Eclipse Roll MCP
Signed deltas against the registry's own record — proof-of-filing seals only on an exact read-back match.
status: in-developmentclass: mcpCompliance & RegulationTrust & Receipts
Vendor: Cyan Eclipse Technologies
What it does
- Novel mechanism — the signed delta: a filing is prepared, approved, and evidenced as a Herald-signed DELTA between the registry-of-record's own current state — read back through its sanctioned public surface at prep time — and the exact artifact to be submitted; after the HUMAN submits via the registry's own channel, Roll Proof re-reads the registry and seals proof-of-filing ONLY if the public record changed exactly as approved (a mismatch seals an evidence pack as FILED_UNVERIFIED, opens a Radar discrepancy, and refuses the proof claim by name — never a partial seal)
- Prep-and-seal only — NO submission verb exists on any surface, in any name: form-only registries (Sunbiz, SAM, TEAS, state SOS portals) stay human-submitted in every phase; Roll prepares, fingerprints, and evidences — it never files
- FIXTURE scope, stated plainly: every registry read at P0 runs through a labelled FIXTURE Gauge adapter (SAM Entity API / Sunbiz public search / USPTO TSDR / EDGAR data shapes) and every artifact carries evidence_class FIXTURE — NO live registry read has been exercised yet; the live adapter exists only as an unregistered interface that refuses
- Wageward spine consumed by reference, never forked: canonical fingerprint over the spec allowlist (artifact + delta + base-snapshot hash + jurisdiction parameter set + the not-a-law-firm statement rendered INSIDE the canonical pack object — missing = invalid pack), ECDSA verified approvals (params-bound, nonce + tombstone, single-use), FILING_CHANGED_SINCE_APPROVAL + REGISTRY_STATE_DRIFT refusals, Blackbox-form sealed packs, 12-month receipt standing (revocation kills standing instantly; integrity never expires)
- UPL fence at the tool layer: advice / entity-selection / interpretation / clearance requests refuse by name (ADVICE_CLASS_REFUSED; drafting-with-judgment = DRAFTING_CLASS_REFUSED) and Roll never signs as principal (SIGNATURE_PRINCIPAL_ONLY) — mechanics, deadlines, checklists, and registry facts only
- Renewal Radar + CETech dogfood fixtures: deadline/renewal tracking with discrepancy entries; the built P0 dogfood subjects are CETech's own Florida (Sunbiz) annual report (Jan 1–May 1 window), the SAM.gov renewal watch (submitted 2026-10-24, activation pending), and a VetCert radar entry (MANUAL class, expiry Jul 2028) — all as labelled fixtures
Tools
session_open · registry_record_get · filing_prepare · filing_diff · pack_get · mandate_issue · approval_issue · submission_record · pack_seal · gauge_check_pack · gauge_check_delta · gauge_params_list · pack_verify · pack_render · pack_compare · radar_entries_list · radar_entry_get · radar_refresh
Platforms
- MCP over stdio
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local, fixture scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-roll-mcp-2026-10-26-rebench.json (scoped re-bench; baseline card eclipse-roll-mcp-2026-10-26.json retained append-only). THE HONEST ARC, on the record: the first bench FAILED (23 pass / 11 FAIL of 34 grouped checks) on two HIGH defects — D1, revocation/expiry did not propagate past session_open (a pack sealed FILED_VERIFIED under an expired mandate), and D2, Proof's pack_verify certified a filing the read-back had refuted — plus a UPL fence that keyword-matched and a renamed-key secret-scan bypass. The fix round closed D1–D10 (25 new regression tests, 22 proven failing pre-fix); the full suite runs 63/63 on three consecutive runs (a ~3.4% flake, root-caused to the scan screening system-issued session ids, was killed). Verity's scoped re-bench then attacked the FIX code with fresh shapes — forged-consistent evidence packs, coordinated base+read-back tamper at seal, valid-window ghost artifacts, revoke-after-approval, planted foreign radar entries — 17/17 PASS, zero new defects; K1 delta-existence, the N-check (0/18 identical verb names vs the Wageward spine, inherited by reference), and grammar-drift all re-verified PASS; NOVELTY_PROVEN stands. SCOPE, read exactly: certification covers the 18-tool local stdio product at FIXTURE scope — every Gauge adapter is a labelled fixture, NO live registry read has ever been exercised, and NO submission verb exists on any surface (prep-and-seal only; the human submits via the registry's own channel). The counsel gate (spec §10.3) stands before any P1 / live phase regardless of this verdict. Two standing items remain on the card for ruling: a seal attempted under a revoked mandate surfaces APPROVAL_SCOPE_MISMATCH (inherited Wageward spine shape) where sibling verbs surface MANDATE_REVOKED — harmonization is an owner/Verity call; and seeded Radar entries are born claiming REGISTRY_READ with observed_at empty (observation D10d). NAME CONDITIONAL (spec D2, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before the screen closes.
Not tested:
- Any live registry read — no Gauge adapter has ever run against a live registry; all adapters exercised are labelled FIXTURE adapters, and the live adapter is unregistered and refuses
- Any submission to any registry — no submission verb exists at P0 in any name; nothing was or could be filed by this product
- Counsel review (spec §10.3) — a hard gate before P1 / any live phase; not performed and not part of this certification
- The trademark screen for the name 'Eclipse Roll' (spec D2, owner-side) — still open; it gates any public surface, not this local certification
- Customer-facing / multi-entity operation (P3, not proposed) and the EDGAR Next submission adapter (P2, specced only)
- Template-fill drafting — gated on a counsel-approved template set (spec §10.1); the drafting class refuses until then
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-roll-mcp-2026-10-26-rebench.json
Pricing
Free local v0.1 (P0 fixture); licensing per spec §19 is an owner/commercial decision, not a v0 surface
Install / verify
docker run -i ghcr.io/cyan-eclipse-technologies-llc/eclipse-roll-mcp:latest
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).