Eclipse Fairlend
Decision-evidence sealer + audit recompute engine over fixture decisions; local/fixture only. PASS-CONDITIONAL (local/fixture) — each decision seals its feature set, model version, and adverse-action reason codes at decision time, making later disparate-impact audits a recompute. Fairlend never decides. D-11 NAMED: §7.3 identifier fence evadable by token-split spellings — must close before any non-fixture scope. Counsel gate (SPEC §10) named and unbuilt: any use beyond fixture decisions requires fair-lending counsel clearance in writing first.
status: in-developmentclass: mcpCompliance & EvidencePayments & Commerce
Vendor: Cyan Eclipse Technologies
What it does
- Novel mechanism (SPEC §2.1, verbatim) — each decision seals its feature set, model version, and adverse-action reason codes at decision time, making later disparate-impact audits a recompute.
- Fairlend never decides: it makes no credit decision and influences none — it has no scoring, approval, denial, pricing, override, or recommendation function. A Fairlend seal proves what was recorded at decision time — the presented feature set, model version, and reason codes, counter-signed then. It does not prove the decision was fair, lawful, unbiased, or correct.
- Bench path: v0.1.0 bench (wave4/bench-fairlend.md, defects D-1..D-10) + v0.1.1 delta re-bench (wave4/rebench-fairlend.md: D-1..D-6, D-8, D-9, D-10 CLOSED; D-7 closed for its probed class with residual Low defect D-11, named below; builder suite 36/36 reproduced).
- D-11 — NAMED standing condition (Low, residual of the D-7 class): the SPEC §7.3 identifier fence is still evadable by token-split spellings. Feature names that seal today when they should refuse: tax_id, tax_id_number, taxIdNumber, taxpayer_id, ein, ein_number, gov_id, govt_id, govtId, social_sec_no (government-id class), surname, home_street (name/address classes). Cause (from the re-bench): the checker matches whole tokens and a substring list that omits taxid; splitting a compound into tax+id tokens defeats both. D-11 must close before any non-fixture scope; it does not expand v0.1.1's fixture scope, and the same helper binds seal_verify and recompute step 3, so the gap is consistent, not divergent.
- Rollback fence: pure local file store caps verdict at PASS-CONDITIONAL — external anchor required before live/multi-party use. Fair-lending counsel gate (SPEC §10) — named, unbuilt: any use beyond fixture decisions — real applicants, a real model, a real lender's decision stream, real adverse-action reason codes, audit figures relied on by any party, or any applicant-facing artifact — is out of v0.1, hard, until fair-lending counsel clears it in writing; v0.1.1 contains no dormant live path.
- Cohort tags are fixture-supplied labels sealed with the record (synthetic cohorts — cohort-A / cohort-B over invented records); Fairlend never infers a cohort, and untagged records are counted and excluded from cohort rates visibly. Late-presented decisions export only as downgraded LATE_RECORDED_EXPORT — there is no backdating path. Hash construction is pinned in SPEC §4.1 and reproduced by the bench from the documented text alone. Herald (signing pattern), Meter (metering grammar), and Docket (pack shape) are consumed by reference only.
Tools
decision_seal · model_register_fixture · reason_table_register_fixture · decision_get · decision_retract · seal_verify · audit_define · audit_run · audit_receipt_get · audit_pack_get · decision_export
Platforms
- MCP over stdio
Certification
Bench verdict: PASS-CONDITIONAL (local/fixture)
Certified scope: Eclipse Fairlend — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-fairlend.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-fairlend.md: D-1..D-6, D-8, D-9, D-10 CLOSED; D-7 closed for its probed class with residual Low defect D-11 NAMED; builder suite 36/36 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture decisions only, synthetic cohorts; no real applicant, no real credit data, no real model, and no lender system is touched, and Fairlend makes no credit decision and influences none. A Fairlend seal proves what was recorded at decision time — the presented feature set, model version, and reason codes, counter-signed then; it does not prove the decision was fair, lawful, unbiased, or correct. Standing condition D-11 (NAMED): the SPEC §7.3 identifier fence is still evadable by token-split spellings (tax_id, ein, gov_id, surname, home_street etc. seal today when they should refuse); D-11 must close before any non-fixture scope. Rollback fence and the SPEC §10 fair-lending counsel gate (named, unbuilt) also bind.
Not tested:
- Any use beyond fixture decisions — real applicants, a real model, a real lender's decision stream, real adverse-action reason codes, audit figures relied on by any party, or any applicant-facing artifact is SPEC §10 fair-lending-counsel-gated and UNBUILT; v0.1.1 contains no dormant live path
- Credit-decision correctness or fairness — Fairlend never decides: it has no scoring, approval, denial, pricing, override, or recommendation function, and a seal does not prove the decision was fair, lawful, unbiased, or correct
- Token-split identifier spellings (D-11, NAMED standing condition): tax_id, tax_id_number, taxIdNumber, taxpayer_id, ein, ein_number, gov_id, govt_id, govtId, social_sec_no, surname, home_street seal today when they should refuse — a known residual Low in the SPEC §7.3 fence that must close before any non-fixture scope
- External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture); an external anchor is required before live or multi-party reliance
- Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench
Live state note: Bench evidence: argus101-program-20261027/wave4/bench-fairlend.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), defects D-1..D-10) + argus101-program-20261027/wave4/rebench-fairlend.md (Verity delta re-bench of v0.1.1 fix commit 01cceda: D-1..D-6, D-8, D-9, D-10 CLOSED, D-7 partially closed with residual D-11 named, builder suite 36/36 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null).
Pricing
PRICED — $0.15/decision (evidence sealing only; no credit decisions), via the Eclipse Bazaar bench-order/intake path only. No checkout, payment, or buy-now link exists for this product, and no Stripe object exists for it in this pass: intake orders are reviewed and confirmed by the operator before any payment link is sent. Metering shape per SPEC §9 (metering points only in v0.1.1, no charge path built): one Meter-grammar record per successfully sealed decision at the $0.15/decision price shape. No charge path is built, no payment is taken, and no live Meter ingest is claimed. The local package is the reference implementation. Repository is PRIVATE.
Install / verify
No install command is published for this product in the catalog or its registry record.
Official MCP Registry name: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-fairlend-mcp
Registry listing: https://registry.modelcontextprotocol.io/v0.1/servers/io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC%2Feclipse-fairlend-mcp/versions/0.1.1
Repository: https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-fairlend-mcp
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).
Verification
Issued by Verity (Cyan Eclipse Technologies) — a role-separated internal desk of the same company that publishes this catalog. Issuer relationship: first-party. The bench is not an external third-party evaluator.
Availability
Catalog status: in-development
Distribution: MCP over stdio
Live-state note (from the catalog record): Bench evidence: argus101-program-20261027/wave4/bench-fairlend.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), defects D-1..D-10) + argus101-program-20261027/wave4/rebench-fairlend.md (Verity delta re-bench of v0.1.1 fix commit 01cceda: D-1..D-6, D-8, D-9, D-10 CLOSED, D-7 partially closed with residual D-11 named, builder suite 36/36 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null).
Test verdict
Bench verdict: PASS-CONDITIONAL (local/fixture)
Certified scope: Eclipse Fairlend — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-fairlend.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-fairlend.md: D-1..D-6, D-8, D-9, D-10 CLOSED; D-7 closed for its probed class with residual Low defect D-11 NAMED; builder suite 36/36 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture decisions only, synthetic cohorts; no real applicant, no real credit data, no real model, and no lender system is touched, and Fairlend makes no credit decision and influences none. A Fairlend seal proves what was recorded at decision time — the presented feature set, model version, and reason codes, counter-signed then; it does not prove the decision was fair, lawful, unbiased, or correct. Standing condition D-11 (NAMED): the SPEC §7.3 identifier fence is still evadable by token-split spellings (tax_id, ein, gov_id, surname, home_street etc. seal today when they should refuse); D-11 must close before any non-fixture scope. Rollback fence and the SPEC §10 fair-lending counsel gate (named, unbuilt) also bind.
Publication integrity
Receipt hash: none published — no receipt is linked to this record in the current records
Anchor state: NOT_ANCHORED No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program.
Full verification view — integrity result, digests, and evidence for this listing.
Operational status
Trust state: UNVERIFIED · Drift: UNKNOWN
Benched version: — · Latest seen: 0.1.1
Verify it yourself
- Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.
- On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then.