Eclipse Steward MCP
Team-chat agent governance — the signed mandate, verified disclosure, review-first posting and receipts that govern an AI agent inside Slack, Teams and Discord. It governs the agent — it never monitors the people.
status: in-developmentclass: mcpAgent GovernanceTeam Chat
Vendor: Cyan Eclipse Technologies
What it does
- Governance CORE for agents in team chat (Slack / Teams / Discord) — not a bridge and not chat scraping: a signed, version-chained mandate (agent × channels × action classes × approval rules × caps × time window, bound to the agent's Herald card) is the whole authority
- The agent surface holds no dispatch verb and no platform credential — the agent can only propose; Steward's gate holds the only dispatch path and re-checks mandate, kill state, disclosure state, quiet windows, caps, and platform grant at dispatch
- Kill is checked at proposal, at approval, AND at dispatch: an approval earned before a kill does not dispatch after it; multi-part acts halt between parts and an in-flight part is evidenced as KILL_RACE_ACT, never hidden
- Chat content never governs: an in-chat mandate amendment — even from the workspace owner — refuses MANDATE_AMENDMENT_FROM_CHAT_REFUSED and the mandate hash stays byte-identical; mandates change only as owner-signed chained versions on the operator surface
- Disclosure is verified data (VERIFIED / DEGRADED / ABSENT / UNVERIFIABLE, named per platform): DEGRADED suspends auto-approvals, ABSENT closes outbound; every read, draft, approval, dispatch, refusal, kill, and disclosure event — including READ receipts with ids + content hashes — seals into a per-workspace Blackbox-form hash chain
- Custody defaults to none (stores contain zero message-content strings, canary-scanned in tests) and surveillance is absent as architecture: no member-subject record type exists and the spec §7.3 T3 set is denylisted at the transport. It governs the agent — it never monitors the people
Tools
workspace_bind · mandate_issue · mandate_amend · mandate_status · draft_approve · draft_reject · gate_dispatch · kill_issue · kill_resume · disclosure_check · disclosure_restore · platform_interaction_simulate · chat_message_simulate · platform_fixture_set_presentation · platform_fixture_set_grant · receipt_list · receipt_verify · custody_export · read · draft_propose · act_status · draft_withdraw
Platforms
- MCP over stdio — two disjoint surfaces selected by ECLIPSE_STEWARD_SURFACE (operator | agent); simulated route fixtures, no live platform
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 27 pass, 1 na of 28 checks (U1 auth: stdio process boundary; surface disjointness scored as product checks in S8). Run by W-003 (Verity), suites/steward.py. Runs 1–3 FAILED retained append-only; run 4 is the standing card — S11 (approval content-hash re-verification at dispatch), S12 (draft-TTL re-check at dispatch), S19 (expiry bookkeeping kept out of the signed canonical form), S7, and S10 fixed and verified. N-CHECK: NOVELTY_PROVEN — the only-dispatch-path governance core: the agent surface holds no dispatch verb and no credential, the gate re-checks mandate/kill/disclosure/caps/grant at dispatch, disclosure is verified data that drives posture, and every read is receipted; 0 of 20 chat-API-shaped verbs exist on either surface. Local/simulator scope only.
Not tested:
- Live platform adapters (Slack / Teams / Discord) — NOT built in v0.1; simulator route fixtures only, no credentials, no real messages sent
- Herald JWS mandate signatures — v0.1 signs with a local HMAC operator key, the spec's local stand-in; production key custody is a gated phase
- Hosted venue service — a separate, unbuilt phase gated on Eclipse Connect P2 decisions
- Name: 'Eclipse Steward' is CONDITIONAL under brand system §3 — trademark/confusion screen pending before any public surface; fallback name Eclipse Usher
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-steward-mcp-2026-10-26-4.json
Pricing
Free local v0.1 (governance core + simulator fixtures); hosted venue service is a separate, unbuilt phase gated on Eclipse Connect P2 decisions
Install / verify
docker run -i ghcr.io/cyan-eclipse-technologies-llc/eclipse-steward-mcp:latest
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).