fixture listing/checkout pairs only, value_class 'test' throughout — now including the online stored-read paths (checkout_verify fresh + idempotent, view_seal idempotent return, seal_status, drift_receipt_get), which recompute and signature-verify stored seals, verdicts, and receipts before serving; no live marketplace, listing page, storefront, cart, or seller system is touched, scraped, or judged, and Shelfprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): the price + terms an agent saw are sealed at view time, so view-to-checkout drift is recomputable from the buyer-held pack by the buyer. Accepted limitation F6 (on the face of the bench): a pack truncated to a prefix of the record chain verifies over the presented records only — the format has no completeness anchor; nothing presented can be forged or upgraded. C4 (standing scope condition): scope stays local/fixture until signing is real Herald RS256; no surface may describe v0.1 verification as public-key verification — 'pinned fixture keys' wording only. Verification uses pinned fixture keys only (fixture HMAC stand-in; not public-key verification); the pinned key file holds a shared HMAC secret, not a public key, any holder can forge seals, and no public-key or third-party verifiability is claimed.

Usage: not collected — by design

Eclipse Skillseal

Machine-checkable skill claims over fixture claims + fixture verdict receipts — a claim is a pointer to a bench-verdict receipt; no verifiable receipt renders UNVERIFIED in the standard format. CERTIFIED(local, fixture claims + fixture verdict receipts) — fixture claims + fixture receipts only; Skillseal benches nothing, certifies no skill, and issues no verdicts.

skillseal_claim_publish · skillseal_verify · skillseal_render · skillseal_claim_get · skillseal_claim_withdraw · skillseal_claim_list · skillseal_anomaly_queue_read

Test Bench: CERTIFIED(local, fixture claims + fixture verdict receipts) — CERTIFIED(local, fixture claims + fixture verdict receipts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-skillseal.md) PASS-CONDITIONAL(local, fixture claims + fixture verdict receipts) with sole condition C1 (F1, stored-read assertion bypass), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture claims + fixture verdict receipts) — no new findings. Builder suite 42/42 at v0.1.0 and 48/48 at v0.1.1 (42 prior + 6 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times; decisive fixture F-S9 independently reproduced in a fresh process, socket-denied, at both benches — claim A (valid pointer) VERIFIED, claim B (no pointer) UNVERIFIED/NO_RECEIPT, claim C (pointer to A's receipt) UNVERIFIED/RECEIPT_SUBJECT_MISMATCH, identical rendered-record key shape with render_status the sole filter field, offline verify_export on A verified=True/VERIFIED_EXPORT. Delta probes 6/6 PASS: forged latest_rendered, tampered claim_record, tampered stored receipt, list-filter forgery, and cross-claim transplant of a genuine Herald-signed rendering all downgrade to the UNVERIFIED_EXPORT form only (no stored claim/receipt/rendering values served, forged strings absent), while intact controls serve VERIFIED normally. Scope is exactly: local stdio MCP, fixture claims + fixture verdict receipts only, value_class 'test' throughout — now including the stored-read paths (skillseal_claim_get, skillseal_claim_list), which recompute claim hash + publisher signature, the hash-chained record stream, stored receipt hashes + pinned bench signatures, and the latest rendering's Herald signature + receipt-face binding before serving anything; no live marketplace, router, registry, or bench system is read, polled, or written, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): a skill claim is a pointer to a bench-verdict receipt; a claim with no receipt renders as UNVERIFIED in a standard format counterparties and routers can filter on. Non-blocking bench observations F2 (receipt validation does not reject unknown extra fields — hash-covered, pinned bench signature still required) and F3 (genuine WITHDRAWN exports verify as VERIFIED_EXPORT with render_status UNVERIFIED via a dedicated verify_export branch that can only ever assert UNVERIFIED) remain open observations, untouched. Skillseal benches nothing, certifies no skill, and issues no verdicts.

Usage: not collected — by design

Eclipse Namesake

Pre-launch identity-collision similarity screen over a fixture registry snapshot — similarity scoring over registered agent identities issues a collision verdict before an agent launches under a confusing identity. CERTIFIED(local, fixture registry snapshot) — fixture snapshot only; a screen over a stated snapshot, not a trademark opinion, not a legal clearance, not permission to launch.

namesake_screen · namesake_verdict_get · namesake_verify · namesake_breakdown_get · namesake_screen_list · namesake_snapshot_info · namesake_anomaly_queue_read

Test Bench: CERTIFIED(local, fixture registry snapshot) — CERTIFIED(local, fixture registry snapshot) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-namesake.md) PASS-CONDITIONAL(local, fixture registry snapshot) with sole condition C1 (Finding 1, stored-read paths served unverified stored verdicts), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture registry snapshot) — no new findings; Finding 2 (snapshot envelope without snapshot_ref accepted) also CLOSED. Builder suite 33/33 at v0.1.0 and 37/37 at v0.1.1 (33 prior + 4 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times, the v0.1.0 suite also under a socket-denied harness; decisive fixture F-N9 independently recomputed by the bencher with a scorer rewritten from the spec text (builder scorer NOT imported) at both benches — agent-harborlight name 0.628205 / purpose 0.6 / capability 0.666667 / composite 0.627436 → REVIEW, server top_k[0] identical, fresh-process stdio verify from artifacts alone verified:true / VERIFIED_EXPORT. Boundary pins exact at v0.1.0 bench: exact 'Payseal!' composite 0.500000 → COLLISION by exact-name override, near 'Payseel' 0.454286 → REVIEW, stem-only 'Ledger Lynx' 0.242424 → CLEAR. Delta probes ALL_C1_OK: intact control serves the sealed CLEAR verdict normally on every path (screen_list carries verified:true / VERIFIED_EXPORT); score-tamper (stored CLEAR→COLLISION, max 0.999999, hash/signature NOT recomputed) and Herald-signature-tamper (signature f*64) both downgrade on verdict_get, breakdown_get, screen_list (incl. verdict-filtered lists: COLLISION=0, CLEAR=0) and idempotent re-screen to UNVERIFIED_EXPORT / verdict_claim null / NAMESAKE_VERIFY_FAIL:<step>, metering unchanged; a snapshot envelope without snapshot_ref now refuses SNAPSHOT_INCOMPLETE with 0 screens / 0 metering, and verify over a ref-less snapshot downgrades at step snapshot_hash. Scope is exactly: local stdio MCP, fixture registry snapshot only, scoring version namesake-score/1.0 (weights name 0.5 / purpose 0.3 / capability 0.2; thresholds REVIEW ≥ 0.40, COLLISION ≥ 0.70 plus exact-normalised-name override), value_class 'test' throughout — now including the stored-read paths (namesake_verdict_get, namesake_breakdown_get, namesake_screen_list, and the idempotent path of namesake_screen), which recompute-verify the stored screen before serving anything; no live registry is read, nothing is registered, reserved, assigned, blocked, renamed, or revoked, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): similarity scoring over registered agent identities (name, purpose, capability profile) issues a collision verdict before an agent launches under a confusing identity. Non-blocking bench observation Finding 3 (dispatch does not enforce schema additionalProperties:false — unexpected extra args are silently ignored, with no state or verdict effect observed) remains open, untouched. A Namesake verdict is a similarity screen over a stated snapshot — it is not a trademark opinion, not a legal clearance, and not permission to launch (SPEC §11.2).

Usage: not collected — by design

Eclipse Test Bench

The certification harness behind every verdict on this shelf: adversarial suites run over the wire against bench-owned fixtures — homoglyph typosquats, lying backends, duplicate-event batches, schema fuzzing — with FAILED cards retained append-only, never overwritten. It runs in-house against the whole fleet today and is productizing as a CLI + hosted run service (slate T1). The paid tier — a Verity-run certification carrying the seal — is an owner decision, not yet offered.

In-house artifact — productization in progress; no public Test Bench card yet, and none claimed.

Usage: not collected — by design

Eclipse Stocktake

Catalog / manifest / storefront consistency auditor: one scorecard ledger checked against every surface that repeats a verdict, with machine-safe fields synced and prose verified, never rewritten. It is the drift checker that has closed every Eclipse publish pass at drift=0 — running in-house today as sync_verdicts.py, productizing as a CLI + CI action (slate T4).

In-house artifact — productization in progress; no public Test Bench card yet, and none claimed.

Usage: not collected — by design

Eclipse Press

Agent-native static-site publish pipeline: deploy zips with normalized permissions and real file mtimes — the GoDaddy 403 and PHP-opcache lessons, encoded — published to a verified shelf manifest. It publishes thewhitereport.com and this Bazaar in production today (deploy-pipeline/publish.py) and is productizing as a standalone pipeline (slate T3).

In-house artifact — productization in progress; no public Test Bench card yet, and none claimed.

Usage: not collected — by design

Herald Card Kit

Agent Card issue/verify toolkit for A2A builders: the Herald JWS card tooling (cards.py, jwscore.py) that already runs inside the Eclipse Herald MCP, productizing as a CLI + library (slate T7). Issue signed Agent Cards and verify a counterparty's card offline, with receipts — no call home.

In-house artifact — productization in progress; no public Test Bench card yet, and none claimed.

Usage: not collected — by design

Eclipse Ledger MCP

Betting records and responsible-gambling controls: limits that can fall instantly but never rise without a wait and a fresh confirmation, absolute self-exclusion, honest cash P&L that never counts a bonus bet as money. Not a sportsbook. No bets are placed here.

limit_set · limit_confirm · exclusion_start · jurisdiction_check · bet_record_add · pnl_summary · reality_snapshot · odds_compare · slip_prepare · resources_get

Test Bench: CERTIFIED(local) — 21/22 checks · fixtures only · not a sportsbook

Usage: not collected — by design