{ "feed": "Eclipse Bazaar — trust signal feed", "version": 1, "base_url": "https://eclipsebazaar.com", "generated_at": "2026-10-27T21:27:01Z", "semantics": "Verdict-change and anchor events, newest first, derived from verdicts.json + Eclipse Anchor state. event types: verdict_issued, verdict_superseded, verdict_withdrawn, anchor_batch_confirmed, anchor_batch_pending. anchor_state is per item and derived as in verification.json. Verdicts are issued first-party by Verity (Cyan Eclipse Technologies). Web feed v1 — on-chain event emission is a Phase-1 D2 addition.", "count": 152, "events": [ { "event": "anchor_batch_confirmed", "batch_id": "b18e97a2efade7657a087d1b175a771c4f69ac3a0e56596eb97c990ad876c6ea", "name": "Eclipse Anchor batch b18e97a2…", "summary": "4 receipts anchored on Base — root 8a19e4803a50…", "date": "2026-10-27", "timestamp": "2026-10-27T15:57:01Z", "tx_hash": "0x6a69e35cbe70428f1fa97251759e2b5fa974bd422f68a076ac5de72c7b2459d4", "block_number": 53163637, "explorer_url": "https://basescan.org/tx/0x6a69e35cbe70428f1fa97251759e2b5fa974bd422f68a076ac5de72c7b2459d4", "anchor_state": "ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "hostbridge-mcp", "name": "HostBridge MCP", "verdict": "CERTIFIED(local-real)", "scope": "CERTIFIED(local-real) — Test Bench v0.1.0, 2026-10-27 (card hostbridge-mcp-2026-10-27.json, superseding the 2026-10-24 simulator card): real filesystem docroot served by a real HTTP server process; scope binding, dry-run touches nothing, deploy pipeline byte-exact on disk AND served live over HTTP, rollback exact on disk + live HTTP, real-HTTP smoke tests, probe caveat (local listener + live host cetech.ai), corrupt-zip rejection, append-only audit completeness — 15 pass, 1 na of 16 checks. Scope boundary (load-bearing): the deploy TRANSPORT is still the product's 'simulate' transport — this verdict certifies NO remote-host deploy.", "date": "2026-10-27", "timestamp": "2026-10-27T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/hostbridge-mcp/", "card_url": "https://eclipsebazaar.com/cards/hostbridge-mcp-2026-10-27.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-bazaar-mcp", "name": "Eclipse Bazaar MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bazaar.py. Standing card is run 4 (-4.json); runs 1-3 FAILED retained (bench-suite defects, disclosed in card notes).", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-bazaar-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-bazaar-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-bidmatrix-mcp", "name": "Eclipse BidMatrix MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 25 pass, 1 na of 26 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bidmatrix.py. Runs 1–2 FAILED and the run-3 harness flake are retained append-only; run 4 is the standing card — defects D1–D6 fixed and verified on bench-built fixtures independent of the builder's tests. N-CHECK: NOVELTY_PROVEN — evidence-bound rows (every requirement a verbatim substring of the source with a section + line locator) plus the SILENT_EMPTY completeness pass; with D4 fixed, the completeness limb holds under repeated section ids.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-bidmatrix-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-bidmatrix-mcp-2026-10-26-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-section508-mcp", "name": "Section 508 Evidence MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/section508.py. Runs 1–2 FAILED on bench-suite defects (a locator regex, then a corpus threshold) — no product code was touched between runs; run 3 is the standing card. N-CHECK: NOVELTY_PROVEN — the evidence binding (criterion id + verbatim snippet + element locator, programmatically verified on every bound finding) plus NOT_STATICALLY_DECIDABLE honesty: partially-decidable 1.4.3 renders Partially Supports, never a clean Supports, and a zero-failure audit still claims conformance NONE.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-section508-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-section508-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-fedscope-mcp", "name": "FedScope MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fedscope.py. Runs 1–3 FAILED retained append-only (runs 1–2 carried bench-suite defects; run 3 was the pre-fix product card); run 4 is the post-fix re-bench — D1–D3 verified fixed, scoring snapshot byte-identical. N-CHECK: NOVELTY_PROVEN, re-earned in run 4 — deterministic fit + newcomer scoring with every point hand-recomputed by the bench (~58 cases) and traced summaries that name their field basis and flag absent facts instead of inventing them; no fetch or live verb exists on the surface.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-fedscope-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-fedscope-mcp-2026-10-26-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-health-check-mcp", "name": "Eclipse Health Check MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/healthcheck.py. Runs 1–2 FAILED retained append-only; run 3 is the standing card — B-HC-1 (credential masking not global, HIGH) and B-HC-2 (-32603 escapes on the tool surface, HIGH) fixed and verified pass at N2/H3. N-CHECK: NOVELTY_PROVEN — evidence-bound findings whose file+line citations the bench opened and verified verbatim, severity/fix byte-bound to the check catalog, NOT_STATICALLY_DECIDABLE as a first-class result, and a score never emitted without its decomposition.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-health-check-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-health-check-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-legacy-recon-mcp", "name": "Eclipse Legacy Recon MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md): Positive DECLARED, OBSERVED, and INFERRED reports only within CLAIM-SCOPE.md, with evidence or basis carried in the output; OBSERVED is not exhaustive. Withdrawn by name — W1 JS_TS_MULTILINE_BLOCK_COMMENT_CONTINUATION_AFTER_SPLIT_NO_CLOSE_SPAN · W2 JS_TS_CHAINED_NO_CLOSING_SLASH_REGEX_SPANS_ON_ONE_LINE · W3 B_LR_14_INVALID_LINE_NONINVENTORY_IDENTIFIER_FOLLOW · W4 EXHAUSTIVE_OBSERVED_RECALL · W5 DYNAMIC_IMPORT_OBSERVATION_OR_SPECIFIC_UNKNOWN · W6 MTS_CTS_OBSERVED_EXTRACTION · W7 PERMISSION_DENIED_SUBTREE_COMPLETENESS · W8 SELF_REFERENTIAL_SYMLINK_REPORT_AND_SKIP · W9 HOSTED_AUTHENTICATED_OR_MULTI_TENANT_OPERATION. Scoped re-bench card -11 (2026-10-26): 30 pass, 0 na of 30 checks.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-legacy-recon-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-legacy-recon-mcp-2026-10-26-11.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-countermark-mcp", "name": "Eclipse Countermark MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/countermark.py. Run 2 is the standing card; run 1 is retained append-only. N-CHECK: NOVELTY_PROVEN — one neutral verification call across card and mandate formats returns a signed finding envelope enumerating the checks actually performed, with presented-only artifacts capped at UNRESOLVED.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-countermark-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-countermark-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-census-mcp", "name": "Eclipse Census MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/census.py. Run 2 is the standing card; run 1 FAILED card is retained append-only. N-CHECK: NOVELTY_PROVEN — the render path itself enforces discovery law: an item that cannot cite a receipted discovery event cannot render, and source claims stay attributed per source and are never promoted to Census fields.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-census-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-census-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-crosswalk-mcp", "name": "Eclipse Crosswalk MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/crosswalk.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a versioned obligation library with as-of resolution and a role dimension produces fact-hash-bound candidates whose determination stays permanently empty and customer-owned, with mandatory evidence-pack gaps.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-crosswalk-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-crosswalk-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-redteam-mcp", "name": "Eclipse Redteam MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 26 pass, 1 na of 27 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/redteam.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — probe construction is downstream of a signed, in-date authorization record plus arena or harness registration proof; with neither, no probe object is constructed at all.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-redteam-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-redteam-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-span-mcp", "name": "Eclipse Span MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/span.py. Run 5 is the standing card; runs 1–4 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a proposed spawn is checked against a total componentwise attenuation order walked to an owner-signed root, with subtree budgets enforced at every ancestor.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-span-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-span-mcp-2026-10-26-5.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-steward-mcp", "name": "Eclipse Steward MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 27 pass, 1 na of 28 checks (U1 auth: stdio process boundary; surface disjointness scored as product checks in S8). Run by W-003 (Verity), suites/steward.py. Runs 1–3 FAILED retained append-only; run 4 is the standing card — S11 (approval content-hash re-verification at dispatch), S12 (draft-TTL re-check at dispatch), S19 (expiry bookkeeping kept out of the signed canonical form), S7, and S10 fixed and verified. N-CHECK: NOVELTY_PROVEN — the only-dispatch-path governance core: the agent surface holds no dispatch verb and no credential, the gate re-checks mandate/kill/disclosure/caps/grant at dispatch, disclosure is verified data that drives posture, and every read is receipted; 0 of 20 chat-API-shaped verbs exist on either surface. Local/simulator scope only.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-steward-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-steward-mcp-2026-10-26-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-proof-mcp", "name": "Eclipse Proof MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25 (bench clock UTC 2026-10-26; run 2 standing), 35 pass, 2 na of 37 checks. Run by W-003 (Verity). Run 1 FAILED card retained append-only: its sole failure (NC-2) was a bench-suite self-defect, fixed in the suite — no product code touched. Scope of certification: the governance core, Proof Print and Proof Trace benched against a declared SIMULATED Resolve-shaped adapter — P0 makes NO live-Resolve claim (no Resolve Studio seat exists on the build VM; the Studio license, spec LG-1/D3, is an owner purchase). N-CHECK: NOVELTY_PROVEN — export executes only against a Herald-signed approval pinning the canonical edit-decision fingerprint; incumbent-shaped fixture exports a drifted cut, and the vendor-verb census is 6/15 = 40% renamed (<80%).", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-proof-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-proof-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-meridian-mcp", "name": "Eclipse Meridian MCP", "verdict": "CERTIFIED(local, synthetic scope)", "scope": "CERTIFIED(local, synthetic scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-meridian-mcp-2026-10-26-2.json (re-bench 1): 22 pass, 0 na of 22 checks. CEILING — read exactly: SYNTHETIC ONLY. No live PHI, no real EHR connection, and no live claim of any kind is certified. NO SIGNING CAPABILITY EXISTS IN THIS PRODUCT: the surface is exactly the 19 specced Core tools with zero finalize-class tools; the re-bench probed 14 finalize/sign aliases via tools/call (all unknown-tool), ran a byte-for-byte import probe on a live draft (no clinician_sign attribute; the draft stays UNSIGNED_DRAFT), and swept every shipped file — no sign-capable path exists under any name, and the clinician-sign simulator exists only as bench equipment under tests/. The prior card eclipse-meridian-mcp-2026-10-26.json (FAILED — 23 pass / 6 fail) is retained unedited; defects B-MER-1..5 are all CLOSED in this re-bench (sign-path removal, refusal-naming ruling, per-practice hash-chain partition, refusal sealing, plus the observation item). P1 GATES — all still closed: HIPAA counsel review, an executed BAA, and a design partner are required before any live phase; the Bridge already refuses live PHI without a BAA (BAA_REQUIRED, no break-glass). No prescribing surface exists in any phase. N-CHECK: PASS, carried from the 2026-10-26 bench (not re-run; the fix round changed enforcement within the same fused mechanism — gate / pin / sealed reads — and removed the sign path outright).", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-meridian-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-meridian-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-lineage-mcp", "name": "Eclipse Lineage MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench): 10 pass, 0 na of 10 checks — L10/L14/L4, minors m1–m3 and spot regressions L1/L5/L8 re-probed PASS; all other lines stand as scored on run 2. Runs 1 and 2 FAILED and are retained append-only (test-bench/results/eclipse-lineage-mcp-2026-10-26.json, eclipse-lineage-mcp-2026-10-26-2.json); run 3 closed D1 (corroboration forgery), D2 (unvalidated hash values) and D3 (behavior_relevant laundering parameter) at the mechanism level, not the fixture level. CORROBORATION HONESTY — read exactly: in v0 there is no per-agent key registry, so presented corroboration strings are UNVERIFIABLE by construction; they are labeled corroboration_unverified in the signed, hash-chained record body (tamper-evident, proven at L10), and absence shapes stay claim_only. Self-emission is labeled a subject-provided claim forever; no surface upgrades a claim to a fact. CEILING: CERTIFIED(local), self/consented emission only — framework emission adapters are NOT built (G-LIVE per framework), external/hosted lineage is NOT built (G-OWNER); v0 signs with a local seed key (keys/, gitignored) and production findings-key custody is a gated decision.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-lineage-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-lineage-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-revoke-mcp", "name": "Eclipse Revoke MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench #2): 13 pass, 0 na of 13 checks — the C13/B1 provenance battery plus genuine-path controls, with run 2's closures standing. Bench history retained append-only: run 1 FAILED (D1–D3, test-bench/results/eclipse-revoke-mcp-2026-10-26.json) and run 2 FAILED (D4 — list-verification laundering, eclipse-revoke-mcp-2026-10-26-2.json); run 3 proves all four D4 variants (fingerprint-laundered recomputed, stripped sig/fingerprint, foreign unsigned epoch-9, foreign validly-attacker-signed) now cap at LIST_VERIFICATION_FAILED for hits AND absent refs, while genuine paths (supplied + stored) answer REVOKED_BY_ISSUER / COUNTER_NOTICED / NOT_LISTED exactly as before. CEILING: CERTIFIED(local) for own-issuer feed + offline check over fixture issuers. External distribution of the feed to registries/merchants is NOT built (T2 + G-REG/G-LIVE per consumer) — list_publish writes the local store only and v0 contains no network code; emergency revocation classes are NOT built (G-COUNSEL) — the closed reason vocabulary has no emergency class; no live push to subscribers exists. v0 signs with a local seed key (keys/, gitignored); production findings-key custody is a gated decision.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-revoke-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-revoke-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-crosslist-mcp", "name": "Eclipse Crosslist MCP", "verdict": "CERTIFIED(split per facet)", "scope": "CERTIFIED(split per facet) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-crosslist-mcp-2026-10-26-4.json: 39 pass, 0 na of 40 checks (1 partial — the builder-suite re-run line, whose sole failure was the stale fixed-count dogfood assert; fixed in this listing pass, suite now 50/50, smoke PASS). PER-FACET SCOPES — read exactly: root+ledger CERTIFIED(local): submit acceptance is identity-bound on every write facet (the observed registry record must match the submitted name + version + payload hash; Bazaar: product id/name + record hash), claimed-at-submit lands via the legal submitted→live→claimed two-step, stuck rows repair by receipted re-observation, and EVERY ledger_poll transition out of 'submitted' is identity-gated (live/failed via the shared identity gate, claimed via the repair gate) — a landed receipt proves the observed record matched the submitted artifact's identity at poll time, nothing about live registries. Bazaar facet CERTIFIED(local): the real catalog served through Crosslist (80 products at bench), publish/status writes under mandate. Official facet CERTIFIED(live-read) for list_servers/get_server/list_versions/get_version_detail; its writes are CERTIFIED(fixture) only and refuse REGISTRY_WRITE_UNAVAILABLE in live mode — NOT live-write certified. Smithery facet CERTIFIED(live-read) for search_servers/get_server ONLY; hosting/install-counts/releases/Connect sub-resources and publish/publish-release/deploy writes are CERTIFIED(fixture) only and refuse in live mode — NOT live-write certified. Glama facet CERTIFIED(fixture-read) only, all 8 verbs, ZERO write verbs — NOT live certified at any scope (live API returned 401; no key held). Herald dependency FIXTURE ONLY: mandates verified against a local ECDSA P-256 Herald-fixture key; production Herald RSA-JWS was not exercised. Receipts are Herald-SEALABLE with seal.status pending — never sealed. No live-write claim is made for any facet. KNOWN LIMITATIONS (standing LOWs on the card, in plain words): deeply nested error envelopes (wrapper depth 4 or more, and top-level list payloads) can escape detection, and error-shaped data keys can be refused by mistake (R3); on resubmission a stuck-row repair runs just before the mandate is verified, though nothing is written or accepted before that verification (R8); a track stuck at 'submitted' whose registry record is entirely absent has no automatic exit — it stays submitted rather than inventing a state (R9); submitting to Glama's absent native verb consumes the one-time mandate nonce, so a later legitimate submission can be refused as a replay (D8); the earlier claim that a production Herald key drops in unchanged was overbroad for RSA keys and is not repeated (D5); receipts are sealable and pending, not sealed (D7). N-CHECK (first bench, retained): the facet verbs deliberately mirror each registry's native verbs (renamed-verb share above the house line) — NO novelty claim rests on the facet verbs; the certified mechanism is the listing-state ledger plus the mandate constraint, which the bench exercised directly.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-crosslist-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-crosslist-mcp-2026-10-26-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-verbatim-mcp", "name": "Eclipse Verbatim MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-mcp-2026-10-26-2.json (scoped re-bench of the baseline PARTIAL; baseline card retained append-only): all 5 re-bench scopes PASS. Proven: the 10-tool local stdio surface as shipped (builder suite 64/64 + smoke PASS, re-run and confirmed by the bench); canonicalization verbatim-canon/1.1 — an independent bench implementation written from the amended spec §5/§6/§7/§8.1 alone, importing no product code, reproduces snapshot usc26-119-124-de68dcc8b3db exactly (census 8/8; statutory 2,277/2,277 hashes + byte lengths + word counts; editorial 2,277/2,277; corpus_root and editorial_root equal to served; manifest_sha256 recomputed equal; §8.1 derivation reproduces the snapshot suffix de68dcc8b3db); run against the superseded 1.0 seal it diverges at exactly one section (§7519), isolating the single published canon rule change. Cite-check: 0 false MATCH across the hostile subset on the new snapshot (digit alteration localized identically to baseline, punctuation/quote-mark/em-dash swaps DIVERGE, editorial-as-statute NOT_IN_CORPUS with EDITORIAL hint, instruction-shaped passages NOT_IN_CORPUS / DIVERGES, wrong-section claims NOT_IN_CORPUS with found-elsewhere). Tamper: every entry/bytes tamper shape is named by section and degrades the signature to SIGNATURE_UNVERIFIED; metadata-only tampers degrade loudly. Non-Title-26 citations return CORPUS_OUT_OF_SCOPE across tools (13 title/CFR forms); grammar failures stay CITATION_MALFORMED. KNOWN LIMITATIONS (standing observations on the card, in plain words): a cite-check MATCH for a repealed section carries no status field, so a repealed section's line can match without the response saying it is repealed (D-5); 115 sections that carry no identifier attribute in the source share a derived citation form and cannot be addressed by citation grammar — they are reachable only via manifest paging, search, or unclaimed cite-check (D-6); cite-check's candidate pre-filter samples 32-byte windows at a step of 8 — it can only ever produce non-MATCH outcomes, never a false MATCH (D-7). Two spec-clarification errata candidates are recorded for the next spec touch, not product fixes: a long-form prose title citation ('Title 18, United States Code, §1341') returns CITATION_MALFORMED rather than CORPUS_OUT_OF_SCOPE (D-8), and the spec does not yet state in one line that a note nested inside a note contributes all its descendant text to the parent note's editorial bytes — the reading the seal uses (D-9). SIGNING: the P0 manifest is signed through the Herald port with labelled FIXTURE keys only (signer.kind 'fixture', FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL (spec D1, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before D1 closes.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-verbatim-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-verbatim-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-roll-mcp", "name": "Eclipse Roll MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local, fixture scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-roll-mcp-2026-10-26-rebench.json (scoped re-bench; baseline card eclipse-roll-mcp-2026-10-26.json retained append-only). THE HONEST ARC, on the record: the first bench FAILED (23 pass / 11 FAIL of 34 grouped checks) on two HIGH defects — D1, revocation/expiry did not propagate past session_open (a pack sealed FILED_VERIFIED under an expired mandate), and D2, Proof's pack_verify certified a filing the read-back had refuted — plus a UPL fence that keyword-matched and a renamed-key secret-scan bypass. The fix round closed D1–D10 (25 new regression tests, 22 proven failing pre-fix); the full suite runs 63/63 on three consecutive runs (a ~3.4% flake, root-caused to the scan screening system-issued session ids, was killed). Verity's scoped re-bench then attacked the FIX code with fresh shapes — forged-consistent evidence packs, coordinated base+read-back tamper at seal, valid-window ghost artifacts, revoke-after-approval, planted foreign radar entries — 17/17 PASS, zero new defects; K1 delta-existence, the N-check (0/18 identical verb names vs the Wageward spine, inherited by reference), and grammar-drift all re-verified PASS; NOVELTY_PROVEN stands. SCOPE, read exactly: certification covers the 18-tool local stdio product at FIXTURE scope — every Gauge adapter is a labelled fixture, NO live registry read has ever been exercised, and NO submission verb exists on any surface (prep-and-seal only; the human submits via the registry's own channel). The counsel gate (spec §10.3) stands before any P1 / live phase regardless of this verdict. Two standing items remain on the card for ruling: a seal attempted under a revoked mandate surfaces APPROVAL_SCOPE_MISMATCH (inherited Wageward spine shape) where sibling verbs surface MANDATE_REVOKED — harmonization is an owner/Verity call; and seeded Radar entries are born claiming REGISTRY_READ with observed_at empty (observation D10d). NAME CONDITIONAL (spec D2, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before the screen closes.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-roll-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-roll-mcp-2026-10-26-rebench.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-verbatim-eo-mcp", "name": "Eclipse Verbatim — Executive Orders", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-eo-mcp-2026-10-26-3.json (scoped re-bench #3 of fix round 2, commit 56537e4; cards -1/-2 retained append-only — the mechanism was certified-grade on card -1 and certification was withheld on card -2 on EO-D1-2 alone). Proven: the 10-tool local stdio surface as shipped (builder suite 76/76 in substance — 72 PASS on plain bench runs plus 4 copy-dependent tests PASS under the bench replication harness, their plain-run failures being this VM's environment only; smoke PASS re-run by the bench); snapshot eo-20261022-26818c895dee (graph-3): 1,315 sealed documents, 10,667 edges, 823 divergence records, all OPEN (OMISSION 719, TYPE_DISAGREEMENT 104). EO-D1-2 CLOSED — the one defect that ever falsified a served claim: whole-cue scope emission trusted the savings idiom (a continuation assertion) and partial strikes; the graph-3 FULL census is 9 → 5, every surviving FULL re-derived by the bench's own reading of the sealed asserting text, the 4 unsupported FULLs corrected exactly (EO 11958→11501 twice and EO 13637→11958 to UNSPECIFIED; EO 13470→12333 to IN_PART 'Part 1'), and an exhaustive sentence-level sweep of all 13,282 sealed segments finds exactly 3 FULL candidates — precisely the genuine TEXT units; the idiom strip never eats a genuine cue (overreach battery: both orders, replacement form, single-clause continue+revoke). EO-D1-3 CLOSED: all 186 stated ranges re-derived verbatim in their pinned segments (186/186), binding sample 27/27. EO-D8 CLOSED in substance: graph-2 → graph-3 edge sets identical (10,613 unique keys), exactly 6 scope-only diffs, documents_root + divergences_root byte-identical, zero assertion groups gained or lost, net −66 exact (observation EO-O9: the spec A6 −94/+28 instance split differs by one each way from the bench's grouping, −93/+27 — a counting-convention artifact; a future accounting should state its grouping key). Riders CLOSED: EO-D5-2 (9/9 fresh Public Inspection marking variants refuse PUBLIC_INSPECTION_NOT_INGESTED by name against an empty PI index; bare 'PI' stays generic −32602, never stretched) and EO-D7 (§8.3 snapshot + coverage blocks on all 10 tools' successes and on refusal envelopes, SNAPSHOT_NOT_FOUND and GRAPH_VERSION_MISMATCH standing without blocks by documented construction; disposition carries divergences[] and self_limiting_terms[] as serve-time-derived, hash-exact pointers, never evaluated). Extraction bar re-measured on a fresh 15-assertion labelled sample: precision 1.000, recall 1.000; corpus FULL precision exhaustive at 5/5. NEW LOW FINDINGS (synthetic-only, zero sealed instances, corpus-swept): EO-D1-4 — four whole-cue binding residuals outside the implemented grammar (truncated idiom without 'and effect'; roman-numeral parts; an appendix struck wholly; a comma-joined cue about another object), recorded with a PRE-RESEAL CONDITION — the next reseal's bench sweeps the new batch for these shapes before the snapshot serves as current; EO-D1-5 — hyphenated compound ordinals ≥13 misquote the range tail ('twenty-first section' → range 'first section'), a verbatim-accuracy gap, never FULL. Observation EO-O8: snapshot history holds two builder-iteration seals (d31caba, ede0001) and graph-3's manifest names ede0001 as its previous rather than c44a7ad80308 directly — append-only history is honestly kept and the certified lineage reconciles exactly. THE FENCE (gate C3, load-bearing): no output of this product characterizes legal effect; every disposition answer remains an edge set + as_of + coverage window + the §2.2 completeness sentence, bench-verified byte-identical to the spec constant. Coverage re-derives from the manifest: sealed from 2000-02-10, 258 exclusions all NO_FR_FULL_TEXT_XML (257 documents 1994–1999 + EO 13548), unsealed layer from 1931-08-26; 1,315 + 258 = 1,573. SIGNING: the snapshot seal is a FIXTURE seal (FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL: the name inherits the pending Eclipse Verbatim trademark screen (owner-side); certification covers the local product's function under its working name, not the name.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-verbatim-eo-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-verbatim-eo-mcp-2026-10-26-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-flood-witness-mcp", "name": "Eclipse Flood Witness", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-flood-witness-mcp-2026-10-26-2.json (scoped re-bench of the FW-D1..D7 fix round; card -1 PARTIAL(local) retained append-only and superseded). Proven: flood-evidence witness at Florida scope for the two sealed partitions Leon (snapshot nfhl-fl-leon-20260611-bec93b592c31; 12,099 features) and Monroe (snapshot nfhl-fl-monroe-20261022-4776f79b6d7c; 9,664 features), operative index fw-index-202610-abd4c392bd16 enumerating all 67 Florida county partitions (65 NOT_SEALED, named). All seven card -1 defects FIXED and verified against the fix code with fresh shapes, not the builder's regressions: FW-D1 by independent ID-derivation recompute over every manifest and index present (6/6 reproduce; ~60 strip-set variants never collide); FW-D2 by byte-comparison of the manifest scope string against the operative index plus a full public-copy sweep; FW-D3 by 9 fresh multi-record LOMR fabrications (fires iff the per-case record set differs, names only truly differing cases); FW-D4 by 5 fresh drift shapes including a revised-date-only restudy; FW-D5 by minting a coverage receipt against a fresh synthetic partition/index and reading the claim; FW-D6 by direct read of both implementations (end-to-end run is an open environmental evidence debt); FW-D7 by a grammar-vs-body key diff over every stored receipt. P0 partition completeness remains OPEN (2 of 3): Miami-Dade is NOT_SEALED in the operative index, with no snapshot directory present. One NEW LOW (FW-D8) stands as a printed condition: the drift LOMR step iterated snapshot B only, so a case wholly removed in B never fired drift — fixed in code (sorted union of case ids) after the bench; it MUST hold before any second-vintage drift output is published, and is latent at the current single-vintage scope. FLAG-1 QUALIFIER: the LOMC override branch (LOMC_OVERRIDE_APPLIES) is FIXTURE-PROVEN ONLY — the sealed corpus contains zero LOMA/LOMR-F records and the branch has never fired on real sealed data. All seals are FIXTURE_SIGNED (Herald fixture key; owner open item O2) and labelled as such. Nothing in this verdict speaks to determination-of-record, SFHDF, lender, or insurance use: the product is an evidence-grade receipt witness only, per gate fence. NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-flood-witness-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-flood-witness-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-recall-witness-mcp", "name": "Eclipse Recall Witness", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-recall-witness-mcp-2026-10-26-2.json (scoped re-bench of the RW-D1..RW-D6 fix round + transport repoint; card -1 PARTIAL(local, FIXTURE scope), 50 checks 43P/7F, retained append-only and superseded). Proven: sealed campaign-vintage witness over fixture flat files — nightly anchor + hash-chained per-campaign vintages, closed recall-events/1.1 drift grammar (spec §7 names; Δ1 ACCEPTED at card -1), sealed-vintage-only posture-at-date receipts and mandate-bound CAMPAIGN-LEVEL check receipts with byte-exact standing sentences, churn instrumentation with segment-derived series_state. Builder suites reproduced first-hand: 35/35 + 18/18 fix-round regressions, smoke PASS; bench battery 136 checks, 127 pass — the 9 fails group into three NEW LOW conditions (RW-D7/RW-D8/RW-D9); no prior defect survives. All six card -1 defects FIXED and verified against fresh shapes, not the builder's regressions: RW-D1 (HIGH) phrase battery — bench shape end-to-end (27V321000 733→1042, “advised not to drive”) emits ESCALATION_DO_NOT_DRIVE + sealed advisory_classes [DO_NOT_DRIVE], 11/11 fresh positives, and an independent cross-signal: 15 live campaigns re-fetched from api.nhtsa.gov, phrase tags agreeing with the API's parkIt/parkOutSide flags on every row; RW-D2 series_state stays MEASURING under a methodology-only segment and flips only when a rates-bearing segment seals; RW-D3 ask-shape screen refuses BY NAME incl. 14 bench-fresh spellings while benign record questions still serve; RW-D4 layout_hash MEASURED — header and free-text column permutations refuse LAYOUT_DRIFT_REFUSED, unpermuted real-shape files seal; RW-D5 prev_vintage_hash and anchor-chain tampers name MISMATCH in verify_receipt and the recompute CLI; RW-D6 campaign-scoped NOT_SEALED prints the campaign's own first vintage with the corpus floor labelled beside it. LIVE PROOF VERIFIED FIRST-HAND (5/5): the live store seals 24V809 with cross_check OK and DO_NOT_DRIVE agreeing with parkIt: true; the diverged store seals nothing (FAILED + named); rcpt-00001 recomputes MATCH and carries exactly the 4 campaigns the live API returns for Porsche 911 MY2024 (24V155000, 24V809000, 25V896000, 26V682000), tags vs flags 4/4. All seals under FIXTURE ECDSA keys, labelled on every artifact. NO live nightly seal exists: the flat-file spine host (www-odi.nhtsa.dot.gov) remains unreachable from this egress (re-probed 2026-10-26, empty reply) and was NOT re-routed to the API — the file is the canon source. LIVE scope additionally requires (a) the first real nightly ingest and (b) live-key cutover (fixture keys at P0, owner's call) — scope items, not defects. Conditions RW-D7/RW-D8/RW-D9 (all LOW) are printed on card -2 and bind the next grammar/seal touch; no escalation-completeness claim beyond the live-stock-proven phrase families may appear in any copy. Nothing in this verdict speaks to any vehicle's safety, any specific VIN's repair state, or compliance with any law (gate C2/C5/C11). NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-recall-witness-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-recall-witness-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-permits-mcp", "name": "Eclipse Permits", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-permits-mcp-2026-10-26-2.json (scoped re-bench of the card -1 PARTIAL fix round; card -1 retained append-only): the witnessed-ledger mechanism, fence/refusal battery, chain-tamper and unchanged-read behaviour all PASS at local scope. Per the card's own scope verdicts: the Accela Citizen leg is certified at FIXTURE conformance only — the §7.7 Florida dogfood exit gate (owner's own Accela account, ≥1 real chain, ≥2 reads) remains OUTSTANDING and owner-side, outside this verdict; the dual-source leg is OUT OF CERTIFIED SCOPE (no dual-route jurisdiction at P0; refusal path benches correctly). Signing posture at P0 is fixture-labelled (FIXTURE_SIGNED).", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-permits-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-permits-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-scholarly-witness-mcp", "name": "Eclipse Scholarly Witness", "verdict": "CERTIFIED(local, fixture scope)", "scope": "CERTIFIED(local, fixture scope) — Verity scoped re-bench 2026-10-26, standing card eclipse-scholarly-witness-mcp-2026-10-26-2.json (card -1 PARTIAL(local, fixture scope) retained append-only and superseded), scope language exact from the card: sealed snapshot srw-20261026-ea6bc90cf693, duplicate-bearing audit receipts recompute MATCH on both verification surfaces with tamper-by-name divergence, receipts carry the full §9.3 field set incl. the CC-BY attribution, disposition answers carry the §6.3 as-of block on all branches, work_resolve surfaces per-pin source labels, and the reinstatement-only population shape is consistent under amendment A3. Fixture signer (FIXTURE_SIGNED) — no live/production claim; PubMed errata coverage window 2023-01-01..2026-10-26 remains disclosed in the manifest known_bounds.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-scholarly-witness-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-scholarly-witness-mcp-2026-10-26-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-patent-witness-mcp", "name": "Eclipse Patent Witness", "verdict": "PARTIAL", "scope": "PARTIAL(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, card eclipse-patent-witness-mcp-2026-10-26.json: certification WITHHELD on three MED defects (PW-D1, PW-D2, PW-D4); this product is NOT certified. The card's scope language is binding: scope caps at local, FIXTURE scope — every seal is FIXTURE_SIGNED under fixture keys over fixture extracts; the mechanism (sealed legal-status event ledger, claims divergence, assignment-chain witness, source-drift witness) was measured certified-grade and every derivation was independently recomputed byte-identical, but no CERTIFIED verdict exists for this product. Live ODP ingest is MEASURED BLOCKED (bench re-verified HTTP 401 without an operator ODP key) and no live seal exists.", "date": "2026-10-26", "timestamp": "2026-10-26T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-patent-witness-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-patent-witness-mcp-2026-10-26.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "agent-ready-mcp", "name": "AgentReady MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/agentready.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/agent-ready-mcp/", "card_url": "https://eclipsebazaar.com/cards/agent-ready-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-apply-mcp", "name": "Eclipse Apply MCP", "verdict": "CERTIFIED(sandbox)", "scope": "Test Bench v0.1.0, 2026-10-25, SANDBOX environment: policy refusals (blocklist, salary floor, daily cap, expired policy), pause/kill switch, zero-fact tailoring diff, fabrication catch, hash-chained receipt ledger, dry-run transmits nothing, delete_my_data purge — 17 pass, 1 na of 18 checks", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-apply-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-apply-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "florida-bid-intel-mcp", "name": "Florida Bid Intel MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/florida.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/florida-bid-intel-mcp/", "card_url": "https://eclipsebazaar.com/cards/florida-bid-intel-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "white-report-mcp", "name": "The White Report MCP", "verdict": "CERTIFIED(live)", "scope": "Test Bench v0.1.0, 2026-10-25, LIVE host environment: all 5 tools verified over real HTTP JSON-RPC against the production endpoint (article search + full text, ticker, scoreboard, contract surface, read-only behavior, no-secrets scan) — 10 pass, 1 na of 11 checks", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/white-report-mcp/", "card_url": "https://eclipsebazaar.com/cards/white-report-mcp-2026-10-25-11.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-mail-mcp", "name": "Eclipse Mail MCP", "verdict": "CERTIFIED(local / fixture-only)", "scope": "CERTIFIED(local / fixture-only) — Eclipse Bazaar Test Bench 2026-10-25, 48 pass, 0 na of 49 checks (score 99/100: 48 pass / 1 partial / 0 fail). Run by W-003 (Verity), independent re-bench of the P0 fix round; the original NOT CERTIFIED card (68/100, test-bench/results/eclipse-mail-mcp-2026-10-25.json) is retained append-only, and this -2 card is the standing verdict basis. Scope is LOCAL / FIXTURE-ONLY: the §8 anti-fraud corpus, the signed-envelope/tier engine, the review-first send gate, the §5 fraud firewall, and the audit/kill-switch discipline, all over a synthetic fixture transport. NO live mailbox exists; NO live sending is possible in v0.1; parent-spec dogfood acceptance has NOT run and is NOT certified. The one PARTIAL (D-4): the §5 detector's detection prong catches canonical paraphrases (4/4 on the bench's fresh primary set; benign controls clean) but remains pattern-bounded on an extended evasion set (7/12 detected) — bounded by the by-construction firewall: an evasion loses the flag/workflow only, never protected state, because no tool can adopt a §5 instruction (forbidden surface refused 23/23 by name). A semantic detector pass is required before any live claim. N-CHECK: NOVELTY_PROVEN — fraud-firewall-by-construction plus detection-triggered out-of-band verification keyed to the registry number-of-record, Herald signed-envelope thread hash-chaining, and automatic auth→tier consequences including the D1 envelope-tier law (no valid envelope → never agent-tier).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-mail-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-mail-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-herald-mcp", "name": "Eclipse Herald MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/herald.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-herald-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-herald-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-beacon-mcp", "name": "Eclipse Beacon MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/beacon.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-beacon-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-beacon-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-cluster-mcp", "name": "Eclipse Cluster MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Simulator scope: local stub registry, openssl-signed fixtures. Run by W-003 (Verity), suites/cluster.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-cluster-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-cluster-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-thread-mcp", "name": "Eclipse Thread MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/thread.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-thread-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-thread-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-constellation-mcp", "name": "Eclipse Constellation MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/constellation.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-constellation-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-constellation-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-deepfield-mcp", "name": "Eclipse Deep Field MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 2: 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run 1 FAILED card retained in results/ — both failures were bench-suite assertion bugs (schema key name; hash assertion over schema_read receipts, which take no SQL), fixed in the suite, no product code touched. Run by W-003 (Verity), suites/deepfield.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-deepfield-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-deepfield-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-pantry-mcp", "name": "Eclipse Pantry MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/pantry.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-pantry-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-pantry-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-marquee-mcp", "name": "Eclipse Marquee MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/marquee.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-marquee-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-marquee-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-dispatch-mcp", "name": "Eclipse Dispatch MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/dispatch.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-dispatch-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-dispatch-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-social-core-mcp", "name": "Eclipse Social Core MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/social_core.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-social-core-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-social-core-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-aperture-mcp", "name": "Eclipse Aperture MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 11/12 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/aperture.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-aperture-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-aperture-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-zephyr-mcp", "name": "Eclipse Zephyr MCP", "verdict": "CERTIFIED(live-read)", "scope": "CERTIFIED(live-read) — Eclipse Bazaar Test Bench 2026-10-25, 12/13 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zephyr.py. Standing card is run 2 (-2.json); run 1 FAILED is retained in results/ — its Z5 failure was a defect in this bench probe (the tamper set a receipt field to its existing value, a no-op the verifier correctly accepted), fixed and disclosed here; no product defect.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-zephyr-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-zephyr-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-environment-mcp", "name": "Eclipse Environment MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/environment.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-environment-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-environment-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-procure-mcp", "name": "Eclipse Procure MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/procure.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-procure-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-procure-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-gig-core-mcp", "name": "Eclipse Gig Core MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/gig_core.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-gig-core-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-gig-core-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-compass-mcp", "name": "Eclipse Compass MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/compass.py. Run 1 (eclipse-compass-mcp-2026-10-25.json, FAILED, retained per append-only history) failed on a defect in the bench suite itself, not the product: its U3 network-surface pattern substring-matched the fixture filename 'thumbtack_requests.json'; the pattern was corrected and run 2 is the standing card.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-compass-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-compass-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-stage-mcp", "name": "Eclipse Stage MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/stage.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-stage-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-stage-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-zenith-mcp", "name": "Eclipse Zenith MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zenith.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-zenith-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-zenith-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-muster-mcp", "name": "Eclipse Muster MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/muster.py. First run FAILED card retained in results/ (bench-suite self-defect: U7 subsequence order; fixed and re-run clean).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-muster-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-muster-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-haven-mcp", "name": "Eclipse Haven MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (re-bench after H1 fix): 13/14 checks pass, 1 na (U1), 0 fail. H1 passes: presenting an api_token credential is refused with TOKEN_AUTH_NOT_IMPLEMENTED + the 2027-04-30 sunset date on all 10 tools — auth_status and receipt_list now call check_auth first and both schemas declare the auth property; the builder regression test (enumerating S.TOOLS) was independently replicated against a pre-fix copy, failing on exactly those 2 tools. Regression spot-checks H3 (visibility non-flattening), H4 (T2 cross-ticket/changeset replay), H5 (re-draft token kill) all pass unchanged. Run by W-003 (Verity), suites/haven.py. FAILED run-2 card (eclipse-haven-mcp-2026-10-25-2.json) retained in results/ per append-only history.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-haven-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-haven-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-orbit-mcp", "name": "Eclipse Orbit MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: local stub vendor, no live credential). Run by W-003 (Verity), suites/orbit.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-orbit-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-orbit-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-voice-core-mcp", "name": "Eclipse Voice Core MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19/20 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/voice_core.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-voice-core-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-voice-core-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-trunk-mcp", "name": "Eclipse Trunk MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/trunk.py. Run 1 FAILED card retained in results/ — bench-suite self-defect (T4 absolute receipt count vs cumulative suite ledger), fixed and re-run clean as run 2; no product defect.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-trunk-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-trunk-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect-mcp", "name": "Eclipse Connect MCP", "verdict": "CERTIFIED(dogfood-facade)", "scope": "CERTIFIED(dogfood-facade) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: vault surrogate stubbed). Run by W-003 (Verity), suites/connectfacade.py. Facade only — the relay holds its own CERTIFIED(dogfood) card (eclipse-connect).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-envoy-mcp", "name": "Eclipse Envoy MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 17 pass, 1 na of 18 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/envoy.py. Runs 1-2 PARTIAL cards retained append-only (bench-suite defects); run 3 is the standing card.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-envoy-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-envoy-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-fathom-mcp", "name": "Eclipse Fathom MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fathom.py. Run 1 PARTIAL card retained append-only (bench-suite defect); run 2 is the standing card. Non-failing bench observation: spender resolution in allowance_audit is chain-agnostic; chain-aware resolution recommended before D1 (queued as a bench note).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-fathom-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-fathom-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-codex-mcp", "name": "Eclipse Codex MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/codex.py. Run 1 FAILED retained (genuine product defect U5: clock_status on an unknown instance id returned a raw -32603; fixed class-wide via require_str_id plus a transport schema refusal, then re-benched clean). Run 2 FAILED retained (bench-suite assertion bound to the pre-fix refusal shape). Non-failing observation: a whitespace-only redaction reason is currently accepted (queued as a bench note).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-codex-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-codex-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-ledger-mcp", "name": "Eclipse Ledger MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/ledger.py. Run 1 FAILED card retained (bench-suite probe-ordering defect; product behavior was correct); run 2 is the standing card. Verity adjudication A1 on the card: the settled-backfill exclusion boundary matches spec section 3.3 intent.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-ledger-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-ledger-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-till-mcp", "name": "Eclipse Till MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/till.py. Run 1 PARTIAL card retained append-only (bench-suite defects); run 2 is the standing card; zero product defects. Benched against a bench-owned catalog and bench-minted buyer cards/mandates (the builder's fixtures were never used). Ads Rail P1 extension: CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 100/100 on the scoped D1–D4 re-bench (scorecard eclipse-till-mcp-2026-10-25-3.json; 31/31 re-bench checks pass; the original PARTIAL 76/100 frame is retained in the card's provenance note). The rail is Stripe TEST MODE ONLY, runs against the labeled local simulator in this environment, and is NOT PROVEN IN STRIPE: no Stripe test account was wired, W2 is not proven, and no card was attached to any ad platform.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-till-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-till-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-book-mcp", "name": "Eclipse Book MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/book.py. Non-failing bench observation: the probability-field guard runs post-commit (a poisoned instrument persists in state; every read of it fails closed) — pre-commit move queued for M1 hardening.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-book-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-book-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-forecast-mcp", "name": "Eclipse Forecast MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/forecast.py.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-forecast-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-forecast-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-strike-mcp", "name": "Eclipse Strike MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/strike.py. Run 1 PARTIAL card retained append-only (bench-suite parity assertion defect); run 2 is the standing card.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-strike-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-strike-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-meter-mcp", "name": "Eclipse Meter MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/meter.py. Run 1 PARTIAL card retained append-only (bench-suite self-defect in the M11 hash assumption, disclosed on the card); run 2 is the standing card; zero product defects. N-CHECK passed: signed records verify offline with the exported pubkey only. Two non-failing observations on the card: the export verify_note omits signer_fingerprint from its signed-body description, and provenance raw_hash covers raw + an internal index (internally consistent, not recomputable from the stored raw alone).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-meter-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-meter-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-tripwire-mcp", "name": "Eclipse Tripwire MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/tripwire.py. Run 2 FAILED (T10: a within-batch duplicate event_id was stored twice and double-counted by the velocity detector) and run 1 PARTIAL cards retained append-only; the defect is fixed, the class closed (single validator call site, verified by source reading), and run 3 is the standing card. Novelty (NV) proven: verified actuation distinguishes Tripwire from logging/observability tools. Two detector evasions (signature-split loops, paced spawn fan-out) are documented SPEC NOTEs, unchanged by design.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-tripwire-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-tripwire-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-umbra-mcp", "name": "Eclipse Umbra MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/umbra.py. Run 1 PARTIAL card retained append-only (bench-suite assertion defect, disclosed on the card; no product code touched); run 2 is the standing card; zero product defects. N-CHECK: NOVELTY_PROVEN — a closed-vocabulary witness: signed findings with reproducible evidence packs and rebuttal linkage, not diffs. Non-failing observation on the card: punycode-shaped domains are not IDNA-decoded by the skeleton engine; IDNA-decode is recommended before G-LIVE.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-umbra-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-umbra-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-blackbox-mcp", "name": "Eclipse Blackbox MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 22 pass / 0 fail / 0 na of 22 checks. Run by W-003 (Verity), suites/blackbox.py, against bench-provisioned credentials and bench agent streams. Run 2 FAILED (U5: bare int() coercion in record_read's seq/limit filters escaping as a raw -32603) and run 1 PARTIAL cards retained append-only; the fix (coerce_int_param guard) was verified on the wire at raw JSON-RPC level, including a 114-probe schema-enumerated type fuzz over every parameter of all five tools, and the guard is ruled APPROVED as the house reference implementation for the raw-coercion defect class; run 3 is the standing card. U1 is a genuine pass (a real credential layer exists). N-check stands: the recorded agent cannot read, grade, or rewrite its own record; the recorder receipts its own gaps. Tail-truncation claim verified exactly as stated (detectable only against a previously exported pack head — the product claims no more).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-blackbox-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-blackbox-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-docket-mcp", "name": "Eclipse Docket MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 7 (standing): 19 pass / 1 na (U1 auth: stdio process boundary) / 0 fail of 20 checks. Run by W-003 (Verity), suites/docket.py, over a bench-owned Till-shaped export and bench parties. Runs 1–6 FAILED cards retained append-only: run 3 caught four tool descriptions missing the mandatory descriptor (spec section 12 — 'Not a court, not a legal judgment' rides every surface); run 4 caught D12 — offset-naive at_time values escaping as a raw -32603 when compared against offset-aware stored times — fixed under the adjudicated refusal shape (parse_time refuses offset-naive timestamps by name, AT_TIME_OFFSET_REQUIRED: a guessed timestamp in a dispute record is a falsified timestamp), and parse_time is APPROVED as the second house reference guard; runs 5–6 failed on bench-suite setup defects, disclosed on their cards (no product code touched). Silence ruling (run 3, upheld): expiry records silence and makes the case determinable, never an outcome. Novelty: NOVELTY_PROVEN.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-docket-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-docket-mcp-2026-10-25-7.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-friction-mcp", "name": "Eclipse Friction MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 41 pass, 0 na of 41 checks. Run by W-003 (Verity), scoped re-bench of the D1–D7 fix round; the original PARTIAL card (34/41) is retained append-only and this -2 card is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — a friction filing surfaces only after the board recomputes its Herald-signed, hash-chained trace pack, so faking a filing requires actually executing the calls and holding the identity key; fixes surface only the same way (clean recompute plus a CLEAN bench replay receipt).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-friction-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-friction-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-colophon-mcp", "name": "Eclipse Colophon MCP", "verdict": "CERTIFIED(local/simulator)", "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass of 19 checks, synthetic fixtures only (5 build-fixture titles + 1 bench-own title; all 8 divergence classes exercised). Independent Verity bench with own fixtures; run 1 card retained append-only. Scope: local/simulator — NO live retailer, KDP or connector data (KDP has no author API; connector fetch is P1/D3-gated and absent; Watch is D4-gated and absent). N-CHECK: NOVELTY_PROVEN — a signed catalog of record whose royalties are recomputed line-by-line and whose pirate-source refusal is structural; benched against BookReport/ScribeCount-shaped dashboards, which keep no record and recompute nothing.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-colophon-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-colophon-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-tether-mcp", "name": "Eclipse Tether MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 31 pass of 31 checks. Run 1 PARTIAL (30/31) retained append-only: its sole failure was a bench-assertion defect in H10 (compared full error dicts incl. the caller-echoed tool name), not a product defect. Scope: SIMULATOR ONLY — P0 is ROS 2 + Gazebo + UR-class arm sim, in-process; NO hardware claim of any class is made. Liability counsel gates P1 real motion only. N-CHECK: NOVELTY_PROVEN — rename census 6/22 = 27% (<80%); the mandate-and-bridge mechanism exists in no incumbent (Boston Dynamics ships dispatch in Orbit; nobody ships the signed authority layer).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-tether-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-tether-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-proving-mcp", "name": "Eclipse Proving MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 10 pass, 0 na of 10 checks — scoped re-bench of run 1's failing lines (B9 class integrity, B10 time expiry, B11 envelope hostility) plus the B12 D-4 limb, all re-probed PASS with bench-own fresh shapes; D-1 (evidence-class laundering via registry config), D-2 (lease/mandate time expiry never enforced), D-3 (envelope crashes), D-4 (struck live-transport env claim) all CLOSED. The original PARTIAL card (run 1: 10 pass / 1 partial / 3 fail — test-bench/results/eclipse-proving-mcp-2026-10-25.json) is retained append-only and this -2 card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulator) and nothing broader. The adapters are simulated-PS: fixture packs are evidence class fixture, qemu/renode packs are evidence class EMULATOR (content is a deterministic simulated PS inside the adapter). NO live transport was exercised at any point in either bench run — no QEMU process, XSDB/GDB/TCF session, or Renode monitor ran — and spec §12.4 exit checks X4/X5 are still owed before any transport-level interop claim. Non-gating observation carried on the standing card: a session whose lease time-expires seals no gap pack on expiry (contrast §11.3, which lists lease_expiry among gap-record causes); whether an expired session's evidence should also seal is an open spec question, flagged by the bench, not silently passed over. N-CHECK: NOVELTY_PROVEN (run 1, carried) — bench authority only inside a Herald-signed mandate binding agent × board × op-class × exact artifact hash, enforced at the bridge, every session incl. gaps/refusals sealed into an offline-verifiable pack; incumbents (fpga-mcp / VivadoMCP / probe-rs / labgrid) have no pin to mismatch and no pack.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-proving-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-proving-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect-beyondcompare-mcp", "name": "Eclipse Connect · Beyond Compare MCP", "verdict": "CERTIFIED(simulated)", "scope": "CERTIFIED(simulated) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench (fix round 1): 26 pass, 0 na of 26 checks — the first bench's two major defects (D-ENV: envelope type guard at both serving layers; D-REVOKE: pack_fetch re-checks grant state after revoke, byte-identical refusal, no oracle) fixed and re-probed PASS, regression spot-lines A1–A6 / B0–B8 / C1–C8 / G1 unbroken; the full bench script also ran end-to-end out-of-scope at 42/42. The original PARTIAL card (40 pass / 2 fail of 42 — test-bench/results/eclipse-connect-beyondcompare-mcp-2026-10-25.json) is retained append-only and this re-bench card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulated) and nothing broader. The adapter is a scripted stand-in throughout (the documented-CLI adapter is a stubbed interface only); evidence class SIMULATED; NO live Beyond Compare run was exercised at any point in either bench run — live BC exercise is OWED at P1 on the owner's license (vendor trial fallback) before any live claim. MECHANISM: Herald-signed recomputable compare-evidence packs over mandate-granted paths; merge = T3 ECDSA approval-bound with base-drift refusal. N-CHECK: NOVELTY_PROVEN — 0/6 renamed vendor verbs (fail line ≥80%), shim score 1/20 (ceiling ≤20%); the novelty is the mandate/custody + evidence layer, never the bridge. Not Scooter Software. Not endorsed by Scooter Software. The customer supplies their own Beyond Compare license.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-beyondcompare-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-beyondcompare-mcp-2026-10-25-rebench-fixround1.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-wageward-mcp", "name": "Eclipse Wageward MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-wageward-mcp-2026-10-25-5.json (scoped re-bench -5): 20 pass, 0 na of 20 checks. CEILING — read exactly: this certifies the approval-and-evidence rail at local scope over a SYNTHETIC workforce, and nothing broader. Wageward is an approval-and-evidence rail ONLY — it is not a system of record, has no payroll-calculation or tax engine, and the submit-class tools (payroll_run_submit / filing_submit) are ABSENT from the surface by design in P0/P1: the bench verified by live stdio that calling one returns unknown-tool. Every approval/filing packet carries the mandatory statement that approval does not transfer payroll-tax liability (the employer remains liable); a packet missing it is invalid by construction. The four prior FAILED cards are retained append-only and cited here: eclipse-wageward-mcp-2026-10-25.json (FAILED), -2.json (FAILED), -3.json (FAILED), -4.json (FAILED — D2-GEN2 HIGH, separator-run identifier evasion) — the -5 scoped re-bench closes D2-GEN2 on every channel (live-stdio echo 7/7 bench shapes, persistence 2/2, approval-signing 4/4, plus fresh no-cap probes 8/8) on top of everything closed in -2/-3/-4. OPEN SPEC ITEM (not a P0 claim): receipt-TTL is an open spec item to settle pre-P1. N-CHECK: NOVELTY_PROVEN (stands — the fused fingerprint + Herald-signed approval + drift-refusal mechanism is unchanged by the fix rounds; no CRUD verb added).", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-wageward-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-wageward-mcp-2026-10-25-5.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-consent-mcp", "name": "Eclipse Consent MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 23 pass, 1 na of 24 checks (U1 na), 0 fail — 23/23 scored checks, single bench, no fix round. CEILING — read exactly: CERTIFIED(local) over FIXTURE subjects only, and the fixture boundary is enforced by the product, not by convention: v0 refuses any non-fixture subject by name (SUBJECT_NOT_FIXTURE) and every subject in the package is synthetic. Real-subject personal-data processing is NOT built and is held at gate G-COUNSEL (spec §17); jurisdiction packs (state privacy / AI-law vocabulary variants) are NOT built (G-COUNSEL per pack) — the versioned-vocabulary mechanism they would ride on ships in v0 as data. Consumer-facing grant UX is NOT built (G-OWNER); v0 has no consumer surface at all, and no hosted or network form exists. Consent records consent; it does not manufacture it, and no output certifies any party.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-consent-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-consent-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-attest-mcp", "name": "Eclipse Attest MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #2 (C12 diversity battery): 10 pass, 0 na of 10 checks. Bench history retained append-only: the first bench FAILED on D1 (test-bench/results/eclipse-attest-mcp-2026-10-25.json) and scoped re-bench #1 FAILED on D2 (eclipse-attest-mcp-rebench-c12-2026-10-25.json); re-bench #2 closed D2 — the diversity computation now resolves its grouping key registry-only (accountable_id from the identity registry; asserted fields are never read), verified against a bench-owned Sybil registry (r2-syb-a/b/c under one accountable id weigh as one). All other first-bench passing lines stand un-re-run. CEILING: CERTIFIED(local) for the v0 surface — the ONLY admitted evidence class is Till settlement receipts; new evidence classes are NOT admitted (G-OWNER per class; the Herald receipt-on-delivery class is named admissible in spec but NOT admitted in v0.1); public attestation feeds / leaderboards are NOT built (T2 + G-COUNSEL) and their tool names refuse -32602; cross-marketplace integrations NOT built (G-LIVE per platform). Genesis identities are CETech's own service agents as fixtures; v0 signs with a local test key (keys/, gitignored) — production findings-key custody is a gated decision. No star ratings exist and none are implied.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-attest-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-attest-mcp-rebench2-c12-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-keyhold-mcp", "name": "Eclipse Keyhold MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — FIRST-PARTY SCOPE ONLY. Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #3: 13 pass, 0 na of 13 checks on the card's check lines, comprising 59/59 individual bench probes across the D7/D8 boundary battery, the identity-exemption angle set (aliasing-by-copy, self-nesting, list-wrapped envelope, list owner_approval, signature-plus-extra-material, dotted keys on secret_enroll) and the K3/D6 spot batteries. Bench history retained append-only: runs 1–3 FAILED (test-bench/results/eclipse-keyhold-mcp-2026-10-25.json, -2.json, -3.json) and stand as the record for the lines they scored; every gating defect they raised is closed on the standing card or a retained predecessor card. CEILING — read exactly: certification covers first-party leases over ONE redemption class (https_static_key), exercised on a fixture transport — live redemption against a real third-party API was NOT exercised and no real credential exists in the package. Third-party custody is NOT built and is HELD (G-COUNSEL + G-OWNER + Verity security review of the redemption component; the gate may conclude never). The v0 envelope construction (ephemeral ECDH P-256 + HKDF-SHA256 + HMAC stream/EtM) is a local reference construction for the fixture/dogfood scope; the held security review may replace it before any wider custody claim. NAME: CONDITIONAL PASS — trademark/collision screen owed before any public surface (G-TM); the descriptor always reads 'credential leases, never raw keys'. v0 uses local seed keys (keys/, gitignored, chmod 600): the private master half is read ONLY by the redemption executor, never by the MCP server.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-keyhold-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-keyhold-mcp-2026-10-25-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-strata-mcp", "name": "Eclipse Loft MCP", "verdict": "CERTIFIED(simulator)", "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench r3 (standing): 12 pass, 0 na of 12 checks — the D2-only scope (key-substitution attack D2X + V3/V4/V5 tamper set + genuine packs with and without anchor, library and CLI). D1/D3–D10 were closed in scoped re-bench r2 and carried, not re-probed, per scope. History, all cards retained append-only: bench 1 FAILED (35 of 45 checks — test-bench/results/eclipse-strata-mcp-2026-10-25.json); scoped re-bench r2 FAILED (25 of 26 — eclipse-strata-mcp-2026-10-25-r2.json) on the sole remaining HIGH, D2. Scope — read exactly: SIMULATOR ONLY. P0 printers are host-shaped simulators (OctoPrint virtual + virtual Klipper/Moonraker, in-process) behind the production interface, with a deterministic simulated slicer; NO live printer was exercised at any point in any bench run, no heat exists in this bench, and no hardware claim of any class is made. TRUSTED SIGNER ANCHOR: Strata Proof verifies a pack only against a verifier-supplied registry / expected fingerprint; a pack's embedded key and self-consistent fingerprint never suffice — unanchored packs and unknown signers report PRINT_UNVERIFIED (UNVERIFIED_SIGNER) by design, never a silent verify. That anchor is what closed D2: in r2 an attacker who minted their own keypair, tampered the mandate (material swap, +365d expiry), re-signed and re-sealed produced PRINT_VERIFIED; in r3 the byte-for-byte same attack is refused solely on UNVERIFIED_SIGNER under a genuine anchor, under a genuine expected fingerprint, and with no anchor. GEOMETRY, narrowed in fix round D7 and consistent across spec, README, manifest and tool surface: declared_geometry_only — design_inspect returns the caller-declared bounding box plus arithmetic over it; manifold / triangle / wall-thickness facts are null, never echoed as verified; no geometry-kernel claim is made. BAMBU posture (spec): a Bambu adapter is P2+ and owner-Developer-Mode-only — the enablement act is documented as the owner's; there is no Bambu path, bypass, or claim at P0. NAME CONDITIONAL pending trademark screen (Stratasys shared root, same industry); fallbacks on record: Eclipse Sinter, then Eclipse Loft. N-CHECK: NOVELTY_PROVEN (bench 1, retained) — renamed-verb overlap 55% (<80%); a Kiln-shaped fixture printing a hand-edited +15 °C toolpath and an unbound job was refused on both counts — the mandate-and-bridge mechanism exists in no incumbent.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-strata-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-strata-mcp-2026-10-25-r3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-corona-mcp", "name": "Eclipse Corona MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 25 pass, 0 na of 27 checks (1 partial, 1 fail — LOW defects D-COR-1/D-COR-2, no verdict impact, retained on the card). CEILING — read exactly: CERTIFIED(local) for the local verifier only, at the P0 ceiling, and nothing broader. Proven: the 5-tool MCP surface + Gate CLI + Sheet CLI as shipped; staged-class sealed packs over the §14 fixture corpus (bench-built, bench-signed); served-class dogfood pack verification for cetech.ai (builder-sealed, bench-recomputed); the gate contract including WARN/ENFORCE claim asymmetry; the house profile on a bench house-shaped fixture. Render-proof packs are bound to deployed artifact hashes: a pack proves identity and mechanical soundness of the pinned bytes under named measured facts — it does NOT prove an asset is semantically the right asset; semantic approval is the separate human act of approving the pack's contact sheet once per version. Claim-gate wording (spec §8.2): a deploy may be reported 'verified live' only while a PASS served pack exists whose input hashes equal the currently deployed manifest; any served-byte change invalidates the proof automatically; the gate blocks the word 'verified', never the publish. No hosted or live scope is certified: the hosted matrix is a P2 seam only (HOSTED_MATRIX_NOT_AVAILABLE). N-CHECK: NOVELTY_PROVEN — shipped surface 7/7 novel core (5 MCP tools + Gate CLI + Sheet CLI), substrate verbs 0/7 = 0% (R3 kill line 80% not triggered). NAME CONDITIONAL pending trademark screen (Chaos Corona / Corona beer screen outstanding, D1); fallbacks on record: Eclipse Transit, Eclipse Behold, Eclipse Lantern.", "date": "2026-10-25", "timestamp": "2026-10-25T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-corona-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-corona-mcp-2026-10-25.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-agent-wallet-mcp", "name": "Eclipse Agent Wallet MCP", "verdict": "CERTIFIED(sandbox)", "scope": "Test Bench v0.1.0, 2026-10-24, sandbox environment: policy enforcement (no-policy/over-cap/off-allowlist denied), approval queue, kill switch, append-only audit, schema and error handling — 12 pass, 1 na of 13 checks", "date": "2026-10-24", "timestamp": "2026-10-24T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-agent-wallet-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-agent-wallet-mcp-2026-10-24-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "certbridge-mcp", "name": "CertBridge MCP", "verdict": "CERTIFIED(staging)", "scope": "Test Bench v0.1.0, 2026-10-24, Let's Encrypt STAGING environment: end-to-end staging order, byte-exact challenge placement, staging/production labelling, renewal-due detection, audit completeness — 12 pass, 1 na of 13 checks", "date": "2026-10-24", "timestamp": "2026-10-24T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/certbridge-mcp/", "card_url": "https://eclipsebazaar.com/cards/certbridge-mcp-2026-10-24-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect", "name": "Eclipse Connect", "verdict": "CERTIFIED(dogfood)", "scope": "Test Bench v0.1.0, 2026-10-24, dogfood environment (simulator-verified, 14 tests): fail-closed auth, upload validation, public-approval gating, revoke, audit hygiene, authorize/callback grant flow — 14 pass, 1 na of 15 checks", "date": "2026-10-24", "timestamp": "2026-10-24T00:00:00Z", "product_url": "https://eclipsebazaar.com/products/eclipse-connect/", "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-2026-10-24-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-airtime-mcp", "name": "Eclipse Airtime MCP", "verdict": "CERTIFIED(local/simulator)", "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 23/23 checks. Run by W-003 (Verity), suites/airtime.py. The original PARTIAL card (20/23; D1 MEDIUM + D2 HIGH) is retained append-only; the scoped re-bench card -2 closed both defects and is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — spend enforcement happens pre-call, ad copy is bound to a signed claims record at the publish path, and every mutation or refusal seals into an advertiser-held evidence ledger. Simulator/test-double only; no live transport, campaign, or spend was tested.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-airtime-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-airtime-mcp-2026-10-25-2.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-charter-mcp", "name": "Eclipse Charter MCP", "verdict": "CERTIFIED(local)", "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (standing): 24 pass, 0 fail of 24 checks. Independent Verity bench with own fixtures; runs 1–2 PARTIAL cards retained append-only — both failures were re-derived as bench-harness defects (2dp expectation; fuzz predicate), product code unchanged. Scope: local / P0 only — the adapter is a local Plaid-shaped fixture form and the dogfood run is fixture-form; NO live Plaid claim is made. Descriptor-bearing product: the descriptor was verified on 100% of envelopes including refusals over stdio (T15/T15b). N-CHECK: NOVELTY_PROVEN — 27.3% renamed vendor verbs; policy-of-record + cross-account wash-sale watch + grant-keeper is a mechanism no incumbent ships.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-charter-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-charter-mcp-2026-10-25-3.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-covenant-mcp", "name": "Eclipse Covenant MCP", "verdict": "CERTIFIED(local/simulator)", "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-covenant-mcp-2026-10-25-4.json (scoped re-bench -4): 40 pass, 0 na of 40 checks (40/40 scoped lines: 37 independent harness lines + builder-suite line + surface line + workspace-integrity line). CEILING — read exactly: P0 is SYNTHETIC ONLY. No live outreach of any kind is certified or claimed; a counsel HARD GATE stands before any P1 live outreach, and it has not been lifted. Defect history, all retained append-only: base card eclipse-covenant-mcp-2026-10-25.json FAILED (28/35 — D1 CRITICAL revocation-wipe, D2 HIGH provenance downgrade); -2.json PARTIAL (44/45 — D1–D7 closed, D8 open); -3.json PARTIAL (27/29 — D8 closed on its shapes, D8b open at two entry points); -4.json closes D8b at all three entry points including the Gate state-tamper path (VENDOR_POSTURE_UNKNOWN, 0 sends, refusals sealed) with sweep-hardening verified fail-closed and no over-refusal; B5 posture exhaustion and rule-pack rigidity pass. BACKLOG: LOW notes from cards -2/-3 (B1 refusal sealing / stale pack at Gate only / clarification 5-minute window) remain open, LOW severity, recorded as not gating for P0 local/simulator certification. N-CHECK: NOVELTY_PROVEN (stands from bench 1; the D8b fix hardened the proven mechanism, changed no surface).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-covenant-mcp/", "card_url": "https://eclipsebazaar.com/cards/eclipse-covenant-mcp-2026-10-25-4.json", "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-sunset-mcp", "name": "Eclipse Sunset", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1 fix (repo @ 88f2aa6): probe 5 chain attacks PASS 4/4 + strict extras 9/9 — on a tampered ledger the previously-PROVEN claim returns UNPROVEN + chain_invalid: true, no forged PROVEN is minted, detect_sunsets / migration_diff / ingest_snapshot refuse CHAIN_INVALID; full prior suite re-run 44/44 (unwitnessed claims UNPROVEN, witnessed proof citing bench-recomputed snapshot hashes, fixture-pair detection exact, migration diff sane, hygiene 14/14). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 41/44, defect D1 HIGH — closed by this re-bench. Scope = LOCAL/fixture only: local JSON snapshot ingest, stdio transport, bundled weather fixtures. No live-registry claim is made or tested — none exists in v0.1.1, and the server honestly says so.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-sunset-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-nexus-witness-mcp", "name": "Eclipse Nexus Witness", "verdict": "CERTIFIED (local, fixture-vintage)", "scope": "CERTIFIED (local, fixture-vintage) — Verity independent bench 2026-10-26 (repo @ ec06f2e): 81/81 checks passed, two consecutive runs. Replay fidelity 11/11 (an old receipt verifies against the OLD fixture rule after a newer vintage is added; receipt id/hashes recomputed independently per SPEC §6); forgery matrix 22/22 (naive tamper INVALID on every field; re-sealed forgeries — including the new rate claimed at the old vintage — still INVALID, because verify_receipt replays the fixture rule at the receipt's vintage instead of trusting the seal); N-check 18/18 (no bare-answer path; unknown jurisdiction/category/vintage refuse cleanly and no rate is ever invented); honesty sweep 12/12 (DEMO envelope on every determination output; zero real-rate, tax-advice, or live-determination claims); hygiene 18/18 (zero network/payment code; exactly the 4 spec tools). Scope = LOCAL / fixture-vintage ONLY: local fixture lookup, stdio transport, bundled fictional fixture rates (13 rules, 5 fictional 'Fixture *' jurisdictions). DEMO rates only — NOT tax advice; no live tax determination is made by the product or tested here. Defects D1–D3 (all LOW) stand on the record as fix-before-live and are not hidden: D1 unkeyed seal (VALID means 'consistent with the fixture rule at its vintage', not 'issued by this server'; _verify does not assert source/demo_label/scope constants), D2 refusal responses carry no DEMO envelope, D3 advertised additionalProperties: false schemas not enforced in dispatch (extra argument keys silently ignored). Any live phase remains behind the SPEC §2 counsel gate (licensed data source + legal counsel review + explicit owner gate), and D1 must be closed before any hosted/live scope.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-nexus-witness-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-warranty-mcp", "name": "Eclipse Warranty", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1/D2 fix round (repo @ 6fd6784): 96 probes recorded, 95 asserted PASS, 0 FAIL, 1 observation (O1, design-consistent, no condition attached). D1 attacks PASS 26/26 (supplied-pack injections/relabels/wrong-types → INVALID; store copies → INVALID + transfer refused; get_pack structural refusal 3/3); D2 attacks PASS 24/24 (wrong-type and extra-field arguments rejected cleanly on all five tools, zero coercion, nothing registered by a rejected call); P2 tamper matrix PASS 5/5 bound fields + 11/11 chain + 6/6 supplied-pack attacks; P4 negative space PASS 18/18 (unregistered serial = plain negative, duplicate serial SERIAL_ALREADY_REGISTERED, unknown tools NO_SUCH_TOOL); P1 mechanism spot-check PASS 3/3 (fresh-process verify VALID after transfer, no original holder). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 67 asserted PASS / 0 hard FAIL, defects D1 (MEDIUM, unsealed-field injection) + D2 (LOW, schemas unenforced) — both closed by this re-bench. The v0.1.0 seal break is verified real and its disclosure judged honest and complete for LOCAL/fixture scope: packs sealed under v0.1.0 verify INVALID under v0.1.1, no migration, fixtures re-registered. Scope = LOCAL/fixture only: caller-supplied fixture purchase refs, stdio transport, HMAC-SHA256 demo seal with a local demo key. The pack is a witness record, not a warranty contract — no adjudication, coverage, eligibility, or enforceability is claimed by the product or tested here. Observation O1 stands on the record: get_pack refusal is structural-only by design (a pure value tamper is still returned by get_pack but gated everywhere it matters — verify INVALID, claim_check transferable:false, transfer refused); consumers must treat verify_pack, not get_pack, as the validity gate (SPEC §5.3). Bench note D3 (informational, by design): transfer requires no holder authorization — possession of pack_id is a bearer capability, exactly as SPEC §3/§5 specify for v0.1; it must be revisited before any hosted/live scope.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-warranty-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-toolprint-mcp", "name": "Eclipse Toolprint", "verdict": "CERTIFIED (local)", "scope": "CERTIFIED (local) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 240c329): 18/18 PASS, deterministic across 2 runs. Anchored tail-truncation (the v0.1 D1 repro) detected as TAIL_TRUNCATION_SUSPECTED with chain_valid:false; unanchored reads explicitly carry anchored:false / anchor_match:null and assert internal consistency only; a same-count forged tail (independently recomputed record_hash, invisible to bare-chain recompute) is caught as CHAIN_HEAD_MISMATCH by the caller anchor alone; anchor material (head_hash + record_count) present and advancing on pin_session, verify_call, and get_session_chain, with tool_version 0.1.1 on every envelope. Regression spot-checks PASS: verbatim presented description = VALID, swapped-fixture search = INVALIDATED with pinned 332a2771… / presented 6246163e…, and the v1 fixture fingerprint + SPEC §3.1 canonical preimage are byte-exact unchanged by the fix. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local), 40/40 probes PASS, defect D1 (MEDIUM — tail truncation erased a proof record undetectably, falsifying SPEC §2.3's unqualified tamper claim) — closed by this re-bench via implementation (caller-anchored head) plus the qualified SPEC §10 claim. Scope = LOCAL only: a local verification engine operating on caller-supplied tool lists/descriptions plus bundled fixtures, stdio transport; it does NOT proxy live MCP traffic, does not connect to remote servers, does not execute described tools, and makes no network calls — no live-traffic claim is made by the product or tested here. Claim honesty PASS with 1 non-blocking observation on the record: SPEC §2.3's original unqualified sentence and §8 item 4 remain verbatim in the body, neutralized only by §10's supersession header; the document read whole is accurate. §9.3 signed/external anchoring for cross-party evidence remains open by design and is not claimed.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-toolprint-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-boomerang-mcp", "name": "Eclipse Boomerang", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1/D2 round (repo @ 985fe9f): 57/57 re-bench checks PASS, and the prior full bench suite re-run against v0.1.1 scores 83/83 (v0.1: 80/83). D1 (MEDIUM — unhashable-typed ids crashed the stdio process via uncaught TypeError at store lookups) CLOSED: the bench's crash vectors (list/dict purchase_id / return_id across initiate_return, get_return, verify_return) each return a clean JSON-RPC error in a fresh process with the server alive and answering tools/list afterwards; a 56-case wrong-type fuzz sweep over every advertised argument of all five tools plus 15 protocol-garbage cases killed no process; bool-as-int amount rejected as a type error, never accepted as 1. D2 (LOW — seal_type missing on verify_return INVALID branches and list_denials vs SPEC §5 'all responses carry scope + seal_type') CLOSED: every verify_return branch (VALID and all INVALID paths, reached via independently re-sealed records) and the list_denials response + stored denial entries now carry both fields uniformly. Mechanism spot-check PASS, semantics unshifted: happy path AUTHORIZED with the return record's receipt_hash + mandate_hash + purchase_seal identical to the sealed purchase and verify_return VALID; wrong serial → DENIED / SERIAL_MISMATCH. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), bench suite 80/83, the SPEC §3 novel mechanism passing in full (every bypass denied with the spec'd code, binding independently recomputed, seal-transplant forgery rejected x8, override audit: exactly the 5 spec tools and 10 override-shaped calls all NO_SUCH_TOOL) with defects D1 + D2 — both closed by this re-bench per the prior verdict's stated upgrade path. Scope = LOCAL/fixture only: caller-supplied fixture purchase records (receipt + mandate), stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Authorization is a sealed local record, NOT a real-world returns/logistics action — it does not ship, receive, refund, restock, or instruct any third party, and no merchant, carrier, payment, or logistics system is contacted; nothing about real merchant/carrier/refund integration is claimed by the product or tested here.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-boomerang-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-rebuttal-mcp", "name": "Eclipse Rebuttal", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C4/D5 round (repo @ 3f0668c): 39/39 scoped probes PASS, builder suite re-run 23/23. C1/D2 (HIGH — build_packet/map_evidence never verified the case seal, so a tampered chain was re-sealed into a VALID packet) CLOSED: tampered stored case (authorized_by -> buyer:mallory) -> validate_case case_seal_valid=false, map_evidence + build_packet hard refusal SEAL_INVALID, no packet stored, attacker value emitted nowhere (6/6). C2/D1 (HIGH — packet seal excluded text_rendering, so fabricated text verified VALID) CLOSED: seal now covers the full packet incl. text_rendering; supplied + stored text tamper INVALID and edit-any-field sweep 12/12 INVALID (5/5). C3/D3 (MED — mismatched receipt silently used via receipts[0] fallback) CLOSED: receipt sections MISSING, packet INCOMPLETE, mismatched receipt traced nowhere under 2 reason classes (8/8). C4/D4 (MED — external re-seal verified under unkeyed SHA-256) CLOSED: HMAC-SHA256 demo-key seals; unkeyed/wrong-key/foreign-key re-seals INVALID, legitimate key-holder flow VALID (7/7). D5 (LOW — null-valued elements in present sections) CLOSED: no null elements, partial nulls emit only present values (6/6). Spot-check P1 regression PASS (7/7): complete fixture COMPLETE + case_seal_valid=true, 11/11 elements traced, within_scope derivation correct, all 5 sections present, get_packet VALID. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 45/51 probes, core mechanism (traceability + anti-fabrication battery) passing in full with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: caller-supplied fixture dispute + mandate-chain + receipt data, stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Packet generation only — the tool never files, submits, or transmits anything, no card network/issuer/merchant/platform is contacted, and the generic GEN-* reason-code table is not any network's proprietary codes and claims no network affiliation; nothing about real filing, submission, or network acceptance is claimed by the product or tested here.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-rebuttal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-crawlway-mcp", "name": "Eclipse Crawlway", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C3/D4/D5 round (repo @ d3af623): 48/48 scoped probes PASS, 0 FAIL. C1 (D1, HIGH — a standalone receipt object resealed with the public formula verified VALID with chain_valid: true) CLOSED: non-ledger objects (resealed forgery at position 1 and 99, resealed identity-swap of a genuine receipt) return INVALID with chain_valid: false and in_ledger: false; forged receipt_id returns RECEIPT_NOT_FOUND; the genuine ledger receipt still verifies VALID by id and by object (10/10). C2 (D2, MEDIUM — the terms-record seal was never enforced) CLOSED: both store-swap variants (hash-only; text+hash with stale seal) make record_crawl refuse with TERMS_SEAL_INVALID (nothing minted, ledger unchanged) and prior receipts verify INVALID with terms_status: seal_invalid; an untouched publisher in the same store is unaffected (12/12). C3 (D3, MEDIUM — the meter counted unsealed ledger lines) CLOSED: after appending a non-JSON garbage line and a well-formed-but-unsealed line, meter_report totals stay at the sealed count with rejected_lines: 2 surfaced and breakdowns byte-identical (5/5). D4 (LOW — filtered meter reports were internally inconsistent) CLOSED: for filters {}, {publisher}, {crawler}, {publisher+crawler}, total_receipts equals every breakdown sum and metered_total_usd equals total × 0.01 (9/9). D5 (LOW — unbound fields on a supplied receipt were not authenticated) CLOSED: an extra field (license_scope) or a tampered position verifies INVALID with structure_valid: false (6/6). Spot-check PASS 6/6: happy-path hashes match the bench's independent recomputation and revocation semantics are unregressed (revoked receipts verify TERMS_REVOKED with binding_valid: true, chain_valid: true; record_crawl under revoked terms refuses and mints nothing). Known LOW, non-blocking, disclosed (D6, fix-before-live): a corrupt non-JSON store line is handled by meter_report (counted in rejected_lines) but crashes the non-meter tools via the shared loader — the server exits instead of answering; the failure is loud and safe-direction (no false VALID, no inflated meter) and is recorded as fix-before-live for any hosted/long-running deployment. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 49/49 asserted probes PASS with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: receipt mechanics only — no crawling, no fetching, no network calls, no marketplace; callers supply content fingerprints (SHA-256 hashes) and Herald-card-shaped crawler identity refs, never content; the $0.01/call meter is recorded, never charged in v0.1.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-crawlway-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-outwatch-mcp", "name": "Eclipse Outwatch", "verdict": "CERTIFIED (LOCAL)", "scope": "CERTIFIED (LOCAL) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1–D3 round (repo @ b65c32e): 21/21 checks PASS, 0 FAIL (P6 aggregates 82 fresh-process vectors). D1 (HIGH — malformed arguments crashed the server process: list/dict target_id TypeError, invalid-IPv6 urlparse ValueError) FIXED: 25 original malformed cases + 57-vector fuzz sweep (wrong types on every arg of every tool, fresh process per vector) → 0 crashes, 0 tracebacks, every vector a clean JSON-RPC isError, process alive and tools/list responsive after each. D2 (HIGH — probes followed HTTP redirects, LOCAL scope bypassable by trampoline to an always-200 or external page) FIXED: redirects never followed, witnessed as-is — same-origin 302→/down(503), cross-origin 302→second-port /ok(200), external-shaped 302, redirect loop, and 302→302→503 chain all record status=302 only with destination hit counts unchanged (0→0). D3 (LOW — self-report refusal was an exact-key denylist and declared schemas were never enforced) FIXED: 19 variant shapes across all read/probe tools (uptime_pct, Uptime, UPTIME, selfReportedUptime, sla_pct, nested {meta:{uptime:…}}, unknown keys, register-time and nested-in-list forms) all refused cleanly, zero influence (availability exactly 0.5, receipt_count 2, badge unchanged). Regression spot-checks PASS: badge ladder 19×200+1×503 → availability 0.95 → UP; chain tamper on a store copy (seq-3 field edit) → valid=false, tampered_seqs=[3], pristine chain valid=true checked=6. New defects: none. Known LOWs remain open as documented for LOCAL scope, non-blocking (D4: hash chain unauthenticated — forged append / tail truncation undetectable under store-write access; pin chain_head externally, call verify_chain separately. D5: vantage names free-form and list form uncapped, mitigated by vantage_mode: local-simulated stamp). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (LOCAL), 72/76 checks PASS with HIGH defects D1/D2 and LOWs D3–D6 — D1/D2/D3 (and D6 bool-as-int as a side effect) closed by this re-bench. Scope = LOCAL only: probes run only against localhost or fixture:// endpoints, external probing refused; vantage points are local-simulated probe identities, NOT geographically independent; no self-report input accepted; $299/mo is a pricing term only — no checkout/payment code.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-outwatch-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-mpp-session-witness-mcp", "name": "Eclipse MPP Session Witness MCP", "verdict": "PASS-CONDITIONAL (sandbox/fixture)", "scope": "local stdio, fixture sessions + mock relay, Moderato testnet SHAPES, no chain interaction, no live clearing, no live Meter ingest, K6 claims only", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-mpp-session-witness-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-feedforge-mcp", "name": "Eclipse Feedforge", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 1e41e3f): full prior suite 98/98 PASS, 0 FAIL (P1 11/11 · P2 14/14 · P3 6/6 · P4 3/3 · P5 55/55 · P6 6/6 · P7 3/3), defects list empty, plus expanded wrong-type fuzz 156/156 PASS on one persistent server process with a liveness ping (list_rules → 12 rules) after every vector. D1 (HIGH — the verify_feed supplied-feed path performed no type validation; five malformed feed objects raised unhandled TypeError/AttributeError and killed the server process) CLOSED: the 5 original crash vectors (list/dict catalog_id; entries:[123]; entries:\"abc\"; attributes-as-string) all return clean ToolErrors with no process death, verified in the prior suite AND verbatim in the expanded fuzz (supplied-feed deep shapes 23 vectors; 8 wrong value types × every argument of all 5 tools = 80 vectors; raw protocol attacks — non-string tool names, non-dict arguments, malformed/truncated JSON lines — server keeps answering after each). Behavior preservation PASS: fixture transform seals to feed_18337452aa65cc76 (full hash 18337452aa65cc76eb57c986e0d8f3ff58f2d6b389a09cf16df9d33cee9e94a5) over catalog cat_5820376e0fc71b86 — exactly SPEC §4.1 — and deep-equals the bench's independent recompute (85 attributes, 9 entries; CSV fixture also deep-equals + VERIFIED); spot recompute of SHOE-001/price_cents, MUG-002/availability, BAG-009/category, LAP-003/weight_grams, TEE-004/category matches feed values + explain_attribute provenance; tamper semantics preserved 9/9 (missing entries/attributes/unmapped_fields/feed_hash and partial provenance records are MISMATCH, never validation errors; untampered copies by-object and by-feed_id VERIFIED). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 93/98 — the novel mechanism itself passed without exception (byte-for-byte independent recompute of all 85 fixture attributes, provenance always resolving to the real raw source value, absent-never-invented, tamper naming on value AND provenance, determinism, complete 99-call explain sweep); the sole condition was the D1 fix + P5 re-bench, now closed. Informational carry-overs, non-blocking (unchanged from v0.1): currency tokenization is a substring match (\"100 EURO\" yields EUR; SPEC does not define tokenization — recommend SPEC v0.2 state the token rule explicitly); duplicate product ids are both kept and explain_attribute resolves a duplicated product_key to the first entry; ragged-CSV extra cells beyond the header are discarded by the csv.DictReader restkey path (no field name, nothing to report). Scope = LOCAL/fixture only: local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only — no LLM calls, no network calls; no live catalogs benched or implied; $49/mo is a pricing term for the future hosted form only — no payment/checkout/hosting code.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-feedforge-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-split-mcp", "name": "Eclipse Split", "verdict": "CERTIFIED (local, fixture)", "scope": "CERTIFIED (local, fixture) — Verity: v0.1.1 independent re-bench 35/35 PASS, 0 FAIL (REBENCH-1 of the v0.1.1 Bench Fix D1–D4 round, repo @ e213490) plus v0.1.2 Amendment #1 scoped delta-bench 94/94 PASS, 0 FAIL (repo @ 1daf662) — the CERTIFIED (local, fixture) verdict carries to v0.1.2. Delta-bench: order event default + explicit identical (partial-completion allocations 63/37 over 100 per §6 independent recompute; settlement hash recomputes with settlement_event as hash-covered sealed content; genuine order verifies VALID via stored and supplied paths); session close-out seals settlement_event {type: session_closeout, session_id, draw_count, draw_attestation_ref} exactly as specified, draw_count 4117 → exactly ONE settlement record/event, accumulated total 250 allocated exactly; required-field validation 36/36 clean typed refusals with no settlement written and a valid settle succeeding afterward; hash/producibility on event data — tamper without rehash INVALID 5/5, malformed settlement_event with fully consistent rehash INVALID 18/18, never a crash; idempotence absolute in both orders (first sealed record returned verbatim, incl. garbage repeat arguments — judged consistent with the amended spec's verbatim wording); legacy v0.1.1 compatibility — supplied and stored-path legacy records without settlement_event verify VALID as order events, stored record byte-identical afterwards (verify fabricates nothing); process safety — wrong-type + protocol fuzz all clean errors, process alive, happy path works afterward; version metadata — initialize serverInfo 0.1.2, server.json 0.1.2, exactly six tools, settle schema documents session_closeout as ONE event. Re-bench v0.1.1: D1 CLOSED (4 original death vectors → clean errors, alive, incl. fresh-process re-runs; 59 wrong-type fuzz + 9 protocol fuzz cases clean; raw NaN/Infinity weights refused; garbage non-JSON line survived; happy path works after the full battery in the same process); D2 CLOSED (crafted zero-completion/total-0/empty-allocations record, non-completer allocation, and off-by-one allocations, each with consistent re-hash → INVALID; genuine settlement VALID via stored and supplied paths); D3 CLOSED (repeat settle with total 0, a different total 999, or a string total all return the SAME sealed record); D4 CLOSED (superseded mandate recomputes clean to its own mandate_hash under independent recompute excluding lifecycle fields; weights remain hash-covered). Regression spot-checks PASS: rounding 100/3 equal → 34/33/33 byte-exact; partial-completion renormalization 63/37 per §6; amend_weights → MANDATE_SEALED. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 65/69 — defects D1–D4, all closed at v0.1.1. Scope = LOCAL/fixture only: allocation math + sealed records only — no money movement, no payment rails/wallets/payouts; fixture completion records with unkeyed SHA-256 demo seals (fix-before-live: keyed seal required before any non-fixture use); partial-completion renormalization is the documented §6 rule; the $1.00/settlement-event figure is a commercial term only — no payment/checkout/MPP network code exists in the build.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-split-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-brake-mcp", "name": "Eclipse Brake", "verdict": "CERTIFIED (LOCAL/simulator)", "scope": "CERTIFIED (LOCAL/simulator) — Verity re-bench of v0.1.1, 2026-10-26 (argus101-program-20261027/rebench-brake.md) fixed and independently verified every defect from the v0.1.0 FAIL bench (D1–D10), including both blockers — the P9b partial→HALTED forgery fails at verifier step 1 with no key, and the submit path cannot put Brake into a state its own verifier rejects — returning CONDITIONAL on a single condition C1 (ND1). Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-brake-012.md) CLOSED C1: all five close-statement strip variants (statement deleted or None, final flag kept, stripped, or double-stripped) return verified: false, error BRAKE_VERIFY_FAIL:5, step 5, downgraded: true per §6.6; honest interim and honest final (HALTED and UNPROVEN-HALT) paths verify unchanged 3/3 with no downgraded key. ND2 (per-runtime re-enrolment acts under one CLEAR) fixed and verified 3/3 with duplicate/fresh-POLLING/D8 guards holding; ND3 ACCEPTED as spec-correct (§4.5/§4.6/§6.6). No new findings. Builder suite 51/51 (fresh process); spot bench own probes 13/13. Scope never exceeds LOCAL/simulator: local policy endpoint + fixture runtime, no live fleets.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-brake-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-benchkit-mcp", "name": "Eclipse Benchkit", "verdict": "CERTIFIED (local/fixture)", "scope": "CERTIFIED (local/fixture) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-benchkit.md): CERTIFIED (local/fixture). All prior v0.1.0 FAIL defects closed and independently verified — D1 (sample predictable to vendor) and D2 (F-B14 startup/config fence absent) blockers, M1–M4 majors (seal counts unsigned, recompute unauthenticated, keys hardcoded, verifier token missing), m1–m5 minors. Builder suite 27/27 fresh process. The decisive property holds adversarially: the spot-check sample is unknowable pre-reveal from every public input probed (6,005 candidate nonces from public state matched none; caller-supplied verifier/vendor nonces refused by name, 0 manifests). Two NEW minors recorded, neither gating this scope: N1 fence-scan encoding edges (sk_live_ form, uppercase scheme, scheme-less endpoints) and N2 seed-commitment provenance (commitment first appears in the manifest at draw time; unpredictability rests on per-draw CSPRNG regardless). Scope binds exactly: vendor self-bench SDK in the Assay scorecard format with verifier spot-check sampling, against fixture vendor servers only — local/fixture scope. A spot-check receipt is a statement about a sample of one sealed scorecard, powered as stated on its face — not a house bench verdict and not a certification of any vendor server.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-benchkit-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-payseal-mcp", "name": "Eclipse Payseal", "verdict": "CERTIFIED (LOCAL/simulator, fixture triples)", "scope": "CERTIFIED (LOCAL/simulator, fixture triples) — Verity narrow re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/rebench-payseal-012.md): R-P1 (gating MAJOR from the v0.1.1 CONDITIONAL) closes clean — all four verbatim re-signed forgeries and every Verity variant that should fail now fail at check 3, and the no-over-blocking controls still pass (honest full → MATCH, honest partial → PARTIAL_DELIVERY, exact-aggregate duplicate splits, fully-delivered zero-priced line). R-P2 (a)–(e) spot-verified fixed (parsed-host locality, env scan beyond PAYSEAL_*, recursive tree scan, non-evaluate tools fenced in-process, refusal printed exactly once). Both fixer pins adjudicated spec-faithful. Builder suite 38/38 fresh process; F-P9 decisive recomputed on an independent code path (leg hashes, all 3 leg signatures, token unchanged from v0.1.1, record_hash per §4.6, Herald-fixture signature, offline verify from the §6.2 export alone → MATCH). Idempotency/metering unchanged (exactly 1 metering point per sealed evaluation; refusals meter 0). Surfaces disjoint in fresh stdio subprocesses; tool version on the wire 0.1.2. Three boundary observations recorded, none gating. Scope is exactly LOCAL/simulator, fixture triples — no live input, execution, or payment claim is licensed by this verdict.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-payseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-settleseal-mcp", "name": "Eclipse Settleseal", "verdict": "CERTIFIED (simulator, fixture records)", "scope": "CERTIFIED (simulator, fixture records) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-settleseal.md): all three blockers, both majors, and the minor from the v0.1.0 FAIL bench are fixed and independently re-proven — verify pins only the out-of-band key-store Herald key (attacker reseals and presented-key swaps all FAIL), the shipped v0.1.0 private key is burned and absent tree-wide outside keys/, and the run receipt is fully recomputed with run_id bound (rebind/window/leg tampers FAIL by named step). M1 two-leg taxonomy RATIFIED: SPEC §2.5 enum extended 8→11 with MISSING_PAYOUT / MISSING_RAIL / MISSING_LEDGER (present in exactly two legs, absent from the named leg), amendment logged in SPEC.md AMENDMENTS 2026-10-27. Builder suite 27/27 fresh process; F-S9 decisive test passed against a bench-written dataset and bench-written spec matcher (13 keys: 2 matched, 11 exceptions, 11 distinct classes) with fresh-process recompute SETTLE_VERIFY_PASS. Scope never exceeds simulator / fixture records: three-way reconciliation (mandate ledger vs rail settlement vs bank payout) over fixture records only; moves no money; no live rail/bank integration.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-settleseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-mockmint-mcp", "name": "Eclipse Mockmint", "verdict": "CERTIFIED (LOCAL/sandbox)", "scope": "CERTIFIED (LOCAL/sandbox) — Verity re-bench of v0.1.1, 2026-10-26 (argus101-program-20261027/rebench-mockmint.md): all three v0.1.0 blockers (D1 shipped private keys, D2 presenter-trusted verification, D3 detection claim exceeding measurement), majors D4–D6, and minors D7–D10 fixed and independently re-proven; builder suite 49/49 fresh process, additionally re-run 49/49 by the shipper. The verifier has a real out-of-band trust anchor (fully forged ecosystems and the shipped-key exploit shape both fail; a removed anchor refuses rather than trusting presenter material); no private key material exists in the tree outside the gitignored keys/ store; and the F-K11 detection claim matches measurement level-for-level, including the Amendment A1 boundary: single-identifying-field detection (mint_id / artifact_id / mockmint_ ref resolving against the ledger export) is SYNTHETIC_MOCKMINT, while records retaining only non-identifying fields or bare payload values are NO_WATERMARK_FOUND — detection is NOT claimed for bare payload values with every structural field removed. Scope never exceeds LOCAL/sandbox: watermarked synthetic counterparties for commerce testing; every artifact carries the §4.4 watermark; no hosted mint, no live system, no real counterparty. Four new minors (N1–N4) recorded in the re-bench, none blocking at this scope (see not_tested).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-mockmint-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-reviewseal-mcp", "name": "Eclipse Reviewseal", "verdict": "CERTIFIED (LOCAL/simulator, fixture corpus)", "scope": "CERTIFIED (LOCAL/simulator, fixture corpus) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-reviewseal.md): all 8 re-bench conditions pass on independent probes (fresh stdio processes; pack-alone verification with bench-written stdlib-only code, zero product imports). B3 decisive: chain hashes, both signatures on every record and the corpus-open record, snapshot hash and both snapshot counter-signatures all verify from pack keys alone; recomputed head hash matches; F-R12 exact unreduced rational Fraction(7,10) == snapshot 7/10. Forgery boundary confirmed: minting a BOUND_VERIFIED receipt from source + fixtures + pack alone fails (UNBOUND_RECEIPT_UNVERIFIABLE / UNBOUND) — the issuer key is exported nowhere and lives only in keys/ (mode 600, gitignored). Fence battery 15/15 + 5/5 refused by named class; malformed sweep across all 11 tools = named refusals, zero mutation; builder suite 36/36 fresh process, re-run 36/36 by the shipper. Scope binds exactly: binding, chaining, snapshot, and recompute behaviour over fixture corpus only — not any live marketplace's review integrity, and not the truth of any review's content. Two minor residual notes (n1/n2) recorded in not_tested, neither blocking at LOCAL scope.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-reviewseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-continuity-mcp", "name": "Eclipse Continuity", "verdict": "CERTIFIED (local/fixture)", "scope": "CERTIFIED (local/fixture) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-continuity-012.md), closing condition C1 from the v0.1.1 re-bench (rebench-continuity.md; original bench bench-continuity.md): the pin parser fails closed on every probe constructed (the 4 N1 shapes refuse on both tools x both anchor chains + empty chain + stdio surface, 28/28, no verdict/receipt; 51 unconsumable variants x both tools, 102/102 refuse; nested wrappers, descriptor abuse, double secret aliases, scalar/bool/None values all refuse), every supported pin shape provably binds, and N2 (stdio non-JSON line -> named JSON-RPC parse error -32700 / MALFORMED_INPUT) is fixed. No-regression spots pass (A5/A6/A7, F-C14 recomputed by independent bench code from SPEC text alone, builder suite 49/49). Scope binds exactly: signed identity-continuity chains (genesis, typed append, fork freeze, principal-only resolution, revocation, offline + prefix verification) over fixture principals/models/keys, local stdio only — no live registry or production identity claim (SPEC SS11). Refusal-vs-support ruling on its face: the spec names no pin shape, C1 allowed either branch, and refusal is the fail-closed direction.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-continuity-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-regulens-mcp", "name": "Eclipse Regulens", "verdict": "CERTIFIED (LOCAL/simulator)", "scope": "CERTIFIED (LOCAL/simulator) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-regulens-012.md), closing all three conditions (N1–N3) of the v0.1.1 re-bench (rebench-regulens.md; original bench bench-regulens.md): N1 single trust anchor closed (genuine artifacts RECOMPUTED; rotation and deletion of both keys/ files fail closed IMPACT_VERIFY_FAIL:1, never via the fixtures fallback; KEY_STORE_MISSING: at the anchor layer; issuance with keys missing refuses SIGNATURE_INVALID, no sealed output); N2 §6.2 face text verbatim at the top level of 14/14 envelope classes; N3 unhashable subscriber_ref yields named SET_VERSION_NOT_FOUND across the surface (9/9 named tools + 21-call same-class sweep, zero generic-envelope leaks). No-regression spots pass (T7 fabrication FAIL:5, T8 total fabrication FAIL:1, F-R13 P4 × S-B independently recomputed exactly with no regulens imports, 5-process determinism 1 distinct output, builder suite 47/47 with socket-denied parity). Scope binds exactly: regulation-change impact receipts mapped to the subscriber's own declared control set over fixture regulator publications, local stdio only — NO live ingestion (SPEC §10 source-terms gate unbuilt by design) and the §6.2 'not legal advice; not a compliance determination' posture applies to every receipt and envelope.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-regulens-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-scapegoat-mcp", "name": "Eclipse Scapegoat", "verdict": "CERTIFIED (local)", "scope": "CERTIFIED (local) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-scapegoat-012.md), closing the sole condition C1 (defect N1) from the v0.1.1 re-bench: proof_verify step 2 recomputes the signed proof_path_head_hash over the presented path and step 4 binds the presented path to the recomputed walk including every entry's conformance_checks — 6/6 N1 rows and 11/11 bench-devised path attacks FAIL at the named steps, honest pack PASSes, and re-pointing the head hash fails at step 1 (Herald signature over the verdict core). No-regression spots re-proven: F-S13 both branches PASS from the pack alone in a fresh process with a nonexistent state dir (no store created), B1 gating pair, byte-identical determinism (verdict_hash 9f2ee71e… across fresh processes), builder suite 53/53 fresh process and 53/53 with sockets denied. Combined with the v0.1.1 re-bench (B1–B3, M1–M4, m1–m6 verified), the product is CERTIFIED (local): local stdio, fixture record sets only, recompute verdicts only — causal evidence, NOT a legal liability determination; the SPEC §10 counsel gate (evidentiary use in real disputes) is untouched and still binding.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-scapegoat-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-sponsorline-mcp", "name": "Eclipse Sponsorline", "verdict": "PASS-CONDITIONAL (local)", "scope": "PASS-CONDITIONAL (local) — Verity bench of v0.1.0, 2026-10-27 (argus101-program-20261027/wave2/bench-sponsorline.md): builder suite 25/25 re-run from clean state; decisive fixture F-S14 independently reproduced in a fresh process from pack + pinned keys alone (payments ACTIVE with per-action 5000 / aggregate 20000 limits and window on the receipt face; publishing and contracting UNACCEPTED by derivation over the complete chain; same descriptor COVERED-BY-RECEIPT as payments, CLASS_MISMATCH as publishing and contracting); 44/44 adversarial probes (pack-smuggled keys ignored, forged signatures fail at receipt_signatures, revocation replay, presented-status substitution, receipt-face tampering, malformed-args battery with store byte-identical, cross-surface byte-identical NO_SUCH_TOOL refusals, all 6 ordered class pairs CLASS_MISMATCH, 300-op seeded fuzz). PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture sponsors/parties only, value_class \"test\" on all artifacts, fixture HMAC stand-in for the Herald pattern (no live Herald key), no counsel-gate (§10) surface built or claimed. Conditions applied at ship: C1 — the bench's library-helper condition: the internal helper behind F-S14 branch (c) is not exposed on any tool surface and is not cited standalone in this listing or the README (verifier surface is receipt_verify only); C2 — the §11.2 liability fence is carried verbatim in the README, in the full manifest of record (server.legacy.json), and in this listing (the registry server.json description is the ≤100-char short form per the registry limit). All 3 builder deviations (D1 enrolment record_type, D2 unchained PRESENTATION_NOT_FOUND refusal, D3 SPEC.md §11.4 enumeration) were ACCEPTED at bench.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-sponsorline-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-morphguard-mcp", "name": "Eclipse Morphguard", "verdict": "CERTIFIED (local, fixture payee records)", "scope": "CERTIFIED (local, fixture payee records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-morphguard.md) returned PASS-CONDITIONAL at that scope subject to conditions C-1..C-4; the spot re-bench of v0.1.1 in the same record CLOSED C-1 and confirmed C-2/C-3/C-4: builder suite 32/32 re-run from clean state; decisive fixture F-G9 independently reproduced in a fresh process from pack file + local pinned fixture keys alone (drift classes exactly [bank_id, rail], last_agreeing_seq=4, head_fingerprint == fingerprint(drifted set)); C-1 long chains verified end-to-end at 23/30/40 records (verify args >20k generic cap, within the 200k pack limit) and chain_export labels witnessed only when its embedded transcript actually verified (refusal/failed transcripts downgrade to UNWITNESSED_EXPORT); 28-check adversarial battery on the verify layer (tamper, swap, deletion, forged signatures, pack-carried keys rejected at keys_pinned, wrong/swapped pinned keys fail) and 300-step model-checked state fuzz with 0 illegal transitions. Scope is exactly: local stdio MCP, fixture payee records only, verdict to caller only (never executes payment), HMAC pinned-fixture-keys signing (fixture stand-in, not public keys), no counsel-gate (§10) live phase built or claimed. Export packs carry fixture detail tokens for recompute and are NOT value-free (C-3); drift receipts carry fingerprints + changed field classes only, never values. chain_verify proves integrity of the records presented, not completeness of history (C-4): a consistently pruned prefix verifies as that shorter chain, so callers needing completeness must pin the head fingerprint + record count out-of-band.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-morphguard-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-adproof-mcp", "name": "Eclipse Adproof", "verdict": "CERTIFIED (local/fixture)", "scope": "CERTIFIED (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-adproof.md) returned PASS-CONDITIONAL (local/fixture) subject to condition C1; the spot re-bench of v0.1.1 in the same record CLOSED C1 and F2: builder suite 26/26 re-run from clean state; bencher-written independent C1 probes — orphan bind (locally hashed real fixture claim never submitted, and an arbitrary 'a'*64 hash) refused CLAIM_NOT_SUBMITTED with no pointer, no store.json created, zero state and zero metering; the full zero-submit path never reaches PUBLISHED or VERIFY_PASS; submitted binds meter exactly once and idempotent re-binds do not double-meter; future-bound pointer at the gate refuses POINTER_BOUND_IN_FUTURE (F2, not POINTER_MISMATCH, no gate receipt). Decisive fixture F-A10 independently reproduced: VERIFY_PASS in a fresh subprocess with a new empty data dir (no store.json created — genuinely offline/stateless), and tamper classes fail at their named steps (claim word altered VERIFY_FAIL:1, Herald signature stripped VERIFY_FAIL:3, presented-digest substitution both variants VERIFY_FAIL:1). Scope is exactly: local stdio MCP, fixture claims/documents only, fixture publish pipeline, offline pointer verification from artifact+document+pointer+gate receipt+chain segment+pinned public keys; value_class 'test' on all artifacts; no advertising-claims counsel-gate (SPEC §10) live phase built or claimed. Load-bearing label (SPEC §11.1, verbatim): the pointer proves substantiation was BOUND, not that it substantiates — substantiation adequacy is the publisher's/counsel's call. F5 standing fence: RSA key generation uses the random module (Mersenne Twister), not a CSPRNG — fixture-only; CSPRNG keygen + re-bench required before any scope above fixture.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-adproof-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-feeseal-mcp", "name": "Eclipse Feeseal", "verdict": "CERTIFIED(local, fixture transactions)", "scope": "CERTIFIED(local, fixture transactions) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-feeseal.md), clean bench, NO conditions: builder suite 29/29 re-run clean by bencher; decisive fixture F-F9 independently reproduced in fresh processes — batch spanning the v1 (250 bps) to v2 (300 bps) succession boundary recomputes exactly, including OVERCHARGE +70 (charged 350 vs v1-prescribed 280); relabelling the overcharged transaction as schedule_version 2 does not move the verdict (sealed in-force v1 governs, VERSION_CLAIM_MISMATCH on the verdict's face), and an edited sealed schedule copy fails at step 1 (FEESEAL_VERIFY_FAIL:step1_schedule_seal, UNVERIFIED_EXPORT). Bencher adversarial battery 33/33: forged signatures, presented-verdict substitution, schedule-swap, 21-call malformed-args battery, refusal-must-not-mutate, key custody, metering exactness, determinism — all pass. Scope is exactly: local stdio MCP, fixture schedules + fixture transactions only, value_class 'test' on all artifacts; no real fee is charged, audited, refunded, or adjusted by Feeseal and no live marketplace is touched; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): every fee charged is sealed against the published fee-schedule version in force; overcharges against that version are detected automatically. Advisory F-2/F-3 (non-blocking, do not limit scope): signing is an HMAC fixture stand-in for Herald RS256 (disclosed; live phase would need real Herald signing + re-bench); sealed effective_to is derived, never mutated; feeseal_verify step 4 does not independently anchor prev_hash (not exploitable without the Herald key; v0.2 hardening note).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-feeseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-trueprice-mcp", "name": "Eclipse Trueprice", "verdict": "CERTIFIED(local, fixture quote/checkout pairs)", "scope": "CERTIFIED(local, fixture quote/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-trueprice.md) PASS-CONDITIONAL(local, fixture quote/checkout pairs) with conditions C1–C4, plus delta re-bench of v0.1.1 in the same record: C1, C2, C4 CLOSED at scope and C3 satisfied as scope wording (C3 persists as a scope limit, not a defect). Builder suite 35/35 at v0.1.0 and 44/44 at v0.1.1 (35 prior + 9 new TestBenchFixes011) re-run clean-state by bencher both times; decisive fixture F-T8 independently reproduced in fresh processes at both benches — quote sealed at T=2026-10-27T01:00:00Z, checkout drifting in exactly 3 named terms verified DRIFT, pack re-verified in a verifier-only subprocess from pack + pinned keys alone with drift re-derived exactly {unit_price, fees_as_stated, subscription_terms, total_all_in}. Delta re-bench independent probes 11/11 PASS with fresh bench-generated keys: stored counter-signature stripped/forged/absent-label-injected all SEAL_DEFECT with no verdict, intact MATCH; tampered stored receipt RECEIPT_UNVERIFIED and never served (idempotent re-verify also withholds it), intact served; DRIFT pack with drift_receipts dropped fails at step drift_receipt; key material nested 4 deep rejected key_material_in_pack; quote_ref drift fixture DRIFT ['quote_ref'] exactly. Scope is exactly: local stdio MCP, fixture quote/checkout pairs only, value_class 'test' on all artifacts; no live storefront, cart, payment page, price feed, or merchant system is touched, no real quote or checkout is sealed or judged, and Trueprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): quote + full terms are hash-sealed at quote time; checkout drift of any term produces a drift receipt in a Docket-grade evidence pack format — admissibility is a court's decision; Trueprice warrants the pack's recomputability, not its admission. C3 scope limit (standing): scope stays local/fixture until signing is real Herald RS256; v0.1.x verification is NOT public-key verification — the pinned key file holds a shared HMAC secret, not a public key, and any holder of it can forge seals; no RS256 / public-key / third-party-verifiability claim is licensed.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-trueprice-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-kitseal-mcp", "name": "Eclipse Kitseal", "verdict": "CERTIFIED(local, fixture loadouts)", "scope": "CERTIFIED(local, fixture loadouts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-kitseal.md) PASS-CONDITIONAL(local) with conditions C1–C2, plus delta re-bench of v0.1.1 in the same record: C1 CLOSED, C2 CLOSED at scope (local) — the v0.1.0 carve-out is LIFTED and no new findings were raised. Builder suite 34/34 at v0.1.0 and 40/40 at v0.1.1 (34 prior + 6 new TestReadPathVerifyC1C2) re-run clean-state by the bencher both times; decisive fixture F-K11 independently re-run in a fresh subprocess (pack + pinned key file only) at both benches, both branches PASS — verified:true, recomputed config_hash == loadout_status head hash 6ff16dd3…b7c6c @ seq 6, final tools [tool-alpha, tool-beta, tool-delta]; seq-3 withheld → KITSEAL_VERIFY_FAIL:gap@3, current_config:null, verified_through:2, export labelled STALE_OR_PARTIAL. Delta probes: tampered store (head result_config_hash set to deadbeef… + delta-1 Kitseal signature zeroed) → loadout_status, feed_read and the pack face all fail closed KITSEAL_VERIFY_FAIL:signature@1, state UNVERIFIED, no head hash asserted, no feed items served; deleted seq-3 record → gap@3 explicit (gaps:[3], gap_at:3), chain_complete_through=2 (verified prefix only); receipt_verify: isolated genuine seq-4 receipt → verified:false at genesis@0, gapped prefix → gap@2, tampered predecessor → signature@2, full chain → verified:true. Scope is exactly: local stdio MCP, fixture loadouts only, operator-declared fixture configurations, value_class 'test' throughout — now including loadout_status, feed_read, and pack-face head/state fields, which verify-before-serve; no real agent is sealed or streamed, Kitseal connects to no runtime, and no configuration is captured from any system; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): an agent's full tool/permission configuration is sealed and streamed; every change emits a delta receipt to subscribers (employers, insurers, auditors). Mandatory gloss (SPEC §11.3): sealed = an operator declared this configuration, in this order, at these times — recompute it yourself. Observation F4 (standing): signing is an HMAC-SHA256 fixture stand-in for the Herald pattern; symmetric fixture keys mean the operator/Kitseal key holder set is a local trust domain — consistent with (local) scope, to be revisited at any post-counsel gate.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-kitseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-shelfprice-mcp", "name": "Eclipse Shelfprice", "verdict": "CERTIFIED(local, fixture listing/checkout pairs)", "scope": "CERTIFIED(local, fixture listing/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-shelfprice.md) PASS-CONDITIONAL(local, fixture listing/checkout pairs) with conditions C1–C4 and a stored-path carve-out, plus delta re-bench of v0.1.1 in the same record (stored paths only): C1 CLOSED, C2 CLOSED, C3 CLOSED at scope — the carve-out is LIFTED and no new findings were raised. Builder suite 33/33 at v0.1.0 and 43/43 at v0.1.1 (33 prior + 10 new TestStoredPathIntegrity) re-run clean-state by the bencher both times; decisive fixture F-SP8 independently reproduced in a fresh process at both benches — seal at fixture T=2026-10-27T01:00:00Z (listing v3), checkout drifting exactly price + one fee + returns terms, pack re-verified in a verifier-only subprocess from pack + pinned fixture keys alone (fresh empty data dir, no state files written): verified True, verdict DRIFT re-derived, drifted exactly [unit_price, fees_as_stated, total_all_in, returns_terms_hash]. Delta probes 26/26 PASS: stored term_hashes rewritten to the drifted checkout's hashes and Herald signature zeroed both meet SEAL_DEFECT with no verdict issued and no record appended (the DRIFT-to-signed-MATCH laundering is dead); tampered stored verdict, backdated stored seal, forged seal_hash/2030 expiry, and tampered drift receipt all refuse SEAL_DEFECT and are never served, while intact controls serve normally on every path. Scope is exactly: local stdio MCP, fixture listing/checkout pairs only, value_class 'test' throughout — now including the online stored-read paths (checkout_verify fresh + idempotent, view_seal idempotent return, seal_status, drift_receipt_get), which recompute and signature-verify stored seals, verdicts, and receipts before serving; no live marketplace, listing page, storefront, cart, or seller system is touched, scraped, or judged, and Shelfprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): the price + terms an agent saw are sealed at view time, so view-to-checkout drift is recomputable from the buyer-held pack by the buyer. Accepted limitation F6 (on the face of the bench): a pack truncated to a prefix of the record chain verifies over the presented records only — the format has no completeness anchor; nothing presented can be forged or upgraded. C4 (standing scope condition): scope stays local/fixture until signing is real Herald RS256; no surface may describe v0.1 verification as public-key verification — 'pinned fixture keys' wording only. Verification uses pinned fixture keys only (fixture HMAC stand-in; not public-key verification); the pinned key file holds a shared HMAC secret, not a public key, any holder can forge seals, and no public-key or third-party verifiability is claimed.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-shelfprice-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-skillseal-mcp", "name": "Eclipse Skillseal", "verdict": "CERTIFIED(local, fixture claims + fixture verdict receipts)", "scope": "CERTIFIED(local, fixture claims + fixture verdict receipts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-skillseal.md) PASS-CONDITIONAL(local, fixture claims + fixture verdict receipts) with sole condition C1 (F1, stored-read assertion bypass), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture claims + fixture verdict receipts) — no new findings. Builder suite 42/42 at v0.1.0 and 48/48 at v0.1.1 (42 prior + 6 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times; decisive fixture F-S9 independently reproduced in a fresh process, socket-denied, at both benches — claim A (valid pointer) VERIFIED, claim B (no pointer) UNVERIFIED/NO_RECEIPT, claim C (pointer to A's receipt) UNVERIFIED/RECEIPT_SUBJECT_MISMATCH, identical rendered-record key shape with render_status the sole filter field, offline verify_export on A verified=True/VERIFIED_EXPORT. Delta probes 6/6 PASS: forged latest_rendered, tampered claim_record, tampered stored receipt, list-filter forgery, and cross-claim transplant of a genuine Herald-signed rendering all downgrade to the UNVERIFIED_EXPORT form only (no stored claim/receipt/rendering values served, forged strings absent), while intact controls serve VERIFIED normally. Scope is exactly: local stdio MCP, fixture claims + fixture verdict receipts only, value_class 'test' throughout — now including the stored-read paths (skillseal_claim_get, skillseal_claim_list), which recompute claim hash + publisher signature, the hash-chained record stream, stored receipt hashes + pinned bench signatures, and the latest rendering's Herald signature + receipt-face binding before serving anything; no live marketplace, router, registry, or bench system is read, polled, or written, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): a skill claim is a pointer to a bench-verdict receipt; a claim with no receipt renders as UNVERIFIED in a standard format counterparties and routers can filter on. Non-blocking bench observations F2 (receipt validation does not reject unknown extra fields — hash-covered, pinned bench signature still required) and F3 (genuine WITHDRAWN exports verify as VERIFIED_EXPORT with render_status UNVERIFIED via a dedicated verify_export branch that can only ever assert UNVERIFIED) remain open observations, untouched. Skillseal benches nothing, certifies no skill, and issues no verdicts.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-skillseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-namesake-mcp", "name": "Eclipse Namesake", "verdict": "CERTIFIED(local, fixture registry snapshot)", "scope": "CERTIFIED(local, fixture registry snapshot) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-namesake.md) PASS-CONDITIONAL(local, fixture registry snapshot) with sole condition C1 (Finding 1, stored-read paths served unverified stored verdicts), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture registry snapshot) — no new findings; Finding 2 (snapshot envelope without snapshot_ref accepted) also CLOSED. Builder suite 33/33 at v0.1.0 and 37/37 at v0.1.1 (33 prior + 4 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times, the v0.1.0 suite also under a socket-denied harness; decisive fixture F-N9 independently recomputed by the bencher with a scorer rewritten from the spec text (builder scorer NOT imported) at both benches — agent-harborlight name 0.628205 / purpose 0.6 / capability 0.666667 / composite 0.627436 → REVIEW, server top_k[0] identical, fresh-process stdio verify from artifacts alone verified:true / VERIFIED_EXPORT. Boundary pins exact at v0.1.0 bench: exact 'Payseal!' composite 0.500000 → COLLISION by exact-name override, near 'Payseel' 0.454286 → REVIEW, stem-only 'Ledger Lynx' 0.242424 → CLEAR. Delta probes ALL_C1_OK: intact control serves the sealed CLEAR verdict normally on every path (screen_list carries verified:true / VERIFIED_EXPORT); score-tamper (stored CLEAR→COLLISION, max 0.999999, hash/signature NOT recomputed) and Herald-signature-tamper (signature f*64) both downgrade on verdict_get, breakdown_get, screen_list (incl. verdict-filtered lists: COLLISION=0, CLEAR=0) and idempotent re-screen to UNVERIFIED_EXPORT / verdict_claim null / NAMESAKE_VERIFY_FAIL:, metering unchanged; a snapshot envelope without snapshot_ref now refuses SNAPSHOT_INCOMPLETE with 0 screens / 0 metering, and verify over a ref-less snapshot downgrades at step snapshot_hash. Scope is exactly: local stdio MCP, fixture registry snapshot only, scoring version namesake-score/1.0 (weights name 0.5 / purpose 0.3 / capability 0.2; thresholds REVIEW ≥ 0.40, COLLISION ≥ 0.70 plus exact-normalised-name override), value_class 'test' throughout — now including the stored-read paths (namesake_verdict_get, namesake_breakdown_get, namesake_screen_list, and the idempotent path of namesake_screen), which recompute-verify the stored screen before serving anything; no live registry is read, nothing is registered, reserved, assigned, blocked, renamed, or revoked, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): similarity scoring over registered agent identities (name, purpose, capability profile) issues a collision verdict before an agent launches under a confusing identity. Non-blocking bench observation Finding 3 (dispatch does not enforce schema additionalProperties:false — unexpected extra args are silently ignored, with no state or verdict effect observed) remains open, untouched. A Namesake verdict is a similarity screen over a stated snapshot — it is not a trademark opinion, not a legal clearance, and not permission to launch (SPEC §11.2).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-namesake-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-sourceseal-mcp", "name": "Eclipse Sourceseal", "verdict": "PASS(local)", "scope": "PASS(local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-sourceseal.md) PASS-CONDITIONAL(local) with conditions C1–C2; delta re-bench of v0.1.1 (rebench-sourceseal.md): C1+C2 CLOSED, new C3 (major, stored bundle not bound to requested answer) + C4 (minor, malformed store shapes crashed); delta re-bench round 2 of v0.1.2 (rebench2-sourceseal.md): C3+C4 CLOSED, new C5 (major, pack face/duplicated fields unbound and echoed verified on stored serve) + C6 (minor, store keys/siblings/metering unvalidated on the mutating path); delta re-bench round 3 of v0.1.3 (rebench3-sourceseal.md): C5+C6 CLOSED, C1–C6 all CLOSED, zero new findings, no new conditions — CONDITIONS CLOSED, Sourceseal — PASS(local). Builder suite re-run clean-state by the bencher at every bench: 22/22 at v0.1.0, 27/27 at v0.1.1, 34/34 at v0.1.2, 39/39 at v0.1.3; R3 independent probes: 152 in-process checks PASS / 0 FAIL plus subprocess wire/envelope/F-S9 battery PASS. Decisive fixture F-S9 independently reproduced at every bench in fresh processes from the shipped bundle + pinned keys alone, with content hashes also recomputed by bencher code straight from the raw store files: receipt_verify valid, source_reverify f1–f4 SOURCE_UNCHANGED; f1 mutated after seal → receipt chain still valid AND reverify SOURCE_CHANGED for exactly f1 (SPEC §6.4 asymmetry, both directions). PASS(local) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture stores only, value_class:\"test\" throughout, fixture HMAC Herald stand-in (pinned herald-fixture); the SPEC §10 counsel gate (live/web fetch, reliance, republication) is unbuilt, confirmed — no code path exists; no claim about any real source's truth or any answer's faithfulness. Novel mechanism (SPEC §2.1, verbatim): each answer ships with its primary-source pointer plus a retrieval receipt (fetcher, time, content hash) — provenance at the granularity of one fact. Stored serves in v0.1.3 are verify-before-serve (C1), bind-before-serve (C3), malformed-store hardened (C4), canonical constructed faces with exact key sets and no echoed injections (C5), and whole-store validated before any write (C6). Non-blocking observations F3 (source_reverify by design never checks chain/seal — it carries no verified/sealed claim and must be paired with receipt_verify), F4 (HMAC fixture stand-in; fetcher identity is a named field, not a signature, Q-S2; primary-source adjudication is fixture-declared, Q-S3), and R3 O1–O3 remain observations, no conditions. SPEC §11.2 blunt scope limit: the receipt proves a fetch of specific bytes at a time by a named fetcher — it does not prove the source was truthful, nor that the answer faithfully represents the source.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-sourceseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-promptseal-mcp", "name": "Eclipse Promptseal", "verdict": "PASS (local/fixture)", "scope": "PASS (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-promptseal.md) PASS-CONDITIONAL (local/fixture) with condition C1 (minor, stored-read: incident_link idempotent path echoed stored link before chain check); delta re-bench of v0.1.1 (rebench-promptseal.md): C1 CLOSED, new C2 (lineage binding) + C3 (incident_link idempotent pairing); delta re-bench round 2 of v0.1.2 (rebench2-promptseal.md): C2+C3 CLOSED, new C4 (serve canonicalization) + C5 (pack duplicates unbound) + C6 (whole-store validation); delta re-bench round 3 of v0.1.3 (rebench3-promptseal.md): C4+C5+C6 CLOSED, C1–C6 all CLOSED, no new conditions — CONDITIONS CLOSED, Promptseal — PASS (local/fixture). Builder suite re-run by bencher at every bench: 27/27 at v0.1.0, 30/30 at v0.1.1, 36/36 at v0.1.2, 49/49 at v0.1.3; R3 independent probes: 102/102 checks + 31/31 C6 probes PASS. Decisive fixture F-PS13 independently reproduced: pack written to file, trace_verify in fresh subprocess with empty data dir verified:true, prompt_hash + approver_ref + version_record_hash equal receipt face values, prompt_hash=sha256(body) recomputed. PASS (local/fixture) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: seal chain + Herald approval binding + incident traceability over fixture prompts/deployments/incidents ONLY; NOT production prompts, real deployments, or runtime attestation (SPEC §11.2 — the chain proves which prompt version was sealed and who approved it, and that a fixture deployment's binding named it; it does not prove the sealed prompt is what actually ran in any live process); dispute use is SPEC §10.1 counsel-gated and UNBUILT — no production ingest, deployment connector, or runtime hook exists. Novel mechanism (SPEC §2.1, verbatim): production system prompts are sealed and versioned; every runtime incident can be traced to the exact prompt version and its approver. Stored serves in v0.1.3 are canonical (exact per-type field sets, injected counter_signature/unknown fields are chain defects), pack duplicates are bound exactly to chain copies, and the whole store is validated at load on every path. Non-blocking observations O1 (lineage_status lists state:APPROVED under chain_ok:false, disclosed in-band, not an export/receipt) and O2/R3 observations remain observations, no conditions. Fixture Herald key is a test double (pinned herald-fixture, keys/ gitignored mode 600); Promptseal consumes Herald-signed approval records, issues none, redefines none; value_class:\"test\" throughout.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-promptseal-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-faircharge-mcp", "name": "Eclipse Faircharge", "verdict": "PASS (local, fixture charge streams + sealed authorizations)", "scope": "PASS (local, fixture charge streams + sealed authorizations) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-faircharge.md) PASS-CONDITIONAL (local, fixture charge streams + sealed authorizations) with conditions C1–C7 plus spec-hygiene condition C0 (spec §2.2.2 formula sentence contradicted fixtures F-FC4/F-FC8; Verity ruled the fixture/defining-test reading governs and the shipped behaviour IS the fixture's; §2.2.2 + §6.4 step-3 amended to it); fix round v0.1.1 closed C0–C7; delta re-bench of v0.1.1 (rebench-faircharge.md) and round 2 of v0.1.2 (rebench2-faircharge.md) raised D1–D6 and E1–E4; delta re-bench round 3 of v0.1.3 (rebench3-faircharge.md): E1 (pack face binding) + E2 (anomaly gate coverage) + E3 (envelope) + E4 (whole-store validation) CLOSED, C0–C7 and D1–D6 hold under serialized re-runs and full-strength frontier sweeps — CONDITIONS CLOSED, Faircharge — PASS (local, fixture charge streams + sealed authorizations). Builder suite re-run by the bencher at every bench: 18/18 at v0.1.0, 44/44 at v0.1.3 (38 prior + 6 round-3 fixes); R3 independent probes: 213 PASS / 1 probe-bug FAIL, standalone re-run PASS = 214/214 effective serialized checks. Decisive fixture F-FC8 independently reproduced at every bench: counter-signed seal (both thresholds pinned minor-only, scheduled step 1050@idx4), charges [1000,1030,1090,1050,1090,1095,1200] → exact sequence WITHIN, WITHIN, CREEP_PER_CHARGE, WITHIN, WITHIN, CREEP_CUMULATIVE, CREEP_BOTH; serialized pack verifies in a fresh process from pack + pinned public keys alone. PASS (local, fixture charge streams + sealed authorizations) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: local, fixture charge streams + sealed authorizations only; no live merchant, card network, bank feed, billing system, or real charge is touched; no real consumer financial data enters any fixture; value_class:\"test\" throughout. SPEC §11.2 measurement-not-breach fence: Faircharge measures drift against the sealed original authorization. Whether a measured increase breaches the merchant's terms or any law is a contract/legal question for Docket/counsel — Faircharge makes no breach, overcharge, or misconduct finding. A CREEP verdict is a measurement, not an accusation and not a breach finding; WITHIN_TERMS means only that the stream measured within its own sealed thresholds (or that a dimension was unpinned, labelled on the face — §6.3 no-verdict-laundering). The SPEC §10.1 counsel gates are UNBUILT, named in not_tested. Novel mechanism (SPEC §2.1, verbatim): creep is detected against the sealed price history from the original authorization, so a merchant's gradual increases are measured against proof, not memory. Stored serves in v0.1.3 are verify-before-serve (receipts hash/signature-gated, C3), the canonical measurement pack binds all 15 face fields exactly (E1, verifier_transcript dropped), the anomaly queue gates every store-consuming surface (E2), the stdio envelope survives non-object requests (E3), and mutators whole-store-validate before any write (E4). Non-blocking hygiene note F1 stands, verbatim class: container-level foreign keys undetected + re-persisted (never served, no verdict impact) (full text in not_tested).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-faircharge-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-timecapsule-mcp", "name": "Eclipse Timecapsule", "verdict": "CERTIFIED (local/simulator, public seal registry over fixture commitments, value_class \"test\")", "scope": "CERTIFIED (local/simulator, public seal registry over fixture commitments, value_class \"test\") — CERTIFIED — Eclipse Timecapsule v0.1.4, local/simulator scope only: public seal registry over fixture commitments, value_class \"test\". No certification claimed beyond this scope. Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-timecapsule.md) PASS-CONDITIONAL (local/simulator, public seal registry over fixture commitments) with conditions C1–C8; fix rounds v0.1.1–v0.1.3 closed C1–C8, D1–D5 and N1–N3; delta re-bench round 4 of v0.1.4 (rebench4-timecapsule.md): R1 (aux anchor signature-null bypass) CLOSED, remaining conditions NONE, builder suite 69/69 re-run by the bencher, independent harness 72/72 checks PASS, regression spot probes confirm C/D classes stay closed — CERTIFIED at exactly this scope. Decisive fixture F-T10 independently reproduced at the bench: from the registry export + pinned public keys alone, an author's complete track record recomputes (8 seals, gapless author_seq, head counts exact, tallies identical) and a cherry-picked presentation of only the winners fails step 5, naming the missing author_seq values. Scope is exactly: local/simulator, public seal registry over fixture commitments, value_class \"test\"; fixture cryptography only (1024-bit fixture RSA, fixture keys, fixture clock); no live prediction, real SLA, real outcome feed, or public registry deployment exists in v0.1.4. Gates remain unbuilt by design and are OUT of certified scope: no public hosting, no outcome feed, no SLA enforcement, no charge path, no network. Score ≠ merit (SPEC §10.3): a track record establishes only that stated commitments were sealed before their windows and scored under their pinned rules over presented outcomes — whether the commitments were hard, the outcomes true, or the author skilled is outside what the recomputation shows. Novel mechanism (SPEC §2.1, verbatim): predictions and SLA commitments are sealed publicly before the outcome window and scored at maturity — a track record that cannot be backdated or cherry-picked. Stored serves are verify-before-serve / downgrade-labelled (C5), aux stores (metering + anomalies) are Herald-anchored with entry-by-entry validation (C6 + R1), and every anchor-consulting surface fails closed as STORE_DEFECT / AUX_ANCHOR_DEFECT on a signature-defective aux anchor with zero writes.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-timecapsule-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-burnline-mcp", "name": "Eclipse Burnline", "verdict": "CERTIFIED (local/simulator)", "scope": "CERTIFIED (local/simulator) — CERTIFIED — Eclipse Burnline v0.1.5, local/simulator scope only: fixture spend streams, fixture Till mandates, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only. No certification claimed beyond this scope. Final verdict wording (Verity delta re-bench round 5, rebench5-burnline.md, verbatim): CERTIFIED (local/simulator) — v0.1.5. C1+C2 closed in v0.1.1, C3 in v0.1.2, C4 in v0.1.3, C5+C6+O2 in v0.1.4, C7+O3 in v0.1.5; no remaining conditions. Scope: fixture spend streams, fixture Till mandates, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only. Nothing certifies live budget enforcement (§10 counsel gate, unbuilt), real Herald/Meter/Till interop, or that a verdict stops spend. Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-burnline.md) PASS-CONDITIONAL with conditions C1–C7; fix rounds v0.1.1–v0.1.5 closed C1–C7 + O2 + O3; delta re-bench round 5 of v0.1.5: C7 CLOSED, O3 CLOSED, C1–C6 not reopened, remaining conditions NONE, builder suite 53/53 re-run by the bencher, independent probes 113 assertions — CERTIFIED at exactly this scope. Decisive fixture F-BU14 independently reproduced at every bench (fresh process, empty data dir): exported ladder pack verifies true and the ABORT verdict sits at exactly the first head where the pinned burnline-linear/1.0 projection crossed the abort threshold, cumulative burn 3100 < cap 10000, byte-identical on rerun. Scope is exactly: local/simulator, fixture spend streams + sealed fixture Till mandates only, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only; value_class \"test\" on every artifact; exact rational arithmetic, ceiling rounding, no floats in signed objects. Burnline issues verdicts only — it holds no spend authority, blocks no transaction itself, and moves no money; nothing certifies that a verdict stops spend (enforcement is the consuming runtime's act, and a runtime that ignores a verdict is recorded as VERDICT_UNACKNOWLEDGED). Two limits stated wherever the mechanism is described: (a) intervention is possible only when the trajectory crosses a threshold before the cap — a single record can jump the cap with no prior intervention possible (F-BU8, NO_PRIOR_INTERVENTION_POSSIBLE); (b) the projection is the pinned model's arithmetic over the records presented, not a prediction about any real system's future spend; the model is never a learned model. Novel mechanism (SPEC §2.1, verbatim): burn-trajectory forecasting over sealed budget mandates intervenes before breach — throttle, escalate, or abort — and the intervention itself is receipted. Stored serves and every mint path verify before serving/minting (C1–C7 closures): chain, burn, receipts, acks and the recomputed defect set are recomputed from source data; store containers (root, stream, metering, refusal entries) carry exact key sets — foreign keys are detected and refused, never silently re-persisted (O3); a tampered store yields a named BURNLINE_VERIFY_FAIL refusal or a downgraded pack, never the stored assertion and never a signed close over unverified bytes.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-burnline-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-shelfspace-mcp", "name": "Eclipse Shelfspace", "verdict": "PASS-CONDITIONAL (local, fixture placement records)", "scope": "PASS-CONDITIONAL (local, fixture placement records) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-shelfspace.md): all six re-bench conditions F1'–F6' CLOSED; F2' snapshot-rollback residual adjudicated acceptable-at-scope under condition 1; closed round-1 items (cond.2/3/4, F-H14) spot-checked, none reopened; builder suite 52/52 re-run by the bencher plus ~200 independent serialized probes. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local, fixture placement records, under the local single-operator file model; local stdio MCP, fixture placements only, value_class \"test\" on all artifacts, fixture HMAC stand-in for the Herald pattern, no counsel-gate (§10) surface built or claimed. CONDITION 1 (the sole condition, carried verbatim): Scope/fence condition (from F2' residual): certification holds only at scope local, fixture placement records under the local single-operator file model. The README rollback-residual honesty fence and scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside the data-dir trust model + fresh bench (the existing counsel gate for live use stands separately). Decisive fixture F-H14 stands from the bench record: plc-paid-1 SURFACED with proof buying_agent_ref/disclosure_marker bound, plc-paid-2 derives UNMARKED-PAID / UNMARKED_PAID_NO_RECEIPT, fresh verify PASS with eval bound to the signed statement.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-shelfspace-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-safelist-mcp", "name": "Eclipse Safelist", "verdict": "CERTIFIED (local, fixture feed entries)", "scope": "CERTIFIED (local, fixture feed entries) — Verity spot re-bench 3 of v0.1.3, 2026-10-27 (argus101-program-20261027/wave2/rebench3-safelist.md): R4-D2 CLOSED, conditions NONE; builder suite 50/50 re-run twice by the bencher, independent probes 23/23 + 93/93 behavioral (14-field transcript sweep) + 11/11 (verdict/transcript mismatch edges + regression spot). Scope is exactly: local, fixture feed entries — local stdio, fixture services/receipts only, value_class \"test\" throughout, no live listing/routing/reliance/bench-sale path; counsel gate (§10) unbuilt by design. Decisive fixture F-L13 stands from the bench record: pack alone ACTIVE@T0+3599, EXPIRED@T0+3600, EXPIRED@T0+7200; backdated receipt (bench_ts=T0+3500, presented now=T0+7200) → REBENCH_LATE.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-safelist-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-muzzle-mcp", "name": "Eclipse Muzzle", "verdict": "PASS-CONDITIONAL (local/fixture)", "scope": "PASS-CONDITIONAL (local/fixture) — Verity reduced-scope bench of v0.1.3, ruleset muzzle-rules/0.4, 2026-10-27 (argus101-program-20261027/ruling-muzzle-reduced-scope.md), secrets and PII limbs ONLY: fresh bench-authored corpus (36 items, disjoint in values/shapes/phrasing from all repo fixtures and both prior Verity corpora), all rates computed from signed receipts after every receipt was independently re-verified — secrets 100% recall / 100% precision (13/13, 0 FP), PII 100% recall / 100% precision (13/13, 0 FP; spec thresholds ≥95% / ≥90%), benign controls 10/10 unflagged, verdict agreement 36/36; tamper battery, redaction invariant (zero raw-value escapes over corpus + canary sweeps), downgrade law, fail-closed fence (7/7), and exact 6-tool surface all PASS. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Sole condition: the ruling §9 authorised claim block ships verbatim on every claim surface (README, this listing, server.legacy.json full manifest); the registry server.json description is the ≤100-char registry short form carrying the §11.1 sentence verbatim and claiming only secrets + PII. This release does not scan for defamation-risk: defamation-risk detection is excluded from the certified scope of this version, and a PASS verdict is not evidence about defamation. Defamation detection is not included in v0.1 — parked for a v0.2 redesign.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-muzzle-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-sandclock-mcp", "name": "Eclipse Sandclock", "verdict": "PASS-CONDITIONAL (local)", "scope": "PASS-CONDITIONAL (local) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-sandclock.md): F1–F4 closed (store set-anchor / key-binding / mint-signing / envelope findings), F1 whole-file residual adjudicated acceptable-at-scope under condition 1; builder suite 50/50, independent probes 55/55; closed F1–F6 first-pass items spot-checked — none reopened. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local (fixture scorecards + fixture drift evidence only, value_class \"test\") under the local single-file / single-operator store model — local stdio MCP (SPEC §0.1); no live model/tool observation, no eval run, no score issued; the counsel-gated live phase (SPEC §10.2) remains unbuilt and separately gated. Condition 1 (verbatim): certification holds only at scope local (fixture scorecards + fixture drift evidence only, value_class:\"test\") under the local single-file / single-operator store model. The README whole-file-rollback residual fence + scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside store.json (e.g. receipt-held head hash / external append-only log) + fresh bench; the counsel-gated live phase (spec §10.2) remains unbuilt and separately gated.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-sandclock-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-archivist-mcp", "name": "Eclipse Archivist", "verdict": "PASS-CONDITIONAL (local, fixture captures)", "scope": "PASS-CONDITIONAL (local, fixture captures) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-archivist.md): R1–R8 all closed (cross-artifact store head / signed bundle-set anchor / sealed metering / record_id binding / exact pack face / structured whole-store garbage / missing-key zero-write / sealed-snapshot defect findings), no closed F1–F6 item reopened; builder suite 36/36 plain + socket-denied, independent probes 135 serialized assertions; the one residual (full coordinated snapshot restore) adjudicated a documented condition, fence present and accurate on README + every pack + server.json. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local, fixture captures only (fixture page content, fixture headers, fixture TLS material, value_class \"test\") under the local single-file / single-operator store model — local stdio MCP (SPEC §0.1); no live web capture exists in v0.1: no fetcher, no network client, no real page, certificate, or server is touched. Condition 1 (verbatim): Rollback residual (R1c): a full coordinated restore of all local artifacts to one consistent earlier snapshot is undetectable in the local file model — fenced verbatim on README + every pack (rollback_fence) + server.json. External anchor required before any live or multi-party use/claim. Condition 2 (verbatim): §10 counsel-gated phases remain unbuilt and unclaimed; any claim at those scopes requires counsel clearance + scope edit + re-bench (§10.2).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-archivist-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-allowance-mcp", "name": "Eclipse Allowance", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "PASS-CONDITIONAL (local/simulator) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-allowance.md): R1–R7 all CLOSED on fresh repros (per-mandate chains + Tier-M/Tier-G isolation; sealed metering; fail-closed holder-signature verify; exact seal field sets; monotonic amendments; structured store-defect faces with zero raw exceptions; subset restores detected), R7 full-restore residual adjudicated as fenced (condition, not fail), regression spot PASS (F-A13 decisive fresh-process recompute; F8 §7.4 split key custody re-verified); builder suite 44/44 PASS x2 clean runs, independent probes ~110 checks. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local/simulator only, fixture family mandates only (fixture holders, members, agents, merchants, categories and spends, value_class \"test\"), local stdio MCP (SPEC §0.1); no real money, no payment rail, no merchant, bank, or household account is connected in v0.1.2, and Allowance moves no money even in simulation — it checks and records fixture spends. Condition 1 (verbatim): R8 — cross-mandate transplant id↔hash pairing is detected only indirectly (transplanted record never served/counted/exported); Tier-G structural check or README fence stands as the condition. Bench condition text (verbatim): R8: add the id↔hash pairing to the structural/Tier-G check (an entry whose `mandate_id` and `mandate_hash` name different mandates defects the store on every path, incl. target-mandate spend), or fence the pairing class in the README integrity section. Condition 2 (verbatim): O1 — ledger_get VERIFIED slice-export vs downgraded faces on a Tier-G-defected store (documented slice semantics; no false data). Bench condition text (verbatim): O1: make `ledger_get` downgrade when Tier-G defect exists outside the served slice, or document the slice-only semantics on the export face.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-allowance-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-receiptvault-mcp", "name": "Eclipse Receiptvault", "verdict": "CERTIFIED (local, fixture sealed merchant terms + fixture purchase records)", "scope": "CERTIFIED (local, fixture sealed merchant terms + fixture purchase records) — Verity delta re-probe (re-bench 3) of v0.1.3, 2026-10-27 (argus101-program-20261027/wave2/rebench3-receiptvault.md): RB-F9 CLOSED on fresh repros (dangling/repointed purchase index and deleted-field entries defect as SEAL_DEFECT on every surface, no raw KeyError anywhere, stdio process survives, zero writes on defect paths), RB-F1–RB-F8 closed at re-bench 2 and not reopened, regression spot PASS (F-RV9 decisive fresh-process recompute holds; full-export head-anchor/record-count drops fail verification); builder suite 66/66 PASS plus socket-denied 66/66, bencher battery 130/130 PASS. Scope is exactly: local, fixture sealed merchant terms + fixture purchase records — local stdio MCP (SPEC §0.1), fixture purchases, merchants, terms, seals, holiday calendars, clock and alert sink only, every artifact value_class \"test\"; no live merchant, storefront, receipt inbox, terms page, or notification channel is touched in v0.1.3 and no real purchase or terms are vaulted. Standing condition (verbatim): full coordinated local snapshot restore is undetectable in the local model — fenced verbatim in README + server.json; an external anchor (witnessed/countersigned head hash outside the local store) is REQUIRED before any live or multi-party use.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-receiptvault-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect-gemini-mcp", "name": "Eclipse Connect for Gemini", "verdict": "PASS-CONDITIONAL (hosted/staging)", "scope": "PASS-CONDITIONAL (hosted/staging) — Verity delta re-bench, 2026-10-27 (llm-connectors-20261027/bench-gemini.md): adapter 0.1.1 on core 0.1.2; staging conditions C1/C2/C4 CLEARED. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Sole surviving condition (LIVE-GATE): hosted enrolment must implement a real restriction/tier probe before any live enrolment.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-connect-gemini-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect-anthropic-mcp", "name": "Eclipse Connect for Anthropic", "verdict": "PASS-CONDITIONAL (hosted/staging)", "scope": "PASS-CONDITIONAL (hosted/staging) — Verity delta re-bench 2, 2026-10-27 (llm-connectors-20261027/bench-anthropic.md): adapter 0.1.2 on core 0.1.2; ANTH-D1–D4 all CLEARED. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Surviving conditions are LIVE-GATE items only: (1) per-model cache-read multiplier refresh from Anthropic's published pricing before live enrolment; (2) unbroken-cache confirmation against a recorded real response shape at the live gate.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-connect-anthropic-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-connect-groq-mcp", "name": "Eclipse Connect for Groq", "verdict": "PASS (hosted/staging)", "scope": "PASS (hosted/staging) — Verity delta re-bench, 2026-10-27 (llm-connectors-20261027/bench-groq.md): adapter 0.1.1 on core 0.1.2 (regression on core 0.1.2 PASS in bench-anthropic.md delta re-bench 2); conditions C1–C4 all CLEARED, no surviving conditions. PASS is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Catalogue is exactly openai/gpt-oss-120b, openai/gpt-oss-20b and qwen/qwen3.8-27b (PREVIEW) — the gpt-oss route, never 'all open weights'. Groq is a trademark of Groq LLC and/or its affiliates. Eclipse Connect for Groq is not affiliated with or endorsed by Groq LLC.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-connect-groq-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-scamshield-mcp", "name": "Eclipse Scamshield", "verdict": "PASS-CONDITIONAL (local/simulator, fixture risk sources + fixture payee history)", "scope": "PASS-CONDITIONAL (local/simulator, fixture risk sources + fixture payee history) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-scamshield.md): RB-F1–RB-F8 all CLOSED on fresh repros (genuine-export anchor/count binding; key preflight with byte-identical disk on KEY_MISSING; structured stdio envelope; exact nested field sets with no raw exceptions; source-intent-history injection downgrades at the exact named verify step; temporal-order gates; subset restores detected via the retained store_head.json cross-artifact commitment; duplicate sources refused), RB-F7 coordinated-restore residual adjudicated as a fenced CONDITION (not a fail), regression spot PASS (F-SS9 decisive fresh-process recompute; ack same-briefing binding; closed originals not reopened); builder suite 53/53 PASS x3 by the bencher, ~120 independent probe checks. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local/simulator, fixture risk sources + fixture payee history — local stdio MCP (SPEC §0.1), fixture payment intents, payees, histories, fraud reports, continuity chains, lookalike findings, users and keys only, every artifact value_class \"test\"; no live payment, payee, fraud database, domain registry, or user is touched in v0.1.2, and Scamshield scores, blocks, releases, or executes no payment and certifies no payee. Condition 1 (verbatim): RB-F7 residual (fenced): a full coordinated restore of every local artifact (store.json, store_head.json, and any backups) is undetectable in the pure local model and is NOT claimed detected; detection requires an external anchor outside this local store. The fence must remain verbatim on README + status/list/anomaly/verify/briefing_get/check faces in any future version claiming this certification. Condition 2 (verbatim): Certification extends only to the scope above; any live phase remains behind the §10 counsel gate and requires a separate re-benched build.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-scamshield-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-holdfast-mcp", "name": "Eclipse Holdfast", "verdict": "PASS-CONDITIONAL(simulator, fixture escrow ledger)", "scope": "PASS-CONDITIONAL(simulator, fixture escrow ledger) — Verity bench of v0.1.0, 2026-10-27 (argus101-program-20261027/wave3/bench-holdfast.md): builder suite 34/34 re-run clean by bencher; decisive fixture F-H9 independently re-derived in both runs from bencher corpus + bencher keys; bencher adversarial battery 60/60 (recompute-in-verify, signed head + SET anchors, signed-records-only derived state, exact face/field sets, whole-store validation pre-write, consume-or-refuse partition with byte-identical store on every refusal, counter-signatures on every path, fail-closed verify on missing key, temporal monotonicity, crash-proof envelopes, F-H2/F-H5/F-H6 state battery, F-H3 expiry return, amount discipline, no-click law with 13 forbidden verbs absent, dispute handoff, labels on 100% of artifacts). Defects: none. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture escrow ledger only, value_class \"test\" on every artifact and simulated: true on every ledger artifact; no real funds are held, moved, released, or owed, and no custody in any form exists in v0.1.0. Condition C-1: external anchor required before live/multi-party use — coordinated rollback across artifacts is not claimed by this local build. Condition C-2: SETTLEMENT_BPS = 50 requires price-book/owner ratification before priced reliance (SPEC states no numeric figure — §9.1 shape only, §9.2 defers to price book; the 50 bps component is disclosed and NEVER collected in this scope, collected:false on every metering record).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-holdfast-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-voiceprint-mcp", "name": "Eclipse Voiceprint", "verdict": "PASS-CONDITIONAL(local, fixture call records)", "scope": "PASS-CONDITIONAL(local, fixture call records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-voiceprint.md): builder suite 32/32 re-run clean by bencher; decisive fixture F-V14 independently reproduced on all three branches from the exported pack + pinned keys alone in a fresh process; bencher battery 82/82 after 3 probe-artifact corrections (F-1) — swap/drift exactness (drift never returned as SWAP_DETECTED; binary-exact 0.25 at threshold CONTINUOUS, 0.375 SUSPECT), claim-surface audit (narrowed claim verbatim on README/server.json/statements/verify results; forbidden §11.4 strings zero hits outside SPEC's own enumeration), 14-point delta law, refusal/gap battery, tamper battery (downgrade-never-upgrade on every path), metering exactness, disjoint surfaces, §7.3 fence, privacy fence (no audio capture/playback, telephony, speech, or biometric code path in the tree). Sole condition C1 (verbatim): external anchor required before live/multi-party use (cross-artifact coordinated rollback fenced; local SET anchor binds head + record_count within one pack only). Advisories F-2/F-3/F-4 (non-blocking, disclosed): fixture feature vectors are retained in attestation objects carried in the pack (token artifacts store the hash only; accepted at fixture scope, re-bench required for any real feature data); the §11.2 legend's '(§3.5)' parenthetical appears in README only; token_verify accepts a sealed token's SUSPECT_FEATURE_DRIFT on its identifier aspect only (full drift recompute lives in chain_verify). Scope is exactly: local stdio MCP, fixture call-record metadata only, value_class 'test' on all artifacts; no real audio is captured, processed, or stored, no human speaker is identified, and no live call platform is touched. Novel mechanism (SPEC §2.1, verbatim): per-call continuity tokens seal the speaker model + voice fingerprint, so a voice agent cannot silently swap voices mid-relationship.. Narrowed claim (verbatim): The 'cannot silently swap' claim is provable only at identifier granularity: a swap is proven only by a change in the attested model_id/voice_id (or a chain break); same-model re-voicing behind unchanged identifiers is not detectable.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-voiceprint-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-understudy-mcp", "name": "Eclipse Understudy", "verdict": "PASS-CONDITIONAL(local, subset proof over Till-grammar fixture mandates)", "scope": "PASS-CONDITIONAL(local, subset proof over Till-grammar fixture mandates) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-understudy.md): builder suite 34/34 re-run clean by bencher; decisive fixture F-U9 independently reproduced (bencher corpus, bencher keys, black-box stdio) — STRICT_ATTENUATION with face vector and subset_proof equal to bencher recomputation, full chain recomputed from the §6.2 export alone, and fresh-process empty-data-dir verify → VERIFIED_EXPORT / STRICT_ATTENUATION re-derived; all 8 F-U5 single-dimension widenings NOT_SUBSET with named codes and fresh-process recompute; 9-field absence totality, §5.3 refusal partition, verify/tamper/downgrade battery, metering exactness, and malformed battery all pass (bencher battery 99 checks). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture mandate pairs only, value_class 'test'; Understudy issues no mandates, grants no authority, registers no agents, and executes no delegated action. Sole condition (verbatim): Cross-artifact cross-commitment note: full coordinated rollback across separately held artifacts is a fenced condition — external anchor required before live/multi-party use. Advisory F-2/F-3 (non-blocking, v0.2 hardening notes): chain-hop hash continuity (chain_verify binds hops by mandate_id, not hash/citation) and offline verify temporal re-check (verify step 2 does not re-run write-time predates/expiry-at-issuance checks; prove, the sole mint path, refuses both).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-understudy-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-genesis-mcp", "name": "Eclipse Genesis", "verdict": "PASS-CONDITIONAL(local/fixture)", "scope": "PASS-CONDITIONAL(local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-genesis.md): builder suite 43/43 re-run clean by the bencher; decisive fixture F-G13 independently re-derived from the bencher's own corpus and bencher-generated keys — registration agent_ref matched the bencher-predicted mint, exported certificate / seed prev_hash / creator + witness signatures / export head anchor all recompute under bencher code, fresh-process verify from export + pinned keys alone returned SEAL_VALID, and detection over the bencher's 5 actions reproduced exactly [IN_PURPOSE, IN_PURPOSE, IN_PURPOSE, OUT_OF_PURPOSE, INDETERMINATE] with the out-of-purpose record naming clause action_types and the indeterminate record naming reason unmapped, never coerced. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this scope is claimed. Scope is exactly: local stdio, fixture agents/creators/keys, fixture Docket/Meter-grammar action records, value_class \"test\"; no live registry, no third-party reliance, no enforcement use. Sole condition (verbatim): cross-artifact cross-commitment — full coordinated rollback = fenced condition — external anchor required before live/multi-party use. Genesis detects, it never blocks: no blocking/enforcement verb exists on either surface (dispatch enumeration by the bencher).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-genesis-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-slowpay-mcp", "name": "Eclipse Slowpay", "verdict": "PASS-CONDITIONAL(simulator, fixture schedules + witnessed-change feed)", "scope": "PASS-CONDITIONAL(simulator, fixture schedules + witnessed-change feed) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-slowpay.md): builder suite 42/42 re-run clean by bencher; bencher black-box suite 82/82; decisive fixture F-S9 independently reproduced in both runs (genuine witnessed price drift 4321→4400 freezes in the presenting evaluation, held due event never back-processed, fresh-process verify from export + pinned keys alone returns verified: true / ACTIVE after buyer re-attestation; the one-character altered copy 4400→4409 returns RECEIPT_HASH_MISMATCH, no freeze record, schedule remains ACTIVE). No defects found. Sole condition C-1: cross-artifact cross-commitment is the local per-schedule hash chain + export SET anchors only; full coordinated rollback not provided — external anchor required before live/multi-party use (bench text: cross-artifact cross-commitment in v0.1 is the local per-schedule hash chain plus the export's SET anchors only; full coordinated rollback across artifacts is not provided — external anchor required before live/multi-party use). No live or multi-party use is licensed until that anchor exists and the build is re-benched. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture schedules + fixture witnessed-change feed only, value_class 'test' on all artifacts, due records simulated notes (simulated: true); no payment is executed, initiated, or held, and no live feed, mandate issuance, or witness product is touched. Novel mechanism (SPEC §2.1, verbatim): any witnessed counterparty behavior change (price drift, endpoint change, ownership change) automatically freezes the schedule until re-attestation. Advisories A-1/A-2 (non-blocking bench notes, do not limit the verdict at the stated scope): A-1 — status/list EXPIRED overlay also applies to a DRAFT schedule past mandate expiry (display-only; no transition or write; sealing against an expired mandate is refused); A-2 — in a store already containing Herald-signed freeze records, removing the Herald key surfaces as CHAIN_BROKEN (whole-store validation) rather than the mint-specific error, with the isolated clean-store probe confirming the mint gate itself (structured error, zero writes, schedule stays ACTIVE). Signing is an HMAC fixture stand-in for Herald RS256 (disclosed on every signed face as 'herald-fixture (fixture HMAC stand-in)'); a live phase would need real Herald signing and a re-bench.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-slowpay-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-layaway-mcp", "name": "Eclipse Layaway", "verdict": "PASS-CONDITIONAL(simulator)", "scope": "PASS-CONDITIONAL(simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-layaway.md): builder suite 33/33 re-run clean by bencher; decisive fixture F-L13 re-derived from the bencher's own corpus (bencher battery 90/90) — execution at exactly the coincidence tick and no other, both witnesses recomputed fresh-process two ways. PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture goal-balance ledger + fixture witnessed prices, value_class 'test'; execution = a mandate state transition only — nothing was bought, ordered, or paid. Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Cross-artifact cross-commitment (mandate chain + balance segment + price observation bound by hash citations in one execution record) is a fenced condition — external anchor required before live/multi-party use Advisory A-1/A-2 (non-blocking): the config fence scans all environment values fail-closed, and signing is an HMAC fixture stand-in for Herald RS256 (disclosed; live phase would need real Herald signing + re-bench).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-layaway-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-duet-mcp", "name": "Eclipse Duet", "verdict": "PASS-CONDITIONAL(local, attested model-family declarations)", "scope": "PASS-CONDITIONAL(local, attested model-family declarations) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-duet.md) + D1 spot re-bench (wave3/rebench-duet.md, D1 CLOSED): builder suite 31/31 re-run clean by bencher at bench, 32/32 after the D1 fix (the +1 is the D1 regression test); decisive fixture F-D9 independently re-derived (bencher corpus, bencher keys, black-box stdio) — seal via stdio → SEALED with face families [orion, vega], fresh process with empty data dir from export + pinned keys alone → verified: true / SEALED, and the same-family control (signer B's identity record family edited to orion, attestation hash recomputed, record re-sealed under the bencher issuer key, refs re-derived) fails at DUET_VERIFY_FAIL:step2_check4_distinctness, UNVERIFIED_EXPORT, attestation_claim: null — the diversity leg is load-bearing; bencher battery 72 checks, 71 PASS at bench (sole failure = D1, closed on re-bench). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture proposals, fixture agents and fixture identity records only, value_class 'test'; attestations only — Duet executes, authorizes, and approves nothing. Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Duet's diversity/independence proofs establish attested model families/providers and bound signatures — NOT actual running models, NOT non-collusion. Advisory O1/O2 (non-blocking): pairs carrying different family taxonomies seal (face surfaces each ref's own taxonomy; §2.4 includes no taxonomy-equality check — recorded for the live-identity phase), and signing is an HMAC fixture stand-in for Herald RS256 (disclosed).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-duet-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-crosspay-mcp", "name": "Eclipse Crosspay", "verdict": "PASS-CONDITIONAL(local/simulator, fixture FX records)", "scope": "PASS-CONDITIONAL(local/simulator, fixture FX records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-crosspay.md) + delta re-bench (argus101-program-20261027/wave3/rebench-crosspay.md, D1/D2/D3 CLOSED, C2/C3/C4 discharged): builder suite 39/39 re-run clean by bencher (34 baseline + 5 fix regressions); decisive fixture F-X9 independently re-derived from the bencher's own corpus (GBP/USD pair the builder never used) — under-cap CLEAR at spread 40 bps vs cap 100 with fx_seal == bencher-recomputed seal, over-cap twin REFUSED / SPREAD_CAP_EXCEEDED at 101 bps, both exports fresh-verify in a fresh process from export + pinned keys alone. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this scope is claimed. Scope is exactly: local stdio, fixture FX records only, pre-flight verdicts only, value_class 'test'; Crosspay never converts, settles, or moves currency and fetches no live rates. Sole remaining condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Novel mechanism (SPEC §2.1, verbatim): rate source, rate, and spread are sealed at execution, and settlement is refused pre-flight when the spread exceeds the mandate's cap — enforcement before money moves, not evidence after.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-crosspay-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-phantom-mcp", "name": "Eclipse Phantom", "verdict": "PASS-CONDITIONAL(simulator)", "scope": "PASS-CONDITIONAL(simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-phantom.md) + delta re-bench (argus101-program-20261027/wave3/rebench-phantom.md, D1 CLOSED): builder suite 35/35 re-run clean by bencher; decisive fixture F-P13 re-derived from the bencher's own corpus (24 charges, 21 matched, 3 phantom classes, freeze assembled before period close). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture charge stream + fixture mandate ledger, value_class 'test'; no real charge is reconciled and nothing is filed with or requested of any issuer. Sole condition (verbatim): full coordinated rollback = fenced condition — external anchor required before live/multi-party use. Advisories F-1/F-2 (non-blocking, spec-conformant): existence precedes verifiability in the fixed §4.3 order, and no MCP verb exists for MATCHED-receipt verify (spec §5 as written). Signing is an HMAC fixture stand-in for Herald RS256 (disclosed).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-phantom-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-capline-mcp", "name": "Eclipse Capline", "verdict": "PASS-CONDITIONAL(local)", "scope": "PASS-CONDITIONAL(local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-capline.md) + delta re-bench (argus101-program-20261027/wave3/rebench-capline.md, 45/45 checks PASS: D1 CLOSED, D2 CLOSED, D3 CLOSED, D4 accepted as documented deviation (not a defect), C4 DISCHARGED): builder suite 31/31 re-run clean by bencher at re-bench (27 original + 4 D1/D2/D3 regressions); decisive fixture F-C14 independently re-derived at bench and re-bench (see capabilities). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture policies/spends, fixture unaudited group parameters, no live merchant, no real policy proven, value_class 'test'. Conditions (verbatim-listable): C1 §10 two-key gate — counsel clearance via FinTech Law packet AND independent crypto audit, both required, no dormant live path: live phases (real enterprise policy/cap, merchant-facing reliance, production parameters/audited cryptosystem, privacy/compliance marketing claims) require BOTH (i) counsel clearance through the existing FinTech Law packet AND (ii) an independent cryptographic audit of the §2.2 construction and this implementation; neither substitutes for the other. C2 cross-artifact cross-commitment fenced — external anchor required before live/multi-party use: full coordinated cross-artifact rollback requires an external anchor before live/multi-party use; v0.1 state is single-process local, anchored only by its signed store head + hash chains (re-bench §1 demonstrated a whole-store rollback to an earlier self-consistent snapshot is accepted locally — exactly this fenced condition). C3 deterministic fixture-seed prover randomness must be replaced/audited before any live phase: deterministic fixture-seed-derived prover randomness must be replaced by a CSPRNG (or an audited deterministic derivation under production key custody) before any live phase — seed compromise recomputes every nonce and blinding factor, including the cap. C5 \"Capline\" trademark screen still pending: trademark screen on the name \"Capline\" is still pending; the name remains a placeholder. Both §11.4 disclosures, verbatim: verdict-oracle disclosure: each verdict reveals one bit of ordering information about the sealed cap (whether the stated spend is above or below it); repeated proofs against one commitment narrow the cap by binary search (spec 2.3(c)). stated-spend disclosure: the stated spend is public to the verifier (it is the merchant's own price) (spec 11.4). Novel mechanism (SPEC §2.1, verbatim): a range proof over a sealed internal policy — the agent proves 'this spend is within my cap' to a merchant without revealing the cap or the policy. Signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in, disclosed on every artifact face as signature_scheme); a live phase would need real Herald signing and a re-bench.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-capline-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-ward-mcp", "name": "Eclipse Ward", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "Eclipse Ward — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ward.md) PASS-CONDITIONAL with the guardian-change subsystem carved out under condition C1, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ward.md): defects D1–D10 all CLOSED, guardian-change carve-out LIFTED, bencher delta harness 57/57, builder suite 37/37 re-run by the bencher at commit 35b00eb. PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture action stream + fixture guardian only, value_class \"test\"; no real agent action is proposed, vetoed, executed, or stopped, and no production runtime is connected. Ward issues verdicts and receipts; it does not enforce them — enforcement is the consuming runtime's mandate layer. Rollback fence: the v0.1 store is a pure local file store, so any verdict is capped at PASS-CONDITIONAL — an external anchor is required before any live or multi-party reliance. Counsel gate (SPEC §10) named and unbuilt: live runtime reliance and any legally recognised ward/guardian use require counsel clearance first; no dormant live path exists.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-ward-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-epitaph-mcp", "name": "Eclipse Epitaph", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "Eclipse Epitaph — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-epitaph.md) PASS-CONDITIONAL with conditions C1–C4, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-epitaph.md): defects D-EPI-1..4 all CLOSED, conditions C1–C4 satisfied by the closures, builder suite 38/38 re-run by the bencher at commit 0c0b027, no new defect found. PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture identities and fixture registries only; no real identity, mandate, alias, or delegation is expired, revoked, or contacted, and no external registry is written to. A cascade receipt proves these fixture instruments expired under this signed record — never that a real agent \"is dead\", that a real compromise occurred, or that any real-world instrument is unenforceable. Rollback fence: cross-artifact cross-commitment (full coordinated rollback) is a fenced condition — external anchor required before live/multi-party use; the pure local file store caps any verdict at PASS-CONDITIONAL. Counsel gate (SPEC §10) named and unbuilt for all live phases.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-epitaph-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-ancestor-mcp", "name": "Eclipse Ancestor", "verdict": "PASS-CONDITIONAL (local)", "scope": "Eclipse Ancestor — PASS-CONDITIONAL (local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ancestor.md), + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ancestor.md: D1 + D2 CLOSED, new defect D3), + spot re-bench of v0.1.2 (argus101-program-20261027/wave4/spot-ancestor-012.md: D3 CLOSED, 22/22 binding probes, builder suite 39/39 reproduced). PASS-CONDITIONAL (local) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture chains + fixture policies only, value_class \"test\"; no real model, registry, or counterparty is contacted and no live handshake is mediated. Declaration label: ancestry is creator-declared and sealed at registration; sealing proves the declaration has not changed since registration — it does not independently prove the declared lineage. Gap-verdict condition: a verified gap verdict binds to the chain + seal + sealed head + gap kind only; it does NOT identify which link is missing or unverifiable, and must not be presented as evidence about the exact presented link set or as proof two presentations are the same copy. Rollback fence: the pure local file store caps any verdict at PASS-CONDITIONAL — an external anchor is required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-ancestor-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-trust-mcp", "name": "Eclipse Trust MCP", "verdict": "PASS(local)", "scope": "PASS(local) — Verity independent bench of v0.1.0 (2026-10-27, trust-discovery-20261027/BENCH-REPORT.md): first bench PASS-CONDITIONAL(local) with all fail-gates PASS (real Anchor batch b18e97a2 end-to-end, forged-pointer fixture, verdict fidelity, malformed battery); condition F1 (validation verify_recipe canonicalization wording) + F2/F3 closed by delta bench — final verdict PASS. Scope: stdio + HTTP twin over the bundled join index; index recomputed from sources (Bazaar verdict feed, Herald ledger, Anchor batches/proofs, ERC-8004 publisher ledger) by a fail-closed builder. Hosted PHP twin: static parity PASS at bench; execution verified by live smoke at deploy 2026-10-27.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-trust-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-greenwash-mcp", "name": "Eclipse Greenwash", "verdict": "PASS-CONDITIONAL (local/fixture)", "scope": "Eclipse Greenwash — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-greenwash.md) PASS-CONDITIONAL with conditions C1–C4, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-greenwash.md): defects D-GW-1..4 all CLOSED, conditions C1–C4 satisfied (C2 via the labelling branch), builder suite 34/34 re-run by the bencher at commit ba07801, no new defect found. PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture emission stream with structured claim objects only, value_class \"test\"; no real agent, channel, publication, or marketing surface is touched, and no free-text claim detection in arbitrary prose is claimed or implied. Pointer limit: a binding proves a source-data pointer existed and resolved at emission time — NOT that the claim is true, not that the source data supports the claim, and not that the source data is accurate, current, or complete. Rollback fence: pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture) — external anchor required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt for any real-world claim publication. Trademark screen on the working name pending.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-greenwash-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-agesure-mcp", "name": "Eclipse Agesure", "verdict": "PASS-CONDITIONAL (local/fixture)", "scope": "Eclipse Agesure — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-agesure.md) PASS-CONDITIONAL with conditions C1–C7, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-agesure.md: D1–D8 all CLOSED, new defect D9 + condition C8), + spot re-bench of v0.1.2 (argus101-program-20261027/wave4/spot-agesure-012.md: D9 CLOSED, C8 DISCHARGED, builder suite 35/35 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture attestations only, value_class \"test\"; no real person is checked and no real age-verification capability is claimed. A proof states that an issuer attested a band for a pseudonymous subject ref, sealed to one mandate; it is not an identity claim and does not prove the issuer's underlying band determination was correct. Standing conditions: C1 rollback fence (pure local file store caps the verdict at PASS-CONDITIONAL — external anchor required before live/multi-party use), C2 §10 counsel gate (named, unbuilt — any use involving real people), C5 issuer key separation, C7 name screen still bind.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-agesure-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-fairlend-mcp", "name": "Eclipse Fairlend", "verdict": "PASS-CONDITIONAL (local/fixture)", "scope": "Eclipse Fairlend — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-fairlend.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-fairlend.md: D-1..D-6, D-8, D-9, D-10 CLOSED; D-7 closed for its probed class with residual Low defect D-11 NAMED; builder suite 36/36 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture decisions only, synthetic cohorts; no real applicant, no real credit data, no real model, and no lender system is touched, and Fairlend makes no credit decision and influences none. A Fairlend seal proves what was recorded at decision time — the presented feature set, model version, and reason codes, counter-signed then; it does not prove the decision was fair, lawful, unbiased, or correct. Standing condition D-11 (NAMED): the SPEC §7.3 identifier fence is still evadable by token-split spellings (tax_id, ein, gov_id, surname, home_street etc. seal today when they should refuse); D-11 must close before any non-fixture scope. Rollback fence and the SPEC §10 fair-lending counsel gate (named, unbuilt) also bind.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-fairlend-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-awardline-mcp", "name": "Eclipse Awardline", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "Eclipse Awardline — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-awardline.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-awardline.md: D1–D5 all CLOSED, condition C4 SATISFIED, builder suite 26/26 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture award terms + fixture spend records only, value_class \"test\"; no real award, real grantee, real funds, real accounting system, or government system is touched. Load-bearing label: an Awardline report is a recomputation from sealed receipts, not an audit, not an allowability determination, and not agency acceptance. Standing conditions: C1 §10 counsel/govcon gate (unbuilt, binds any real-award reliance), C2 external anchor (caps the verdict at PASS-CONDITIONAL), C3 real Herald RS256 (required with re-bench before any live phase), C5 name screen still bind.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-awardline-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-insurepack-mcp", "name": "Eclipse Insurepack", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "Eclipse Insurepack — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-insurepack.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-insurepack.md: DEFECT-1..3 all CLOSED, Condition 1 amended to Condition 1′ by the bench, builder suite 28/28 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, evidence assembly over fixture verdict/incident/control records only, value_class \"test\"; no live API is built, no underwriter is served, no insurer system is touched, and no real insured, real incident, or real policy enters a pack. Load-bearing disclosure (SPEC §11.1): the evidence pack is insured-side disclosure tooling; underwriting reliance is the insurer's process, not Insurepack's claim. Amended Condition 1′ binds verbatim: a single-pack VERIFY_PASS attests the pack, its own transition, and the internal integrity of the presented stream; it must NOT be relied on as proof of completeness of transitions earlier than the pack's immediate predecessor (a fully re-signed, re-linked rewritten stream is indistinguishable there); full-history reliance requires per-pack chain verification (which the export transcript now performs) or an external anchor. Rollback fence and the SPEC §10 counsel gate (named, unbuilt) also bind.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-insurepack-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-ballotbox-mcp", "name": "Eclipse Ballotbox", "verdict": "PASS-CONDITIONAL (local/simulator)", "scope": "Eclipse Ballotbox — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ballotbox.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ballotbox.md: D1–D6 all CLOSED on independent evidence, conditions C2 and C3 SATISFIED, builder suite 34/34 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture electorate + fixture governance mandates only, value_class \"test\"; no real person, company, union, public body, or live agent fleet votes in v0.1.1, no result binds anyone, and no real decision is taken here. The legitimacy limit binds verbatim: recompute proves tally-vs-sealed-ballots — that the published totals are exactly the function of the sealed ballots and their vote-time eligibility proofs; it does not prove electorate legitimacy (who chose the electorate, whether the mandate issuer was itself authorised, whether voters were coerced, or whether the question was fair), and Ballotbox claims none of them. Standing conditions: C1 (HMAC cap — no public/RS256/JWS claim until real Herald signing), C4 (§10 counsel gate, named and unbuilt — any real binding election), C5 (metering-only pricing), C6 (rollback fence) still bind.", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-ballotbox-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" }, { "event": "verdict_issued", "product": "eclipse-exportcheck-mcp", "name": "Eclipse Exportcheck", "verdict": "PASS-CONDITIONAL (local/fixture)", "scope": "Eclipse Exportcheck — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-exportcheck.md: PASS-CONDITIONAL (local/fixture), defects D1/D2, conditions C1-C3) + collision-screen fix rounds and spot re-benches rounds 1-6 closing at wave4/spot-exportcheck-022.md (v0.1.7 @5b0ab96: D3 CLOSED, survivors-in-claim 0 forms / 0 glyphs over an exhaustive 2,749-glyph / 9,836-form sweep, determinism 55/55 processes one digest, invariance byte-identical vs v0.1.2, C4 DISCHARGED) — final product verdict PASS-CONDITIONAL (local/fixture) (spot-022 verdict: PASS, scoped to the D3/C4 condition only; the C3 rollback fence is undischarged and caps the product verdict at PASS-CONDITIONAL (local/fixture) until an external anchor exists). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture parties against invented fixture snapshots only, value_class \"test\"; no real list is loaded, fetched, or reproduced, no real party is screened, and no verdict is relied on for anything. Collision screening (local/fixture scope): fixture sets loaded into Eclipse Exportcheck are collision-screened against symbol-, format- and homoglyph-decorated forms of listed names under SPEC Q-E3 as amended at v0.1.7 — assignment, identity and transmitted readings as there defined (bench: spot-exportcheck-022, survivors-in-claim 0). Standing disclosure: fixture sets are invented test data; a fixture CLEAR states only that this invented party record did not match this invented snapshot under this sealed rule-set version, as recomputed by spec 6.3 — it authorises no shipment, transaction, or filing. No live claim is made; no certification is claimed beyond the stated local/fixture bench scope. Standing conditions: C2 (from bench deviation 2): party_screen never links (prior_verdict_id: null) — a repeat party_screen under a newer snapshot produces an unlinked but immutable, vintage-sealed verdict; chain claims rest on verdict_rescreen + pack chain receipts only, and no listing or doc may imply party_screen chains. C3 (rollback fence, builder-stated, bencher-confirmed): verdict caps at PASS-CONDITIONAL(local/fixture) until an external anchor exists; pure local file store + signed head/SET anchors only. No test-bench scorecard was issued for this verdict and none is claimed (card_url null).", "date": null, "timestamp": null, "product_url": "https://eclipsebazaar.com/products/eclipse-exportcheck-mcp/", "card_url": null, "anchor_state": "NOT_ANCHORED", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party" } ], "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "issuer_disclosure": "Issued by Verity (Cyan Eclipse Technologies) — a role-separated internal desk of the same company that publishes this catalog. Issuer relationship: first-party. The bench is not an external third-party evaluator." }