{ "feed": "Eclipse Bazaar — per-listing verification records", "version": 1, "base_url": "https://eclipsebazaar.com", "generated_at": "2026-10-27T21:27:01Z", "semantics": "Each record separates four dimensions: availability (catalog record), test verdict (bench record), publication integrity (derived anchor state — ANCHORED only when a receipt hash linked to the record is a leaf of a CONFIRMED Eclipse Anchor batch; PENDING when unconfirmed; NOT_ANCHORED when no receipt is linked), and operational status (Trust Ops record; monitored=false means not monitored — never imply coverage). Verdicts are issued first-party by Verity (Cyan Eclipse Technologies), a role-separated internal desk — not an external third-party evaluator. Build-time snapshot; nothing here is a live chain read.", "network_anchor_batches": [ { "batch_id": "b18e97a2efade7657a087d1b175a771c4f69ac3a0e56596eb97c990ad876c6ea", "state": "ANCHORED", "ledger_final_state": "CONFIRMED", "source": "herald", "root": "8a19e4803a50842a595c135bebfb06c00d621279c7078d30c0d971e18ba7e2de", "leaf_count": 4, "attests": "sealed Herald receipts (hash-chain seq 1-4)", "attestation_pubkey": "1adf4657a0c5684cebf52df1c8eea1b47d7778100b0a78862c7e84c6ddda19b7", "base": { "chain_id": "eip155:8453", "tx_hash": "0x6a69e35cbe70428f1fa97251759e2b5fa974bd422f68a076ac5de72c7b2459d4", "block_number": 53163637, "block_hash": "0xff98435a5838ff0be5f53243b73bb29cb25440a3215a516226c0826b35492dfb", "block_timestamp": 1793116621, "explorer_url": "https://basescan.org/tx/0x6a69e35cbe70428f1fa97251759e2b5fa974bd422f68a076ac5de72c7b2459d4" }, "bitcoin_ots": { "status": "pending", "btc_block_height": null } } ], "count": 157, "records": [ { "product": "eclipse-agent-wallet-mcp", "name": "Eclipse Agent Wallet MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-agent-wallet-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(sandbox)", "record_status": "current", "certified": true, "scope": "Test Bench v0.1.0, 2026-10-24, sandbox environment: policy enforcement (no-policy/over-cap/off-allowlist denied), approval queue, kill switch, append-only audit, schema and error handling — 12 pass, 1 na of 13 checks", "not_tested": [ "Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)", "Production payment rails — bench ran against simulated test USDC only; x402/production rails not yet wired (x402_ready: false)" ], "bench_date": "2026-10-24", "bench_version": "0.1.0", "bench_score": { "pass": 12, "fail": 0, "na": 1, "total": 13 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-agent-wallet-mcp-2026-10-24-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "6475dd09329930e0e30e2622eb88fa658d80f648d5af6a66e549ed1c317df619", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-24", "verdict_age_days": 3, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-agent-wallet-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "agent-ready-mcp", "name": "AgentReady MCP", "product_url": "https://eclipsebazaar.com/products/agent-ready-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/agentready.py.", "not_tested": [ "Authenticated checkout verification (out of scope by design: public-surface audit only)", "Live storefront grades — bench audits ran against bench-owned localhost fixtures; the product's own live-target smoke results (3 targets, 2026-10-24) were reported, not re-graded" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/agent-ready-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "9be949012e3c1b4b53f99c21d9c2f4f51e0a8e1e951ac761018c418002e38549", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/agent-ready-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "certbridge-mcp", "name": "CertBridge MCP", "product_url": "https://eclipsebazaar.com/products/certbridge-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Live issuance PROVEN by dogfood run 2026-10-25 — real Let's Encrypt production certificate issued end-to-end for eclipsebazaar.com + www.eclipsebazaar.com (test-bench/results/certbridge-mcp-dogfood-2026-10-25.md). NOT a bench scorecard: bench verdict remains CERTIFIED(staging); the §7 production label is withheld (cPanel install, public repo, named support outstanding)." }, "verdict": "CERTIFIED(staging)", "record_status": "current", "certified": true, "scope": "Test Bench v0.1.0, 2026-10-24, Let's Encrypt STAGING environment: end-to-end staging order, byte-exact challenge placement, staging/production labelling, renewal-due detection, audit completeness — 12 pass, 1 na of 13 checks", "not_tested": [ "Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)", "cPanel UAPI install — declared in the server, returns explicit not-live errors; not scored by the bench. Live production issuance itself was proven separately by dogfood (see live_state_note)", "Production CA account on the BENCH run (bench created a staging account only); the dogfood run created a production account outside the bench" ], "bench_date": "2026-10-24", "bench_version": "0.1.0", "bench_score": { "pass": 12, "fail": 0, "na": 1, "total": 13 }, "card_url": "https://eclipsebazaar.com/cards/certbridge-mcp-2026-10-24-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "57db4c0dad7213a8da81f0183c0e06833edad8f73e24c907423bea93bba09a00", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-24", "verdict_age_days": 3, "covered_version": "0.1.0", "latest_seen_version": "0.2.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/certbridge-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "hostbridge-mcp", "name": "HostBridge MCP", "product_url": "https://eclipsebazaar.com/products/hostbridge-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local-real)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local-real) — Test Bench v0.1.0, 2026-10-27 (card hostbridge-mcp-2026-10-27.json, superseding the 2026-10-24 simulator card): real filesystem docroot served by a real HTTP server process; scope binding, dry-run touches nothing, deploy pipeline byte-exact on disk AND served live over HTTP, rollback exact on disk + live HTTP, real-HTTP smoke tests, probe caveat (local listener + live host cetech.ai), corrupt-zip rejection, append-only audit completeness — 15 pass, 1 na of 16 checks. Scope boundary (load-bearing): the deploy TRANSPORT is still the product's 'simulate' transport — this verdict certifies NO remote-host deploy.", "not_tested": [ "Remote-host deploy — NOT in v0.1.0: no SFTP or cPanel UAPI transport is built; the sftp transport returns an explicit declared-not-live error (bench H7)", "Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)" ], "bench_date": "2026-10-27", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/hostbridge-mcp-2026-10-27.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "55dad4c8f00b2a4c9a802f621ee4572cc7b2b73305293efd4d0a2d7194e48458", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-27", "verdict_age_days": 0, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/hostbridge-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect", "name": "Eclipse Connect", "product_url": "https://eclipsebazaar.com/products/eclipse-connect/", "listing_class": "connector", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "dogfood", "platforms": [ "HTTPS relay (hosted)" ], "live_state_note": null }, "verdict": "CERTIFIED(dogfood)", "record_status": "current", "certified": true, "scope": "Test Bench v0.1.0, 2026-10-24, dogfood environment (simulator-verified, 14 tests): fail-closed auth, upload validation, public-approval gating, revoke, audit hygiene, authorize/callback grant flow — 14 pass, 1 na of 15 checks", "not_tested": [ "MCP schema surface (bench U2 = na: Eclipse Connect is an HTTP relay, not an MCP server)", "Multi-user / production scale — P1 scope is a single user, single channel (@TheWhiteReport)" ], "bench_date": "2026-10-24", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-2026-10-24-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "eca38d9c8eabd19a82d6874abde944ac1026760efb8aac8207ed4126ba6b937f", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-24", "verdict_age_days": 3, "covered_version": "P1", "latest_seen_version": null, "probe_status": "OK" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-apply-mcp", "name": "Eclipse Apply MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-apply-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(sandbox)", "record_status": "current", "certified": true, "scope": "Test Bench v0.1.0, 2026-10-25, SANDBOX environment: policy refusals (blocklist, salary floor, daily cap, expired policy), pause/kill switch, zero-fact tailoring diff, fabrication catch, hash-chained receipt ledger, dry-run transmits nothing, delete_my_data purge — 17 pass, 1 na of 18 checks", "not_tested": [ "Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)", "Live job boards — bench jobs are synthetic fixtures seeded into bench state in /tmp; no live boards fetched, no employer contacted", "Live submission — v0.1 is DRY-RUN ONLY by design; A7 truthfulness check ran logic-level (verify_truthful() in-process), all other checks over MCP" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 17, "fail": 0, "na": 1, "total": 18 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-apply-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "0b1cb513d92b3bcbff82ce3aecafa8d149a5cfe3b4327cc5dd226880193c0ea1", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "CURRENT", "drift_status": "CURRENT", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-apply-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "florida-bid-intel-mcp", "name": "Florida Bid Intel MCP", "product_url": "https://eclipsebazaar.com/products/florida-bid-intel-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/florida.py.", "not_tested": [ "Live portal pull — no live-pull code path exists (F3 source assertion); v0.1.0 reads dated local snapshots from attended pulls only", "Multi-snapshot run-over-run deltas beyond baseline (both stores hold a single snapshot; delta=baseline is the tested case)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/florida-bid-intel-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "c7c822bcc4dc18cb9ace4b926d39b1c53071f52498a7088f59191c3f4c1dda52", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/florida-bid-intel-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "white-report-mcp", "name": "The White Report MCP", "product_url": "https://eclipsebazaar.com/products/white-report-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "HTTPS (hosted, thewhitereport.com/mcp.php)" ], "live_state_note": null }, "verdict": "CERTIFIED(live)", "record_status": "current", "certified": true, "scope": "Test Bench v0.1.0, 2026-10-25, LIVE host environment: all 5 tools verified over real HTTP JSON-RPC against the production endpoint (article search + full text, ticker, scoreboard, contract surface, read-only behavior, no-secrets scan) — 10 pass, 1 na of 11 checks", "not_tested": [ "Auth enforcement (bench U1 = na: public read-only tier by design, no auth on the public tier)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 10, "fail": 0, "na": 1, "total": 11 }, "card_url": "https://eclipsebazaar.com/cards/white-report-mcp-2026-10-25-11.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "302a1d5a39413d45b956818a2a1da583264f6145f9b1330b6d9c8ce29c05b3e2", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "OK" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/white-report-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-bazaar-mcp", "name": "Eclipse Bazaar MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-bazaar-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bazaar.py. Standing card is run 4 (-4.json); runs 1-3 FAILED retained (bench-suite defects, disclosed in card notes).", "not_tested": [ "Third-party listings (P2) — v0.1.0 covers the CETech catalog only", "Purchasing / x402 flows — no purchasing surface exists in v0.1.0 (B7)" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-bazaar-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "f0d7e70577c3929f51d87b6b0cb48c4f06deb0be89bf53aee03a5f6336c5a8ff", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-bazaar-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-bidmatrix-mcp", "name": "Eclipse BidMatrix MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-bidmatrix-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 25 pass, 1 na of 26 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/bidmatrix.py. Runs 1–2 FAILED and the run-3 harness flake are retained append-only; run 4 is the standing card — defects D1–D6 fixed and verified on bench-built fixtures independent of the builder's tests. N-CHECK: NOVELTY_PROVEN — evidence-bound rows (every requirement a verbatim substring of the source with a section + line locator) plus the SILENT_EMPTY completeness pass; with D4 fixed, the completeness limb holds under repeated section ids.", "not_tested": [ "Live SAM.gov fetch / URL ingestion — NOT built in v0.1; the caller supplies raw text or a local file path, and no fetch verb exists on the surface", "PDF parsing — NOT built; text input only", "Hosted / multi-tenant surface and payments — NOT built; local stdio only", "Backlog D7 (minor, non-gating, from the standing card): NAICS lists separated only by ' / ' extract the first code only, and the unanchored phrasing 'Applicable NAICS codes are …' extracts none — outside the engine's declared anchored scope, logged for the next fix wave" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 25, "fail": 0, "na": 1, "total": 26 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-bidmatrix-mcp-2026-10-26-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "21bd34e4627769c49e8efa64eee4fa195c2ad4e5866fe051b8271b56af155bee", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-bidmatrix-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-section508-mcp", "name": "Section 508 Evidence MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-section508-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/section508.py. Runs 1–2 FAILED on bench-suite defects (a locator regex, then a corpus threshold) — no product code was touched between runs; run 3 is the standing card. N-CHECK: NOVELTY_PROVEN — the evidence binding (criterion id + verbatim snippet + element locator, programmatically verified on every bound finding) plus NOT_STATICALLY_DECIDABLE honesty: partially-decidable 1.4.3 renders Partially Supports, never a clean Supports, and a zero-failure audit still claims conformance NONE.", "not_tested": [ "Rendered-DOM / browser auditing — NOT built in v0.1 and not attempted: this environment has no headless browser. Only static analysis of caller-supplied HTML text is in scope.", "External-CSS / cascade contrast beyond inline-declared colors — classified NOT_STATICALLY_DECIDABLE in-product, never approximated or passed.", "Multi-page / site-level audits — v0.1 audits one supplied document per call.", "Formal VPAT 2.x edition exports (INT / Section 508 edition) and completed/signed ACR generation — v0.1 emits ACR/VPAT-ready evidence in VPAT table shape only.", "WCAG 2.2-only criteria — the Section 508-incorporated standard audited is WCAG 2.1 A/AA.", "Backlog D1 (minor, non-gating, house-pattern, from the standing card): an unparseable raw line on stdio returns -32603 with raw exception text where JSON-RPC reserves -32700 for parse errors; recorded for a house-wide fix wave." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 19, "fail": 0, "na": 1, "total": 20 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-section508-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "13692b8b5432356ce82105d01aec4a303c1612a48ed5e4fe1981cccb24c0b871", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-section508-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-fedscope-mcp", "name": "FedScope MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-fedscope-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fedscope.py. Runs 1–3 FAILED retained append-only (runs 1–2 carried bench-suite defects; run 3 was the pre-fix product card); run 4 is the post-fix re-bench — D1–D3 verified fixed, scoring snapshot byte-identical. N-CHECK: NOVELTY_PROVEN, re-earned in run 4 — deterministic fit + newcomer scoring with every point hand-recomputed by the bench (~58 cases) and traced summaries that name their field basis and flag absent facts instead of inventing them; no fetch or live verb exists on the surface.", "not_tested": [ "Live SAM.gov fetch — NOT built in v0.1 and no API key exists; search runs over caller-supplied / bundled LOCAL datasets in SAM.gov-opportunity shape only", "Hosted / multi-tenant operation — NOT built; local stdio only" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 21, "fail": 0, "na": 1, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-fedscope-mcp-2026-10-26-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "168613287e58bcec5840ab8ef11673affd36b628d42aa39b4ec8a1de187a5575", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-fedscope-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-health-check-mcp", "name": "Eclipse Health Check MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-health-check-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (static local targets only; no live probing, no network)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/healthcheck.py. Runs 1–2 FAILED retained append-only; run 3 is the standing card — B-HC-1 (credential masking not global, HIGH) and B-HC-2 (-32603 escapes on the tool surface, HIGH) fixed and verified pass at N2/H3. N-CHECK: NOVELTY_PROVEN — evidence-bound findings whose file+line citations the bench opened and verified verbatim, severity/fix byte-bound to the check catalog, NOT_STATICALLY_DECIDABLE as a first-class result, and a score never emitted without its decomposition.", "not_tested": [ "Live probing / runtime posture — no live probing exists in this tier by design; runtime checks (HC-AUTH-03 / SSRF-02 / SSRF-03 / RUN-01 / RUN-02) are certified only as enumerated NOT_STATICALLY_DECIDABLE with reasons, never as passes", "Hosted / multi-tenant operation — NOT built; local stdio only", "Residual LOW backlog from the standing card: B-HC-3 (a target root that is itself a symlink is followed — caller's explicit target; disclose resolved-root behaviour in v0.2), B-HC-4 (absence/config evidence uses line=0 + json_path — the file+line claim should carve this out explicitly), B-HC-6 (malformed-JSON envelope handling at the transport layer)" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 21, "fail": 0, "na": 1, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-health-check-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "789b8a11e07002ea3d6f2af5c3174b0b3db8d72e4d5f7ce8016cc6e16019d375", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-health-check-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-legacy-recon-mcp", "name": "Eclipse Legacy Recon MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-legacy-recon-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) at the NARROWED OBSERVED SCOPE (CLAIM-SCOPE.md): Positive DECLARED, OBSERVED, and INFERRED reports only within CLAIM-SCOPE.md, with evidence or basis carried in the output; OBSERVED is not exhaustive. Withdrawn by name — W1 JS_TS_MULTILINE_BLOCK_COMMENT_CONTINUATION_AFTER_SPLIT_NO_CLOSE_SPAN · W2 JS_TS_CHAINED_NO_CLOSING_SLASH_REGEX_SPANS_ON_ONE_LINE · W3 B_LR_14_INVALID_LINE_NONINVENTORY_IDENTIFIER_FOLLOW · W4 EXHAUSTIVE_OBSERVED_RECALL · W5 DYNAMIC_IMPORT_OBSERVATION_OR_SPECIFIC_UNKNOWN · W6 MTS_CTS_OBSERVED_EXTRACTION · W7 PERMISSION_DENIED_SUBTREE_COMPLETENESS · W8 SELF_REFERENTIAL_SYMLINK_REPORT_AND_SKIP · W9 HOSTED_AUTHENTICATED_OR_MULTI_TENANT_OPERATION. Scoped re-bench card -11 (2026-10-26): 30 pass, 0 na of 30 checks.", "not_tested": [ "Manifest ecosystems beyond the v0.1 parsers listed in README (no Gradle dependency extraction, no lockfile parsing)", "Hosted / multi-tenant operation and auth beyond the stdio process boundary (withdrawn W9)", "Withdrawn W1: JS/TS multiline block-comment continuation after a split no-closing-slash regex-like span (card -10 X1)", "Withdrawn W2: JS/TS chained no-closing-slash regex-like spans on one physical line (card -10 X1)", "Withdrawn W3: B-LR-14 non-inventory identifier follow on invalid JS/TS lines only", "Withdrawn W4: exhaustive OBSERVED recall — B-LR-5 (JS), B-LR-6 (Python), and B-LR-15 / template-${} over-masking recall limits", "Withdrawn W5: dynamic-import OBSERVED entries and a dedicated dynamic-import UNKNOWN (B-LR-3)", "Withdrawn W6: .mts/.cts OBSERVED extraction (suffixes absent from EXT_LANG)", "Withdrawn W7/W8: completeness over permission-denied subtrees and report-and-skip treatment of self-referential symlink loops (B-LR-7)", "B-LR-12 remains a cosmetic bench-suite wording item, not a product claim" ], "bench_date": "2026-10-26", "bench_version": null, "bench_score": { "pass": 30, "fail": 0, "na": 0, "total": 30 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-legacy-recon-mcp-2026-10-26-11.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "759e2dd0fca83b21719293856b3741979547e9e25245fa3481e4d7ad526990ef", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-legacy-recon-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-mail-mcp", "name": "Eclipse Mail MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-mail-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local / fixture-only)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local / fixture-only) — Eclipse Bazaar Test Bench 2026-10-25, 48 pass, 0 na of 49 checks (score 99/100: 48 pass / 1 partial / 0 fail). Run by W-003 (Verity), independent re-bench of the P0 fix round; the original NOT CERTIFIED card (68/100, test-bench/results/eclipse-mail-mcp-2026-10-25.json) is retained append-only, and this -2 card is the standing verdict basis. Scope is LOCAL / FIXTURE-ONLY: the §8 anti-fraud corpus, the signed-envelope/tier engine, the review-first send gate, the §5 fraud firewall, and the audit/kill-switch discipline, all over a synthetic fixture transport. NO live mailbox exists; NO live sending is possible in v0.1; parent-spec dogfood acceptance has NOT run and is NOT certified. The one PARTIAL (D-4): the §5 detector's detection prong catches canonical paraphrases (4/4 on the bench's fresh primary set; benign controls clean) but remains pattern-bounded on an extended evasion set (7/12 detected) — bounded by the by-construction firewall: an evasion loses the flag/workflow only, never protected state, because no tool can adopt a §5 instruction (forbidden surface refused 23/23 by name). A semantic detector pass is required before any live claim. N-CHECK: NOVELTY_PROVEN — fraud-firewall-by-construction plus detection-triggered out-of-band verification keyed to the registry number-of-record, Herald signed-envelope thread hash-chaining, and automatic auth→tier consequences including the D1 envelope-tier law (no valid envelope → never agent-tier).", "not_tested": [ "Live mailbox IMAP/SMTP — NOT built. v0.1 ships the fixture transport only; parent-spec dogfood acceptance (live mailbox, send/receive/reply, 7-day run) requires the owner-created cetech.ai mailbox and a separate go — NOT certified.", "Live sending of any kind — no live mailbox exists in v0.1 and no real credential exists in the package; the certified send gate ran over the fixture transport only.", "§5 detector semantic depth — extended evasion set 7/12 (D-4 PARTIAL, disclosed in certified_scope); a semantic detector pass is required before any live deployment claim.", "AES-256-GCM credential custody — live design only; v0.1 hashes and discards the synthetic fixture credential (fingerprint only).", "cetech.ai DNS posture (§7.1) — not audited, not changed (D2 audit-first, owner-approved).", "Network Herald card lookup / Envoy registry — v0.1 uses local fixture JWKS + Envoy-shaped local registry; migration lands with Envoy E0.", "Attachment content retrieval, delete tool, Gmail/Outlook OAuth, hosted relay — parent-spec P2.", "Operator-channel authentication beyond the stdio process boundary (by_owner flags are the v0.1 owner-surface marker; standing U1 class)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0 re-bench (P0 fix round)", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-mail-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "5d635364d2ee6b6495cac07439634b788c9a41123a2c8b1c15fcdabfebb70395", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-mail-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-herald-mcp", "name": "Eclipse Herald MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-herald-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/herald.py.", "not_tested": [ "Live A2A task endpoints (H2 scope — v0.1 delegates to local stub agents only)", "External counterparty cards / remote JWKS fetch (no network in v0.1)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-herald-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "8dc4cabbd58ea1cfd9aa923805c125ae84f195cda23541eda77f460889f7e706", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-herald-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-beacon-mcp", "name": "Eclipse Beacon MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-beacon-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/beacon.py.", "not_tested": [ "Phases B1+ (gap expansion, lapse guard, renewal shopping prep, mandate-gated actions) — not built in v0.1, not benched", "Agency edition — not built (counsel/licensing gate per spec); not benched" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-beacon-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "34c97371340567731c169660d85a7630f8c655f12fca557906e2f6f98a8f5498", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-beacon-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-cluster-mcp", "name": "Eclipse Cluster MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-cluster-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Simulator scope: local stub registry, openssl-signed fixtures. Run by W-003 (Verity), suites/cluster.py.", "not_tested": [ "Runtime/orchestration phases K1-K3 not built — v0.1 is the K0 verification gate only", "Keyless/Fulcio certificate signatures not accepted by design in v0.1 (key-based trust bundles only)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-cluster-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "6a6305ec9d4de3dc4e81eca9618992cad954102b235c3a2d4ac9d4ccf3acbb68", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-cluster-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-thread-mcp", "name": "Eclipse Thread MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-thread-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (local; enclave deployment shape)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/thread.py.", "not_tested": [ "Any real tool instance: no Jira Data Center, Coverity, Cameo, or VectorCAST instance was available or contacted. All targets are fixtures/mocks — the (simulator) qualifier applies to the whole v0.1 scope.", "Live bridge behavior against a real Jira Data Center (auth, per-version REST surface, rate behavior) — bridge exercised only against the bundled stdlib stub over localhost HTTP." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-thread-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a44db91bb296b3e5f66e600275fa575adc488b03fc59c13712c359649531bcdc", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-thread-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-constellation-mcp", "name": "Eclipse Constellation MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-constellation-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/constellation.py.", "not_tested": [ "SSH channel live execution — untested by design: no sshd runs on this host, v0.1 declares no ssh target, and the Eclipse Connect droplet migration is owner-gated per spec. Probes were exercised over the declared 'local' channel only.", "All execution adapters (lifecycle, exec, console) — v0.1 is observe-only by design; no mutation code paths exist. Tier-3 evaluations cannot ALLOW in v0.1 (human approval channel not wired) — verified as designed in check K5." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-constellation-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e2cb70c4d76180fbf77c3bcbc53cc42b94741482537fc1972817ad6174ad6133", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-constellation-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-deepfield-mcp", "name": "Eclipse Deep Field MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-deepfield-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 2: 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run 1 FAILED card retained in results/ — both failures were bench-suite assertion bugs (schema key name; hash assertion over schema_read receipts, which take no SQL), fixed in the suite, no product code touched. Run by W-003 (Verity), suites/deepfield.py.", "not_tested": [ "Postgres LIVE path NOT tested — no Postgres server binary, psql, or Python driver exists on this host; the bench verified only the fail-closed posture (all tools return ERROR verdicts). The adapter is implemented behind a driver interface and was tested by its own suite against a recording-fake transport only. Live verification is spec phase P1 and is NOT claimed.", "MySQL/MariaDB, SQL Server, MongoDB, Redis, warehouse (Snowflake/BigQuery), and vector adapters — roadmap phases P1–P4, not built.", "Automated rollback tool — v0.1 retains before-images under a rollback handle; restore is a documented operator procedure (P1)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-deepfield-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "b022a04cb21e075841442df194f586ecaa7e6bc559f6b3fb1baf0111da0c6cc4", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-deepfield-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-pantry-mcp", "name": "Eclipse Pantry MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-pantry-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/pantry.py.", "not_tested": [ "Live platform routes (Cantaloupe Seed / Nayax APIs or scheduled exports) — C0 ingests local DEX/UCS-style export files only; per-platform export formats are [verify] per the addendum and untested against real platform output.", "Multi-read velocity on real fleets — forecast delta method is implemented and unit-tested with a synthetic second read; no real route history has been run." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-pantry-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "ef1fa747e2a408f675d854bc7787aeb17c4efd1ead9d7da8cf4abce65d69d92c", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-pantry-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-marquee-mcp", "name": "Eclipse Marquee MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-marquee-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/marquee.py.", "not_tested": [ "Live Ticketmaster Discovery or SeatGeek Platform calls — no API keys exist (owner Wave-2 item) and v0.1 contains no live marketplace code path; all discovery and prices come from shipped local stub fixtures.", "F1 buy-under-mandate — not built in v0.1; no purchase, checkout, transfer, or resale tools exist.", "F2 group logistics, chain-of-custody ticket receipts, and entry-day readiness — not built in v0.1.", "Organizer/venue side — not built; partner-gated per spec." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-marquee-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "02f3ac76f55b1688548b34478074250aab9894e96bcc4bb64a1e125a08719a46", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-marquee-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-dispatch-mcp", "name": "Eclipse Dispatch MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-dispatch-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13/14 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/dispatch.py.", "not_tested": [ "Live platform wiring: adapters run against fixtures and local stub HTTP servers shaped like the real APIs. beehiiv signup is an owner Wave-2 item; no Ghost instance runs here; Substack live reads (official MCP analytics) not exercised." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-dispatch-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "d4e4640eb66a224d800c700d8395b8d1a8ecc5abcf85c9fe51094862a0c8103b", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-dispatch-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-social-core-mcp", "name": "Eclipse Social Core MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-social-core-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/social_core.py.", "not_tested": [ "Live adapter execution — the core performs no platform action by design; adapters (Aperture formalization, Zephyr reads) carry their own benches.", "Unified analytics envelope (spec SS6) — specified, not built in S0 core v0.1." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-social-core-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "665f78be3976d34f4a24ced9c18028184a94dc8924a86d7f461371dbfe6337a2", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-social-core-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-aperture-mcp", "name": "Eclipse Aperture MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-aperture-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 11/12 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/aperture.py.", "not_tested": [ "Live Graph API behavior — v0.1 makes NO live calls by design; the capability record is a static declaration and every row is [verify] against a dated Meta record before external reliance.", "Publish/container/insights tooling (ig_media_stage, ig_container_verify, ig_insights_read, ig_own_comment_queue) — roadmap only, not built." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 11, "fail": 0, "na": 1, "total": 12 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-aperture-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "159769d9eee9332d3985a8ab88d3c51275543344a3d491c421bcb4ee9bc3d675", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-aperture-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-zephyr-mcp", "name": "Eclipse Zephyr MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-zephyr-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(live-read)", "record_status": "current", "certified": true, "scope": "CERTIFIED(live-read) — Eclipse Bazaar Test Bench 2026-10-25, 12/13 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zephyr.py. Standing card is run 2 (-2.json); run 1 FAILED is retained in results/ — its Z5 failure was a defect in this bench probe (the tamper set a receipt field to its existing value, a no-op the verifier correctly accepted), fixed and disclosed here; no product defect.", "not_tested": [ "Posting / record staging (bsky_record_stage, bsky_thread_verify, bsky_label_preflight) — not built; owner account is a Wave-2 gate.", "COMMUNITY_API_PILOT — spec-eligible for Zephyr only after S2, a dated terms record, and separate owner enable; not built, not enabled." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 12, "fail": 0, "na": 1, "total": 13 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-zephyr-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "ab863642ea5fba580bd196f4c6bce7868e9567e07e62d347e00218fc738a34da", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-zephyr-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-environment-mcp", "name": "Eclipse Environment MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-environment-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/environment.py.", "not_tested": [ "A real Home Assistant instance — v0.1's hub is a local HA-shaped stub (stdlib http, fixtures). The wrapper's client speaks the /api/states + /api/services shape, but parity with real HA behavior (auth, service payloads, state semantics) is [verify] and untested; connecting the owner's instance is a Wave-2 owner-gated step.", "Tier 2 / Tier 3 EXECUTION — by phase design v0.1 evaluates both and denies by phase; the Tier 2 receipt + owner-notification wiring and any Tier 3 execution path are unbuilt, so there is nothing to test yet.", "Vehicle rails (Smartcar, Tesla Fleet API) — designed in the Procure concept doc's Environment module; no adapter exists in v0.1.", "Real-home scale and latency — fixture hub carries 7 entities; nothing about a real home's entity count, hub latency, or state churn has been measured." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-environment-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "c4379f6b657e22af30349fd47a5d3787fe89ca898b549dad85457e155d4b0cc0", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-environment-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-procure-mcp", "name": "Eclipse Procure MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-procure-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/procure.py.", "not_tested": [ "Any real merchant, real payment rail, or real money: none exists in this build. The merchant adapter reads shipped fixtures, the payment rail is a sandbox stub authorizing TEST value only, checkout confirmation is simulated, and the file contains no network calls. Policy evaluation re-implements the Eclipse Agent Wallet's documented policy semantics locally by reference; live interoperation with the wallet MCP is untested (and the wallet's files are untouched)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-procure-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "65a652797fda9c5e9de5bd228e84c215c14005e00d6b3f531d2e282a1d6f7dab", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.2.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-procure-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-gig-core-mcp", "name": "Eclipse Gig Core MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-gig-core-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/gig_core.py.", "not_tested": [ "Live platform calls of any kind — G0 contains no live marketplace code path; briefs, quotes, mandates, and verifications are local records evaluated against shipped test data.", "Adapter variant approval binding against a live adapter — the Compass fixture adapter is the first consumer; cross-product bench is a later run.", "Photo EXIF stripping tooling itself — the core records the strip status per photo as supplied; the stripping tool is adapter/build scope [verify] per spec 5.1." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-gig-core-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "79147fd46dec8fb88ee653a9c832bc9d5330643e4a8564b13d359939dad531f2", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-gig-core-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-compass-mcp", "name": "Eclipse Compass MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-compass-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/compass.py. Run 1 (eclipse-compass-mcp-2026-10-25.json, FAILED, retained per append-only history) failed on a defect in the bench suite itself, not the product: its U3 network-surface pattern substring-matched the fixture filename 'thumbtack_requests.json'; the pattern was corrected and run 2 is the standing card.", "not_tested": [ "Live Thumbtack Partner Platform calls of any kind — no partner credentials exist (owner G1 step) and v0.1 contains no live code path; categories, pros, requests, and quotes are shipped fixtures shaped like Partner Platform responses.", "Live request submission (REQUEST_API) and hire execution (HIRE_API) — not built in v0.1; Compass previews and reads fixtures only, and holds no independent hire power (the gig core hire gate evaluates mandates).", "Marketplace-side messaging scope and the pro-side surface (leads, messages, webhooks) — later phases, messaging scope [verify] per spec chapter 10.", "Trademark screen for the 'Compass' name — owed before any external launch per spec chapter 10 (N5 caution)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-compass-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "f78fe5d8828ae9359b498030f8b8bce65c1157bee871bfef2eeed6a2859c94b7", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-compass-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-stage-mcp", "name": "Eclipse Stage MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-stage-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/stage.py.", "not_tested": [ "A real Xbox in Developer Mode — v0.1's portal is a local Device Portal-shaped stub (stdlib http, fixtures) simulating one console. Parity with the real Xbox Device Portal (auth, exact payload shapes, the /api/app/packagemanager package pipeline, behavior when the console is off) is [verify] and untested; connecting the owner's console is an owner-gated step.", "Real package deployment — v0.1 installs are fixture-metadata records by design; the real binary upload/register/install path is unbuilt, and binary-shaped payloads are refused by name at the bridge and the stub.", "Live frame capture — v0.1's screenshot is the stub's fixture PNG; no real console frame has been captured.", "Steam Deck / PC handhelds and Apple TV / Android TV tracks — designed in the Procure concept doc's Stage module (fully open to developer-account paths); no adapter exists in v0.1." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-stage-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "0a8811efb5a8f70691362757c4d706515274b234d97864b308097b7f2ea567e9", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-stage-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-zenith-mcp", "name": "Eclipse Zenith MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-zenith-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/zenith.py.", "not_tested": [ "Real FTMS hardware of any model — none exists on this VM. The codec follows the published FTMS characteristic layouts, but per-model variance (optional-field population, flag discipline, control-point parameter acceptance, rower pace resolution) is [verify] against each machine's advertised characteristics at enrollment and is untested here; the registry's characteristics lists describe the SIMULATOR's advertised set.", "Real Bluetooth transport (BLE pairing, notification cadence ~250 ms, link loss behavior) — the bridge-to-simulator link is a local Unix socket; the dead-man rule is proven on a simulated clock against the simulator's enforcement, not against a real belt, a real link, or real time.", "Physiological ceiling behavior with a real athlete (HR-signal loss handling, injury/medical flags, Coach adaptation) — designed in the concept doc; the Coach engine and Health Fusion are unbuilt, so there is nothing to test yet.", "Multi-user / commercial-gym identity — deferred by the concept doc; v0.1 is home-first, single-athlete fixtures." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-zenith-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "0a283bd07478201c4fc713b80d74faace1877b951bea6621c852fce1fad97833", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-zenith-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-muster-mcp", "name": "Eclipse Muster MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-muster-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/muster.py. First run FAILED card retained in results/ (bench-suite self-defect: U7 subsequence order; fixed and re-run clean).", "not_tested": [ "Live platform ingestion of any kind — C0 Muster is fed records by callers/fixtures; adapter-fed ingest is proven at C1 when Haven/Orbit connect live.", "Cross-adapter identity proposals against real two-platform data — the propose/confirm/unmerge mechanics are proven on synthetic fixtures only.", "Encrypted-at-rest graph store (house vault pattern) — C0 state is a local JSON file; the vault-backed store lands with the owner's production bucket (spec 5.6)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 15, "fail": 0, "na": 1, "total": 16 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-muster-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "49ccfb1abb36231e8cfb555f5149f67ecc1d417e66ebe0ab65471994af0a4318", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-muster-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-haven-mcp", "name": "Eclipse Haven MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-haven-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (re-bench after H1 fix): 13/14 checks pass, 1 na (U1), 0 fail. H1 passes: presenting an api_token credential is refused with TOKEN_AUTH_NOT_IMPLEMENTED + the 2027-04-30 sunset date on all 10 tools — auth_status and receipt_list now call check_auth first and both schemas declare the auth property; the builder regression test (enumerating S.TOOLS) was independently replicated against a pre-fix copy, failing on exactly those 2 tools. Regression spot-checks H3 (visibility non-flattening), H4 (T2 cross-ticket/changeset replay), H5 (re-draft token kill) all pass unchanged. Run by W-003 (Verity), suites/haven.py. FAILED run-2 card (eclipse-haven-mcp-2026-10-25-2.json) retained in results/ per append-only history.", "not_tested": [ "Any live Zendesk instance — C0 runs on synthetic fixtures shaped like REST API v2 responses; live connection is C1 against an owner-controlled instance (spec 12.5).", "Real OAuth grant flows (authorization code / client credentials) — the auth SHAPE is implemented and token auth is refused by construction; live grants need the owner's registered OAuth app at C1.", "Webhooks, incremental export, satisfaction-rating writes — not in the C0 surface.", "Feeding canonical records into Eclipse Muster live — the mapping shapes align with spec 5.1/12.3; cross-product ingest is a C1 bench item." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-haven-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "badacd1100822db2d5794782876cb60a2a3f526942febae167ab5434c59bfdc7", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-haven-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-orbit-mcp", "name": "Eclipse Orbit MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-orbit-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: local stub vendor, no live credential). Run by W-003 (Verity), suites/orbit.py.", "not_tested": [ "The real HubSpot MCP server (mcp.hubspot.com) — C0's vendor is a local stub shaped like its tool surface; the live wrap is C1 against an owner account (spec 11.5).", "Real OAuth 2.1 + PKCE connector flow and per-portal scope lists — recorded at live connection, not in C0.", "Free-tier tool parity of the vendor server — flagged [verify] in the spec for C1.", "Custom objects — declared OBJECT_GAP (absent from the vendor tool set); not reachable through Orbit by design (spec 11.4).", "Vendor drift against the REAL vendor inventory cadence — the drift rules are proven against stub fixtures (tier rise, added tool)." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-orbit-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a7cc10dc5b9584f7f95c1fabdd17a385aef08d9cc405e0de2038194cce6b3c47", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-orbit-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-voice-core-mcp", "name": "Eclipse Voice Core MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-voice-core-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19/20 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/voice_core.py.", "not_tested": [ "Live registry service form — V0 adapters share the core state file through core_engine (fixture seam, stated in README); production transport is V1 scope.", "Real DNC datasets and jurisdiction window contents — shipped fixtures are small provenance-bearing subsets; production contents ship only after the V1 counsel gate (spec 5.4/16).", "Any carrier account, live number, call, or text — none exists in V0." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 19, "fail": 0, "na": 1, "total": 20 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-voice-core-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "fafa79836fac1490ef84d53aa47be063f89ec50edc87780c665ee35788990af3", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-voice-core-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-trunk-mcp", "name": "Eclipse Trunk MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-trunk-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 16/17 checks pass, 1 na (U1 auth: stdio process boundary), 0 fail. Run by W-003 (Verity), suites/trunk.py. Run 1 FAILED card retained in results/ — bench-suite self-defect (T4 absolute receipt count vs cumulative suite ledger), fixed and re-run clean as run 2; no product defect.", "not_tested": [ "Live Twilio account actions — the vendor's official MCP surfaces (docs discovery + Labs execution server) are the V1 wrap targets; V0 ships against Twilio-shaped fixtures + a local stub only, and the build-time probe of which vendor surface executes is a V1 step (spec 12).", "Number provisioning and release — search only in V0; provisioning is T2 and release is T3 at V1 behind the owner account.", "WhatsApp / RCS channel consent inheritance — spec 12 flags per-channel verification at build; no channel beyond voice/SMS is modeled in V0." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-trunk-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "42104e45d206cd06b492d464034616a9f929f7b5cdd4ec00ab066244c8d43c8b", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-trunk-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect-mcp", "name": "Eclipse Connect MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "dogfood", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(dogfood-facade)", "record_status": "current", "certified": true, "scope": "CERTIFIED(dogfood-facade) — Eclipse Bazaar Test Bench 2026-10-25, 14/15 checks pass, 1 na (U1 auth: vault surrogate stubbed). Run by W-003 (Verity), suites/connectfacade.py. Facade only — the relay holds its own CERTIFIED(dogfood) card (eclipse-connect).", "not_tested": [ "Live relay / YouTube calls — transport stubbed at server.send (the product's single network seam); no live call made or claimed", "Vault surrogate credential attachment inside the real send() — stubbed out in this bench, not exercised" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 14, "fail": 0, "na": 1, "total": 15 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "51f9297583e5f75c406fce5ff436e9158002ef6c54ba8f15462a4b5fd5668c04", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-envoy-mcp", "name": "Eclipse Envoy MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-envoy-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (two capability records via ENVOY_SURFACE; hosted split at E1)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 17 pass, 1 na of 18 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/envoy.py. Runs 1-2 PARTIAL cards retained append-only (bench-suite defects); run 3 is the standing card.", "not_tested": [ "Any live counterparty or hosted endpoint — E0 is fully offline against local fixtures (.example domains, fixture keys); E1 is owner-gated (hosting go, trademark screen, Herald root-key backup, cetech.ai flip).", "Card fetch from a counterparty's real well-known URL — E0's harness presents the card + the domain's JWKS as local files; the verification checks are the production checks, the fetch is the fixture seam.", "Herald gateway execution against real desk agents — E0 records Herald delegation REFERENCES for the three-key rule; live gateway delegation is Herald's own certified scope.", "Real Wallet mandate issuance — E0 records operator-entered Wallet-shaped mandate references; Envoy never mints mandates.", "Operator-channel authentication beyond process ownership (the standing U1 note) — E1 build decision with attributable-principal receipts required by spec 11.2.", "T-NDA fact contents are labeled E0 fixture placeholders; real T-NDA facts are human-authored into the identity source at E1." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 17, "fail": 0, "na": 1, "total": 18 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-envoy-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "3def110c65666d985301e9784ae801f0222cb011c3040e934bd237656a430b90", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-envoy-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-fathom-mcp", "name": "Eclipse Fathom MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-fathom-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fathom.py. Run 1 PARTIAL card retained append-only (bench-suite defect); run 2 is the standing card. Non-failing bench observation: spender resolution in allowance_audit is chain-agnostic; chain-aware resolution recommended before D1 (queued as a bench note).", "not_tested": [ "Live RPC reads — D0 ships ONLY the fixture transport behind the chain_adapter seam; no live chain was queried, and no live transport exists in this package. The seam + transport contract is the deliverable; a live transport must be implemented and benched before any read is called live.", "Seed Registry facts (contract addresses, audit firms/dates) are marked [verify] per entry for the first human release review; the release signature attests this seed file, not a completed re-audit.", "Execution, drafts, simulation, and signing (spec D1+) — no such code path exists in D0.", "Non-EVM chains and perps/bridge/vault chapters (D3) — out of D0 scope." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-fathom-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "b5d16eb582512ea70f1d15d257d371723a2aaa0693d36a1e617b43c123361664", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-fathom-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-codex-mcp", "name": "Eclipse Codex MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-codex-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/codex.py. Run 1 FAILED retained (genuine product defect U5: clock_status on an unknown instance id returned a raw -32603; fixed class-wide via require_str_id plus a transport schema refusal, then re-benched clean). Run 2 FAILED retained (bench-suite assertion bound to the pre-fix refusal shape). Non-failing observation: a whitespace-only redaction reason is currently accepted (queued as a bench note).", "not_tested": [ "Real provision corpus — R0 library carries public-domain-shaped FIXTURE records with real CFR citations; the live eCFR / Federal Register corpus and change-feed mechanics are R1 scope", "Real OFAC SDN / Consolidated list data — R0 screens against a SYNTHETIC fixture list shaped like the SDN list; no real list was downloaded", "A real institution — R0 runs against the synthetic Meridian Fictional Bank fixture only; first real use is the owner-gated R1 design partner, inside that institution's boundary, after counsel review (spec 22)", "Deadline values flagged [verify] in the spec (OFAC reporting clocks, per-charter SAR variants, CTR extension mechanics) — carried as fixture values with the flag visible in the rule record" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-codex-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e046fea812ff8daf7eaee58eb475525b7c9b3d5b87ba7705925ba651a759d618", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-codex-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-ledger-mcp", "name": "Eclipse Ledger MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-ledger-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/ledger.py. Run 1 FAILED card retained (bench-suite probe-ordering defect; product behavior was correct); run 2 is the standing card. Verity adjudication A1 on the card: the settled-backfill exclusion boundary matches spec section 3.3 intent.", "not_tested": [ "Any live odds feed — B0 odds are fixtures shaped like The Odds API v4 responses; no feed account exists and none was contacted (licensed signup is an owner step).", "Live-user operation of any kind — the spec's counsel gate (D4) precedes any live-user launch; B0 runs on synthetic records only.", "Real operator limit/exclusion sync — operator and state programs do not publish a consumer sync route; B0 honors user-declared + user-provided records identically (spec 3.3).", "Jurisdiction matrix freshness against live sources — B0 rows are fixture data as of 2026-10-25 with a 30-day TTL that degrades verdicts to UNKNOWN; a sourced refresh pipeline is a live-phase item.", "Placement (T2/T3) — no placement capability exists in v1 by design (spec 6); there is nothing to test because there is no such tool." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 21, "fail": 0, "na": 1, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-ledger-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e4554366b5ff4d543a4fde30720439662425f009458f8682dcd9d9a29fbc41f5", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-ledger-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-till-mcp", "name": "Eclipse Till MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-till-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/till.py. Run 1 PARTIAL card retained append-only (bench-suite defects); run 2 is the standing card; zero product defects. Benched against a bench-owned catalog and bench-minted buyer cards/mandates (the builder's fixtures were never used). Ads Rail P1 extension: CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 100/100 on the scoped D1–D4 re-bench (scorecard eclipse-till-mcp-2026-10-25-3.json; 31/31 re-bench checks pass; the original PARTIAL 76/100 frame is retained in the card's provenance note). The rail is Stripe TEST MODE ONLY, runs against the labeled local simulator in this environment, and is NOT PROVEN IN STRIPE: no Stripe test account was wired, W2 is not proven, and no card was attached to any ad platform.", "not_tested": [ "Real payment rails — B0 settles on the sandbox test-credit ledger only; Stripe (card) and x402 rails are B1, owner-gated with a counsel note; no Stripe/x402 code exists in the B0 build (the Ads Rail P1 extension adds Stripe TEST MODE code only; see the extension note)", "Live Bazaar catalog join — B0 ships a 7-SKU fixture subset modeled on bazaar-mcp/catalog.json; the discovery MCP is read as data only, never extended or written", "Third-party sellers (B3) — certify-before-you-sell gates, seller vetting, 85/15 split computation, and seller payout/tax operator processes are spec'd, not built; B0-B2 are first-party only", "Auth enforcement beyond the stdio process boundary (bench U1 class) — buyer identity is cryptographic (Herald-shaped cards + signed mandates), operator verbs require the fixture operator token; hosted transport auth is a B1 design item", "Ads Rail in Stripe itself — NOT PROVEN IN STRIPE: no Stripe test account exists in this environment, so the rail's proof is against its labeled local simulator plus the code path that activates only with a Stripe test key; W2 (real Stripe sandbox behaviour) remains unproven and the live gate stays blocked.", "Live Stripe Issuing, real-money funding, and ad-platform card attachment — not built or attempted; the test-mode fence refuses live-mode keys at startup." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 23, "fail": 0, "na": 1, "total": 24 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-till-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "2513a6fcce13c6e5ea60dfbd635a74f949b836363568909fa9e4749d110087e1", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-till-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-book-mcp", "name": "Eclipse Book MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-book-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/book.py. Non-failing bench observation: the probability-field guard runs post-commit (a poisoned instrument persists in state; every read of it fails closed) — pre-commit move queued for M1 hardening.", "not_tested": [ "Live venue reads of any kind — M0 contains no network code path; adapters run against fixtures shaped like the real public API responses behind a transport seam. Live public-read verification is a later M0-exit step.", "Order placement, account reads, and the Wallet mandate gate — M2/M1 scope, owner-gated (spec 18, decision D3). M0 order_draft records an unsubmitted DRAFT with mandate_pre_eval NOT_EVALUATED; no submission path exists.", "Fee schedules as live data — shipped schedules are fixture-shaped records with provenance labels saying so; the live fetch + account-specific tier provenance lands with the adapters' live step.", "Kalshi / Polymarket US / Kraken / Binance.US / Alpaca chapters — specced (suite spec 10-12), not built in M0." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 16, "fail": 0, "na": 1, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-book-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a5c9628d6e41a819723bd2da919efc8e7de6ba0da3ba180f4cb5e621f077a896", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-book-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-forecast-mcp", "name": "Eclipse Forecast MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-forecast-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/forecast.py.", "not_tested": [ "Live Gamma / CLOB public reads — M0 runs against fixtures shaped like the real public API responses behind a transport seam (load_fixtures); the live public-read transport is a later verification step.", "Polymarket US (QCX) data or trading — a separate CFTC-designated venue with its own chapter (spec 12.1), M2+ phase; Global and US data never blend in one Quote.", "UMA oracle state beyond the fixture set — dispute windows/finalization tracked as fixture-shaped Resolution records in M0.", "Any trading surface — absent by design (Grade X for US persons, spec 4.2/8.2); nothing to test because the capability does not exist." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-forecast-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "06476b30178dda5cd3c91669fe05e011350ebb32a8f21a1a3778264d66997715", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-forecast-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-strike-mcp", "name": "Eclipse Strike MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-strike-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 13 pass, 1 na of 14 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/strike.py. Run 1 PARTIAL card retained append-only (bench-suite parity assertion defect); run 2 is the standing card.", "not_tested": [ "Live Coinbase public reads — M0 runs against fixtures shaped like the real public product/book responses behind a transport seam (load_fixtures); live public-read verification is a later step.", "Account anything — Coinbase's official account MCP exists and Strike's account posture is a governed WRAP of it (spec 10.1), M1+ scope. No account tool exists in this build; the vendor's Wallet/CDP MCP surfaces are other suites' chapters and are out of scope here.", "Account-specific fee tiers — M0 uses the public schedule shape, labeled as such; the account's own reported rates supersede at M1." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 13, "fail": 0, "na": 1, "total": 14 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-strike-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a48c58f8aa7ef8a67bd295650f2e9750a2c5be4381ae3007dd268b9840485804", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-strike-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-meter-mcp", "name": "Eclipse Meter MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-meter-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass, 1 na of 20 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/meter.py. Run 1 PARTIAL card retained append-only (bench-suite self-defect in the M11 hash assumption, disclosed on the card); run 2 is the standing card; zero product defects. N-CHECK passed: signed records verify offline with the exported pubkey only. Two non-failing observations on the card: the export verify_note omits signer_fingerprint from its signed-body description, and provenance raw_hash covers raw + an internal index (internally consistent, not recomputable from the stored raw alone).", "not_tested": [ "Live provider ingest — NOT built. v0 ships the fixture transport only (named fixture batches + inline records through the same seam); each adapter's live form requires the operator's own credentials and a per-adapter go (spec §5.5). A live transport must be implemented and benched before any ingest is called live.", "Dogfood wiring — the dispatcher/worker spend ingest (cluster law L10: CETech's own agent spend as the first real source) is a LATER step and is not wired in v0; no own-spend claim is made from this build.", "Hosted / multi-tenant analytics — later phase, separate spec delta (spec §5.1).", "Production signing-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision, Fathom D0 precedent.", "Hosted/multi-tenant operation and auth beyond the stdio process boundary (bench U1 class)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 19, "fail": 0, "na": 1, "total": 20 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-meter-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "4067c71df47b788cd5cd42e34ad718f7773c67c533b62e2576ffa7f8710cdde0", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-meter-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-tripwire-mcp", "name": "Eclipse Tripwire MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-tripwire-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/tripwire.py. Run 2 FAILED (T10: a within-batch duplicate event_id was stored twice and double-counted by the velocity detector) and run 1 PARTIAL cards retained append-only; the defect is fixed, the class closed (single validator call site, verified by source reading), and run 3 is the standing card. Novelty (NV) proven: verified actuation distinguishes Tripwire from logging/observability tools. Two detector evasions (signature-split loops, paced spawn fan-out) are documented SPEC NOTEs, unchanged by design.", "not_tested": [ "Live-rail freeze — v0 acts on the sandbox Agent Wallet only; freezing a live mandate inherits the Wallet P3 gate wholesale (spec 6.5)", "Live event streams — v0 consumes recorded fixture streams shaped as Meter cost records and Wallet events; no live Meter ingest exists (Meter itself is fixture-form at v0)", "External paging channels (SMS/push) — owner pages are notification records + receipts in v0; channel integrations are a later phase (spec 6.1)", "Cluster 1 Lineage feed for spawn counts — v0 spawn detection runs over declared spawn events in-stream; the Lineage join lands when Lineage is built", "Hosted/multi-tenant operation and auth beyond the stdio process boundary (bench U1 class)" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-tripwire-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "73f888de950db040b718150ea1a468234467a591d5686b21e76c2679f03e87f6", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-tripwire-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-umbra-mcp", "name": "Eclipse Umbra MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-umbra-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18 pass, 1 na of 19 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/umbra.py. Run 1 PARTIAL card retained append-only (bench-suite assertion defect, disclosed on the card; no product code touched); run 2 is the standing card; zero product defects. N-CHECK: NOVELTY_PROVEN — a closed-vocabulary witness: signed findings with reproducible evidence packs and rebuttal linkage, not diffs. Non-failing observation on the card: punycode-shaped domains are not IDNA-decoded by the skeleton engine; IDNA-decode is recommended before G-LIVE.", "not_tested": [ "Live registry observation — v0 imports snapshots only; live crawling is G-LIVE per registry (spec 5.6) and is NOT built", "Distribution of findings (T2 watch bulletins) — operator-mediated until G-REG + G-COUNSEL per spec chapter 7", "Real registry snapshots — v0 benches against fixture registries shaped like real exports; no real registry was contacted", "Findings-key rotation/revocation distribution via Eclipse Revoke — Revoke is a later C1 chapter; rotation is rehearsed at the key-file level only" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 18, "fail": 0, "na": 1, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-umbra-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "db4f8a797375462b31c4cad5f6019edc847fe554aa14ce89b5de60a5ea0a7698", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-umbra-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-test-bench", "name": "Eclipse Test Bench", "product_url": "https://eclipsebazaar.com/products/eclipse-test-bench/", "listing_class": "tool", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "CLI (local)", "hosted run service (planned)" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-test-bench.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "eclipse-stocktake", "name": "Eclipse Stocktake", "product_url": "https://eclipsebazaar.com/products/eclipse-stocktake/", "listing_class": "tool", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "CLI (local)", "CI action (planned)" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-stocktake.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "eclipse-press", "name": "Eclipse Press", "product_url": "https://eclipsebazaar.com/products/eclipse-press/", "listing_class": "tool", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "CLI pipeline (local)" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-press.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "herald-card-kit", "name": "Herald Card Kit", "product_url": "https://eclipsebazaar.com/products/herald-card-kit/", "listing_class": "tool", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "CLI (local)", "library" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/herald-card-kit.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "eclipse-blackbox-mcp", "name": "Eclipse Blackbox MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-blackbox-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 22 pass / 0 fail / 0 na of 22 checks. Run by W-003 (Verity), suites/blackbox.py, against bench-provisioned credentials and bench agent streams. Run 2 FAILED (U5: bare int() coercion in record_read's seq/limit filters escaping as a raw -32603) and run 1 PARTIAL cards retained append-only; the fix (coerce_int_param guard) was verified on the wire at raw JSON-RPC level, including a 114-probe schema-enumerated type fuzz over every parameter of all five tools, and the guard is ruled APPROVED as the house reference implementation for the raw-coercion defect class; run 3 is the standing card. U1 is a genuine pass (a real credential layer exists). N-check stands: the recorded agent cannot read, grade, or rewrite its own record; the recorder receipts its own gaps. Tail-truncation claim verified exactly as stated (detectable only against a previously exported pack head — the product claims no more).", "not_tested": [ "Hosted multi-tenant recorder and any CETech-hosted recording of customer data — owner gate G-C3-1 (spec §15); v0.1 is a local single-store recorder only.", "OS-level isolation on a shared host — v0.1 isolates by recorder-held key + credential scoping + an append-only engine with no mutation code path; it does not claim an OS boundary the build does not create.", "External chain anchoring (spec §6.3 v1 hardening) — not built; tail-truncation of the store file is therefore detectable only against a previously exported pack head, which the README states plainly.", "Concurrent writers — the store is a single JSON file grown per call; one recorder process at a time.", "Streaming ingestion adapters from third-party frameworks (spec §6.1 gated) and legal-hold export formats beyond the evidence pack (counsel review) — not in v0.1.", "Dogfood wiring (recording worker runs) — a later ops step per the build brief; this build ships the recorder plus its fixture stream only." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 22, "fail": 0, "na": 0, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-blackbox-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a94820e021d6e3973e6ed72b016d3ffe018ddd896cbb3099caf97ae387ad407a", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-blackbox-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-docket-mcp", "name": "Eclipse Docket MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-docket-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 7 (standing): 19 pass / 1 na (U1 auth: stdio process boundary) / 0 fail of 20 checks. Run by W-003 (Verity), suites/docket.py, over a bench-owned Till-shaped export and bench parties. Runs 1–6 FAILED cards retained append-only: run 3 caught four tool descriptions missing the mandatory descriptor (spec section 12 — 'Not a court, not a legal judgment' rides every surface); run 4 caught D12 — offset-naive at_time values escaping as a raw -32603 when compared against offset-aware stored times — fixed under the adjudicated refusal shape (parse_time refuses offset-naive timestamps by name, AT_TIME_OFFSET_REQUIRED: a guessed timestamp in a dispute record is a falsified timestamp), and parse_time is APPROVED as the second house reference guard; runs 5–6 failed on bench-suite setup defects, disclosed on their cards (no product code touched). Silence ruling (run 3, upheld): expiry records silence and makes the case determinable, never an outcome. Novelty: NOVELTY_PROVEN.", "not_tested": [ "Arbitration / determination as a service to third parties — NOT built; owner + counsel gate (spec 12.1/12.6). v0 determinations run over our own products' receipts only", "Evidence classes beyond Till receipts (Escrow jobs, Wallet payments, Toll metering counts, TrueVolume attestations) — spec'd in section 12.1, not built; v0 refuses other classes by name (EVIDENCE_CLASS_UNSUPPORTED)", "Live hand-back transport — the outcome hand-back in v0 executes against till_stub.py, a labeled fixture stand-in for Till's refund machine applying Till policy-as-code to its own mirror ledger; no live Till process is called", "Auth enforcement beyond the stdio process boundary (bench U1 class) — party scoping is by Herald card hash presented per call; hosted transport auth is a later design item" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 19, "fail": 0, "na": 1, "total": 20 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-docket-mcp-2026-10-25-7.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a99567c7d013938aed82fed18a096530a39cf0900df4392ae3eade96095276ab", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-docket-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-countermark-mcp", "name": "Eclipse Countermark MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-countermark-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/countermark.py. Run 2 is the standing card; run 1 is retained append-only. N-CHECK: NOVELTY_PROVEN — one neutral verification call across card and mandate formats returns a signed finding envelope enumerating the checks actually performed, with presented-only artifacts capped at UNRESOLVED.", "not_tested": [ "Live issuer-key discovery — NOT built (G-LIVE per format, spec ch.13). v0 verifies over fixture issuers only; an unknown domain caps at UNRESOLVED with the ceiling stated in provenance.", "Hosted per-call merchant API — NOT built (T2 + G-OWNER); pricing is Till/x402 territory, consumed not built.", "Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600), distinct from any identity key (§5.7); custody is a gated decision." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 23, "fail": 0, "na": 1, "total": 24 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-countermark-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "d7e372c74777a12ec82a916dd67fe36eaccdfee644b4e7286aeafd134feb925d", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "CURRENT", "drift_status": "CURRENT", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-countermark-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-census-mcp", "name": "Eclipse Census MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-census-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/census.py. Run 2 is the standing card; run 1 FAILED card is retained append-only. N-CHECK: NOVELTY_PROVEN — the render path itself enforces discovery law: an item that cannot cite a receipted discovery event cannot render, and source claims stay attributed per source and are never promoted to Census fields.", "not_tested": [ "Tenant connectors (Microsoft Entra Agent ID, Google, cloud agent services) — NOT built. Gate N1: each adapter requires the customer's admin authorization record per tenant plus owner approval. Those families render in every coverage section as available-but-unauthorized.", "Endpoint / manifest collectors and any network discovery — held by spec §7.7 (later phase, own spec). Discovery of systems the customer does not administer is T3-permanent: no probe/scan/enumerate capability exists in this package and there is no network code in v0.", "CETech fleet live dogfood export (§7.6/§15) — a CETech-fleet SEED FIXTURE ships as dogfood-shaped data; the standing live fleet inventory export as the first real Census artifact follows the dogfood loop after bench, and is not claimed from this build.", "Hosted / multi-tenant operation and auth beyond the stdio process boundary." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 23, "fail": 0, "na": 1, "total": 24 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-census-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "67807b0c7fb98e912ed070472ebcadcded7dcd3ce502931d11965cba888ad68c", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-census-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-crosswalk-mcp", "name": "Eclipse Crosswalk MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-crosswalk-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/crosswalk.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a versioned obligation library with as-of resolution and a role dimension produces fact-hash-bound candidates whose determination stays permanently empty and customer-owned, with mandatory evidence-pack gaps.", "not_tested": [ "Live customer data (gate X1) — not built/run: counsel review of claims/output language + design-partner deployer required first (spec §6.8).", "Remaining regime chapters (California, New York, Illinois) — later data chapters per §6.1." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 21, "fail": 0, "na": 1, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-crosswalk-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "b50b6ee0628c23c4e5938fc4167308002afd736bb3f96af8b3d1542edba9f835", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-crosswalk-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-redteam-mcp", "name": "Eclipse Redteam MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-redteam-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 26 pass, 1 na of 27 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/redteam.py. Run 3 is the standing card; runs 1–2 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — probe construction is downstream of a signed, in-date authorization record plus arena or harness registration proof; with neither, no probe object is constructed at all.", "not_tested": [ "External runs — none performed or built for. First external run requires counsel review of the authorization instrument (spec §9.6) and a named owner decision on services posture.", "Live twins / hosted arenas — NOT built. v0.1 loads in-repo fixture twin config artifacts into the local harness; fixture transports only; no network egress exists in the package.", "Continuous/recurring simulation subscriptions — gated post-v0.1 (spec §9.1).", "Benchmark publication / cross-customer data use — absent by cluster law §2.6; no cross-customer data flow of any kind in v0.1.", "Production signing-key custody — v0.1 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision.", "Hosted/multi-tenant operation and auth beyond the stdio process boundary." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 26, "fail": 0, "na": 1, "total": 27 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-redteam-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "06d64a1008009fcb754c62d57d5c57e789e69d3b572e6779c68a58c53a65d39a", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-redteam-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-span-mcp", "name": "Eclipse Span MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-span-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio (HTTP transport on roadmap)" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/span.py. Run 5 is the standing card; runs 1–4 FAILED cards are retained append-only. N-CHECK: NOVELTY_PROVEN — a proposed spawn is checked against a total componentwise attenuation order walked to an owner-signed root, with subtree budgets enforced at every ancestor.", "not_tested": [ "Blocking enforcement inside external frameworks — gated on framework hook availability per framework (spec §5.5); v0 claims check-and-record only, NOT a blocking gate.", "Cross-organization chains — gated on Envoy counterparty vetting tiers; v0 verifies foreign chains as evidence only (T1 verdict on presented artifacts), never registers foreign roots as trusted.", "Production signing-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision.", "Hosted / multi-tenant operation and auth beyond the stdio process boundary." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 23, "fail": 0, "na": 1, "total": 24 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-span-mcp-2026-10-26-5.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "2439e75506ea070d8fb37b53db20d83e8e1cc5ed617b65c99ff208201b678a01", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-span-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-airtime-mcp", "name": "Eclipse Airtime MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-airtime-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 23/23 checks. Run by W-003 (Verity), suites/airtime.py. The original PARTIAL card (20/23; D1 MEDIUM + D2 HIGH) is retained append-only; the scoped re-bench card -2 closed both defects and is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — spend enforcement happens pre-call, ad copy is bound to a signed claims record at the publish path, and every mutation or refusal seals into an advertiser-held evidence ledger. Simulator/test-double only; no live transport, campaign, or spend was tested.", "not_tested": [ "Live Meta transport — NOT built and out of P0 scope: simulator/test-double only; no live spend exists.", "Standalone Claims Checker as a separate Bazaar Tool — P1 per spec §3.3; P0 ships the internal harness form (tools/claims_checker.py), exercised as part of the benched product surface.", "Google/TikTok/X/LinkedIn/Reddit phases (P1/P3), hosted connector + CASA posture (P2), and Till billing composition (P2).", "Production Herald custody for the signing key — P0 uses a local seed key (keys/, gitignored, chmod 600); production custody is a hard gate before any P2/live scope." ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-airtime-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "39fcb6d80043a12a472b7d195b1f11e503a546e91a1ba3d8d9435a49e8fc934a", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-airtime-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-friction-mcp", "name": "Eclipse Friction MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-friction-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 41 pass, 0 na of 41 checks. Run by W-003 (Verity), scoped re-bench of the D1–D7 fix round; the original PARTIAL card (34/41) is retained append-only and this -2 card is the standing verdict basis. N-CHECK: NOVELTY_PROVEN — a friction filing surfaces only after the board recomputes its Herald-signed, hash-chained trace pack, so faking a filing requires actually executing the calls and holding the identity key; fixes surface only the same way (clean recompute plus a CLEAN bench replay receipt).", "not_tested": [ "Hosted/public board (P1) — NOT built; P0 is local stdio only, scope local.", "Live Herald service integration — P0 consumes Herald-shaped signed cards/JWKS presented per call and a local Revoke record list; no network calls exist.", "Test Bench REPLAY execution — Friction consumes Bench replay receipts registered out-of-band in local state; the Bench harness itself is a separate product and the board never executes vendor tools." ], "bench_date": "2026-10-25", "bench_version": "0.1.0-rebench-2", "bench_score": { "pass": 41, "fail": 0, "na": 0, "total": 41 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-friction-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "068ec7555aa7b87ca83677ffda4e2e7fc0435fa1a6fb3a15fcdc187e10144e30", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "DRIFTED", "drift_status": "DRIFTED", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-friction-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-steward-mcp", "name": "Eclipse Steward MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-steward-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — two disjoint surfaces selected by ECLIPSE_STEWARD_SURFACE (operator | agent); simulated route fixtures, no live platform" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 27 pass, 1 na of 28 checks (U1 auth: stdio process boundary; surface disjointness scored as product checks in S8). Run by W-003 (Verity), suites/steward.py. Runs 1–3 FAILED retained append-only; run 4 is the standing card — S11 (approval content-hash re-verification at dispatch), S12 (draft-TTL re-check at dispatch), S19 (expiry bookkeeping kept out of the signed canonical form), S7, and S10 fixed and verified. N-CHECK: NOVELTY_PROVEN — the only-dispatch-path governance core: the agent surface holds no dispatch verb and no credential, the gate re-checks mandate/kill/disclosure/caps/grant at dispatch, disclosure is verified data that drives posture, and every read is receipted; 0 of 20 chat-API-shaped verbs exist on either surface. Local/simulator scope only.", "not_tested": [ "Live platform adapters (Slack / Teams / Discord) — NOT built in v0.1; simulator route fixtures only, no credentials, no real messages sent", "Herald JWS mandate signatures — v0.1 signs with a local HMAC operator key, the spec's local stand-in; production key custody is a gated phase", "Hosted venue service — a separate, unbuilt phase gated on Eclipse Connect P2 decisions", "Name: 'Eclipse Steward' is CONDITIONAL under brand system §3 — trademark/confusion screen pending before any public surface; fallback name Eclipse Usher" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 27, "fail": 0, "na": 1, "total": 28 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-steward-mcp-2026-10-26-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "d22ef7acca80b33cc4e38c95bdb4b06a3cc48ae44db76c784ebfe56a27ff96bc", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-steward-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-proof-mcp", "name": "Eclipse Proof MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-proof-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25 (bench clock UTC 2026-10-26; run 2 standing), 35 pass, 2 na of 37 checks. Run by W-003 (Verity). Run 1 FAILED card retained append-only: its sole failure (NC-2) was a bench-suite self-defect, fixed in the suite — no product code touched. Scope of certification: the governance core, Proof Print and Proof Trace benched against a declared SIMULATED Resolve-shaped adapter — P0 makes NO live-Resolve claim (no Resolve Studio seat exists on the build VM; the Studio license, spec LG-1/D3, is an owner purchase). N-CHECK: NOVELTY_PROVEN — export executes only against a Herald-signed approval pinning the canonical edit-decision fingerprint; incumbent-shaped fixture exports a drifted cut, and the vendor-verb census is 6/15 = 40% renamed (<80%).", "not_tested": [ "Live DaVinci Resolve Studio adapter — not built; P0 adapter is simulated (spec LG-1/D3 Studio license is an owner purchase).", "Frame.io connector (spec §10) — specced, built P2.", "Proof Trace OTIO/AAF/EDL — P2; FCPXML only at P0.", "Print OCR/ASR extraction — embedded text track at P0; low-confidence path fail-closed and benched via fixture.", "Premiere UXP adapter — P1." ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 35, "fail": 0, "na": 2, "total": 37 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-proof-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "de82783b538b11c333588a250720b2a08bdebd62b7945daa6450707b26e99666", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-proof-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-charter-mcp", "name": "Eclipse Charter MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-charter-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, run 3 (standing): 24 pass, 0 fail of 24 checks. Independent Verity bench with own fixtures; runs 1–2 PARTIAL cards retained append-only — both failures were re-derived as bench-harness defects (2dp expectation; fuzz predicate), product code unchanged. Scope: local / P0 only — the adapter is a local Plaid-shaped fixture form and the dogfood run is fixture-form; NO live Plaid claim is made. Descriptor-bearing product: the descriptor was verified on 100% of envelopes including refusals over stdio (T15/T15b). N-CHECK: NOVELTY_PROVEN — 27.3% renamed vendor verbs; policy-of-record + cross-account wash-sale watch + grant-keeper is a mechanism no incumbent ships.", "not_tested": [ "Live Plaid pull — P0 adapter is local Plaid-shaped fixture form; live connector run is a separate gate.", "P1 grant-keeper GA (real Schwab OAuth choreography) — P0 bench uses the simulated Schwab clock fixture per spec §15.1.4.", "P2 order submission — no live/paper broker rail at P0; mandate leg benched at engine level (prepare-check only, PREPARED never implies submittable).", "Hosted/multi-tenant operation beyond the stdio boundary." ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-charter-mcp-2026-10-25-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "7003680b935cde0e84aca685c48f771b6e5ab7cf69161f6cc38e79f63a98afe6", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-charter-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-colophon-mcp", "name": "Eclipse Colophon MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-colophon-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, 19 pass of 19 checks, synthetic fixtures only (5 build-fixture titles + 1 bench-own title; all 8 divergence classes exercised). Independent Verity bench with own fixtures; run 1 card retained append-only. Scope: local/simulator — NO live retailer, KDP or connector data (KDP has no author API; connector fetch is P1/D3-gated and absent; Watch is D4-gated and absent). N-CHECK: NOVELTY_PROVEN — a signed catalog of record whose royalties are recomputed line-by-line and whose pirate-source refusal is structural; benched against BookReport/ScribeCount-shaped dashboards, which keep no record and recompute nothing.", "not_tested": [ "Live retailer / KDP data — KDP has no author API; P0 is synthetic fixtures only.", "Connector fetch — P1/D3-gated, absent at P0.", "Watch — D4-gated, absent at P0.", "commerce_verify_offer against live commerce — P2 surface; simulator-proven at P0 only.", "The owner's real book as dogfood — deferred by the owner; P0 fixtures are synthetic." ], "bench_date": "2026-10-25", "bench_version": "independent-bench-1 (Verity phase, own fixtures)", "bench_score": { "pass": 19, "fail": 0, "na": 0, "total": 19 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-colophon-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "8bbd879ca704edcf25c7adca909971e19fe4c517adad26d40c0bed4f647e0be8", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-colophon-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-tether-mcp", "name": "Eclipse Tether MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-tether-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 31 pass of 31 checks. Run 1 PARTIAL (30/31) retained append-only: its sole failure was a bench-assertion defect in H10 (compared full error dicts incl. the caller-echoed tool name), not a product defect. Scope: SIMULATOR ONLY — P0 is ROS 2 + Gazebo + UR-class arm sim, in-process; NO hardware claim of any class is made. Liability counsel gates P1 real motion only. N-CHECK: NOVELTY_PROVEN — rename census 6/22 = 27% (<80%); the mandate-and-bridge mechanism exists in no incumbent (Boston Dynamics ships dispatch in Orbit; nobody ships the signed authority layer).", "not_tested": [ "Real hardware of any class.", "Real vendor SDKs (Spot / Unitree / UR-RTDE).", "Real e-stop / lease hardware.", "Isaac Sim.", "Multi-robot sessions.", "Hosted / multi-site operation.", "T2 direct motion (refused by design, §3).", "Closed platforms: Tesla Optimus, Figure, Apptronik, Atlas, NEO (no surface exists, §4.1).", "Orbit dispatch (vendor's, not ours, §4.2)." ], "bench_date": "2026-10-25", "bench_version": "verity-0.1.0", "bench_score": { "pass": 31, "fail": 0, "na": 0, "total": 31 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-tether-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "492fe7fe417abf619001c4168cf3d8ffa32d43e76657955c136f469cf1e47c2f", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-tether-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-proving-mcp", "name": "Eclipse Proving MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-proving-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 10 pass, 0 na of 10 checks — scoped re-bench of run 1's failing lines (B9 class integrity, B10 time expiry, B11 envelope hostility) plus the B12 D-4 limb, all re-probed PASS with bench-own fresh shapes; D-1 (evidence-class laundering via registry config), D-2 (lease/mandate time expiry never enforced), D-3 (envelope crashes), D-4 (struck live-transport env claim) all CLOSED. The original PARTIAL card (run 1: 10 pass / 1 partial / 3 fail — test-bench/results/eclipse-proving-mcp-2026-10-25.json) is retained append-only and this -2 card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulator) and nothing broader. The adapters are simulated-PS: fixture packs are evidence class fixture, qemu/renode packs are evidence class EMULATOR (content is a deterministic simulated PS inside the adapter). NO live transport was exercised at any point in either bench run — no QEMU process, XSDB/GDB/TCF session, or Renode monitor ran — and spec §12.4 exit checks X4/X5 are still owed before any transport-level interop claim. Non-gating observation carried on the standing card: a session whose lease time-expires seals no gap pack on expiry (contrast §11.3, which lists lease_expiry among gap-record causes); whether an expired session's evidence should also seal is an open spec question, flagged by the bench, not silently passed over. N-CHECK: NOVELTY_PROVEN (run 1, carried) — bench authority only inside a Herald-signed mandate binding agent × board × op-class × exact artifact hash, enforced at the bridge, every session incl. gaps/refusals sealed into an offline-verifiable pack; incumbents (fpga-mcp / VivadoMCP / probe-rs / labgrid) have no pin to mismatch and no pack.", "not_tested": [ "Live transport of any kind — no QEMU process, XSDB/GDB/TCF session, or Renode monitor was exercised in either bench run; the qemu/renode adapters run deterministic simulated-PS session scripts in-adapter. Spec §12.4 exit checks X4/X5 (live XSDB vs AMD QEMU, Renode monitor/GDB) are still owed before any transport-level interop claim.", "Physical bench hardware — HwServerAdapter is an ADAPTER_NOT_IN_PHASE stub; zero bench-class packs exist or can be produced at P0, correctly.", "PL (FPGA fabric) behavior — not modeled by plain QEMU and not claimed; bitstream loads on emulator/fixture targets are recorded with that semantics note.", "Production Herald key custody — P0 verifies against labeled deterministic TEST keys (spec §9) behind the production verify interface; production custody is a gated owner decision, not a P0 claim." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 10, "fail": 0, "na": 0, "total": 10 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-proving-mcp-2026-10-25-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "60abfff0c738ae252e06724673b10c76a61a53345defe8a962182f93a649684a", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-proving-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect-beyondcompare-mcp", "name": "Eclipse Connect · Beyond Compare MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-beyondcompare-mcp/", "listing_class": "connector", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulated)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulated) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench (fix round 1): 26 pass, 0 na of 26 checks — the first bench's two major defects (D-ENV: envelope type guard at both serving layers; D-REVOKE: pack_fetch re-checks grant state after revoke, byte-identical refusal, no oracle) fixed and re-probed PASS, regression spot-lines A1–A6 / B0–B8 / C1–C8 / G1 unbroken; the full bench script also ran end-to-end out-of-scope at 42/42. The original PARTIAL card (40 pass / 2 fail of 42 — test-bench/results/eclipse-connect-beyondcompare-mcp-2026-10-25.json) is retained append-only and this re-bench card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulated) and nothing broader. The adapter is a scripted stand-in throughout (the documented-CLI adapter is a stubbed interface only); evidence class SIMULATED; NO live Beyond Compare run was exercised at any point in either bench run — live BC exercise is OWED at P1 on the owner's license (vendor trial fallback) before any live claim. MECHANISM: Herald-signed recomputable compare-evidence packs over mandate-granted paths; merge = T3 ECDSA approval-bound with base-drift refusal. N-CHECK: NOVELTY_PROVEN — 0/6 renamed vendor verbs (fail line ≥80%), shim score 1/20 (ceiling ≤20%); the novelty is the mandate/custody + evidence layer, never the bridge. Not Scooter Software. Not endorsed by Scooter Software. The customer supplies their own Beyond Compare license.", "not_tested": [ "Live Beyond Compare exercise — no licensed install was run in either bench; the adapter is a scripted stand-in throughout and the documented-CLI adapter is a stubbed interface only. The live bench is OWED at P1 on the owner's license (vendor trial fallback) before any live claim.", "Hosted-relay / multi-seat form — P0 is a single-seat edge bridge on the license-holding machine; the hosted form is a P2 decision-gated shape, not built.", "Production Herald key custody — P0 signs mandates and T3 approvals through the PinSigner port's local signer (identical grammar; artifacts record signer: local); production custody is a gated owner decision, not a P0 claim." ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 26, "fail": 0, "na": 0, "total": 26 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-connect-beyondcompare-mcp-2026-10-25-rebench-fixround1.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e88d574542929ce2c53fb7e86b86cf55cae7976fff6691c2c8b0a1aa10b8753f", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect-beyondcompare-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-wageward-mcp", "name": "Eclipse Wageward MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-wageward-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-wageward-mcp-2026-10-25-5.json (scoped re-bench -5): 20 pass, 0 na of 20 checks. CEILING — read exactly: this certifies the approval-and-evidence rail at local scope over a SYNTHETIC workforce, and nothing broader. Wageward is an approval-and-evidence rail ONLY — it is not a system of record, has no payroll-calculation or tax engine, and the submit-class tools (payroll_run_submit / filing_submit) are ABSENT from the surface by design in P0/P1: the bench verified by live stdio that calling one returns unknown-tool. Every approval/filing packet carries the mandatory statement that approval does not transfer payroll-tax liability (the employer remains liable); a packet missing it is invalid by construction. The four prior FAILED cards are retained append-only and cited here: eclipse-wageward-mcp-2026-10-25.json (FAILED), -2.json (FAILED), -3.json (FAILED), -4.json (FAILED — D2-GEN2 HIGH, separator-run identifier evasion) — the -5 scoped re-bench closes D2-GEN2 on every channel (live-stdio echo 7/7 bench shapes, persistence 2/2, approval-signing 4/4, plus fresh no-cap probes 8/8) on top of everything closed in -2/-3/-4. OPEN SPEC ITEM (not a P0 claim): receipt-TTL is an open spec item to settle pre-P1. N-CHECK: NOVELTY_PROVEN (stands — the fused fingerprint + Herald-signed approval + drift-refusal mechanism is unchanged by the fix rounds; no CRUD verb added).", "not_tested": [ "Live payroll/HR providers — P0 is an aggregator-shaped fixture adapter over synthetic data only; no live grant custody (P2), no real employer, employee, money, or filing", "Any real payroll submission or filing — submit-class tools are ABSENT by design in P0/P1; the internal simulated rail is exercised by the builder suite only, never exposed", "Production Herald/vault/KMS custody — P0 uses simulated per-tenant fixture keys", "Receipt-TTL behavior — open spec item, to be settled pre-P1" ], "bench_date": "2026-10-25", "bench_version": "0.5.0-scoped-rebench-4", "bench_score": { "pass": 20, "fail": 0, "na": 0, "total": 20 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-wageward-mcp-2026-10-25-5.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "b089807eb4d939f6a4cd2481ff531fd4983d09b5073c2edd6c947983a7db854b", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-wageward-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-covenant-mcp", "name": "Eclipse Covenant MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-covenant-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local/simulator) — Eclipse Bazaar Test Bench 2026-10-25, standing card eclipse-covenant-mcp-2026-10-25-4.json (scoped re-bench -4): 40 pass, 0 na of 40 checks (40/40 scoped lines: 37 independent harness lines + builder-suite line + surface line + workspace-integrity line). CEILING — read exactly: P0 is SYNTHETIC ONLY. No live outreach of any kind is certified or claimed; a counsel HARD GATE stands before any P1 live outreach, and it has not been lifted. Defect history, all retained append-only: base card eclipse-covenant-mcp-2026-10-25.json FAILED (28/35 — D1 CRITICAL revocation-wipe, D2 HIGH provenance downgrade); -2.json PARTIAL (44/45 — D1–D7 closed, D8 open); -3.json PARTIAL (27/29 — D8 closed on its shapes, D8b open at two entry points); -4.json closes D8b at all three entry points including the Gate state-tamper path (VENDOR_POSTURE_UNKNOWN, 0 sends, refusals sealed) with sweep-hardening verified fail-closed and no over-refusal; B5 posture exhaustion and rule-pack rigidity pass. BACKLOG: LOW notes from cards -2/-3 (B1 refusal sealing / stale pack at Gate only / clarification 5-minute window) remain open, LOW severity, recorded as not gating for P0 local/simulator certification. N-CHECK: NOVELTY_PROVEN (stands from bench 1; the D8b fix hardened the proven mechanism, changed no surface).", "not_tested": [ "Live outreach of any kind — P0 is synthetic only; counsel HARD GATE stands before any P1 live outreach", "Real DNC registry access, a real CRM (Follow Up Boss) connection, or real TrustedForm/Jornaya verification — all fixture-shaped at P0", "The backlog LOW items from cards -2/-3 (B1 refusal sealing / stale pack at Gate only / clarification window) — not re-benched in the -4 scope; status stands as recorded there" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-covenant-mcp-2026-10-25-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "c854c3946accedcb30547818d8d3a286f30367033c34695092e02fa6ddd0fee9", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-covenant-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-meridian-mcp", "name": "Eclipse Meridian MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-meridian-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local, synthetic scope)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, synthetic scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-meridian-mcp-2026-10-26-2.json (re-bench 1): 22 pass, 0 na of 22 checks. CEILING — read exactly: SYNTHETIC ONLY. No live PHI, no real EHR connection, and no live claim of any kind is certified. NO SIGNING CAPABILITY EXISTS IN THIS PRODUCT: the surface is exactly the 19 specced Core tools with zero finalize-class tools; the re-bench probed 14 finalize/sign aliases via tools/call (all unknown-tool), ran a byte-for-byte import probe on a live draft (no clinician_sign attribute; the draft stays UNSIGNED_DRAFT), and swept every shipped file — no sign-capable path exists under any name, and the clinician-sign simulator exists only as bench equipment under tests/. The prior card eclipse-meridian-mcp-2026-10-26.json (FAILED — 23 pass / 6 fail) is retained unedited; defects B-MER-1..5 are all CLOSED in this re-bench (sign-path removal, refusal-naming ruling, per-practice hash-chain partition, refusal sealing, plus the observation item). P1 GATES — all still closed: HIPAA counsel review, an executed BAA, and a design partner are required before any live phase; the Bridge already refuses live PHI without a BAA (BAA_REQUIRED, no break-glass). No prescribing surface exists in any phase. N-CHECK: PASS, carried from the 2026-10-26 bench (not re-run; the fix round changed enforcement within the same fused mechanism — gate / pin / sealed reads — and removed the sign path outright).", "not_tested": [ "Live PHI of any kind — P0 is synthetic-only by spec; no live claim exists until every P1 gate in spec §12.2 clears (HIPAA counsel + executed BAA + design partner)", "Any real EHR/platform adapter — the P0 Bridge is the HAPI FHIR sandbox stand-in only; no vendor adapter is built", "Clinician signing itself — by design: no signing capability exists in the product; the sign simulator is bench equipment in tests/ only, never a product surface (spec C3)" ], "bench_date": "2026-10-26", "bench_version": "0.1.0-rebench1", "bench_score": { "pass": 22, "fail": 0, "na": 0, "total": 22 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-meridian-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "a4f481482e7879e4f3ed25dcbcbfc1c8d800f89597c1d867af0e88ab40e090a9", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-meridian-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-consent-mcp", "name": "Eclipse Consent MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-consent-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — local v0.1 build over a local state file; no network transport" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 23 pass, 1 na of 24 checks (U1 na), 0 fail — 23/23 scored checks, single bench, no fix round. CEILING — read exactly: CERTIFIED(local) over FIXTURE subjects only, and the fixture boundary is enforced by the product, not by convention: v0 refuses any non-fixture subject by name (SUBJECT_NOT_FIXTURE) and every subject in the package is synthetic. Real-subject personal-data processing is NOT built and is held at gate G-COUNSEL (spec §17); jurisdiction packs (state privacy / AI-law vocabulary variants) are NOT built (G-COUNSEL per pack) — the versioned-vocabulary mechanism they would ride on ships in v0 as data. Consumer-facing grant UX is NOT built (G-OWNER); v0 has no consumer surface at all, and no hosted or network form exists. Consent records consent; it does not manufacture it, and no output certifies any party.", "not_tested": [ "Real-subject personal data — NOT built, held (G-COUNSEL, spec §17); v0 refuses any non-fixture subject by name (SUBJECT_NOT_FIXTURE)", "Jurisdiction packs (state privacy / AI-law vocabulary variants) — NOT built (G-COUNSEL per pack)", "Consumer-facing grant UX — NOT built (G-OWNER); v0 has no consumer surface at all", "Hosted / live registry service form and any network transport — NOT built; v0 is a local stdio server over a local state file" ], "bench_date": "2026-10-25", "bench_version": "0.1.0", "bench_score": { "pass": 23, "fail": 0, "na": 1, "total": 24 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-consent-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "1d77571e0f27d8ebcb3f9ba10d193a5d64e196749fb2cca57756c006f9dbe3b4", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-consent-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-lineage-mcp", "name": "Eclipse Lineage MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-lineage-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — local v0.1 build; records stay on the operator's machine" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench): 10 pass, 0 na of 10 checks — L10/L14/L4, minors m1–m3 and spot regressions L1/L5/L8 re-probed PASS; all other lines stand as scored on run 2. Runs 1 and 2 FAILED and are retained append-only (test-bench/results/eclipse-lineage-mcp-2026-10-26.json, eclipse-lineage-mcp-2026-10-26-2.json); run 3 closed D1 (corroboration forgery), D2 (unvalidated hash values) and D3 (behavior_relevant laundering parameter) at the mechanism level, not the fixture level. CORROBORATION HONESTY — read exactly: in v0 there is no per-agent key registry, so presented corroboration strings are UNVERIFIABLE by construction; they are labeled corroboration_unverified in the signed, hash-chained record body (tamper-evident, proven at L10), and absence shapes stay claim_only. Self-emission is labeled a subject-provided claim forever; no surface upgrades a claim to a fact. CEILING: CERTIFIED(local), self/consented emission only — framework emission adapters are NOT built (G-LIVE per framework), external/hosted lineage is NOT built (G-OWNER); v0 signs with a local seed key (keys/, gitignored) and production findings-key custody is a gated decision.", "not_tested": [ "Framework emission adapters — NOT built (G-LIVE per framework); v0 emission is self/consented only via the MCP tools", "External emission / hosted lineage for enterprises — NOT built (G-OWNER); records stay on the operator's machine", "Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision" ], "bench_date": "2026-10-26", "bench_version": "0.1.0", "bench_score": { "pass": 10, "fail": 0, "na": 0, "total": 10 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-lineage-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "243d941e074fe3e76f4da25fa59c3b4ff07d93046203558cfddd7c41e4b7e6fd", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-lineage-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-attest-mcp", "name": "Eclipse Attest MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-attest-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — local v0.1 build; offline verification, no network egress" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #2 (C12 diversity battery): 10 pass, 0 na of 10 checks. Bench history retained append-only: the first bench FAILED on D1 (test-bench/results/eclipse-attest-mcp-2026-10-25.json) and scoped re-bench #1 FAILED on D2 (eclipse-attest-mcp-rebench-c12-2026-10-25.json); re-bench #2 closed D2 — the diversity computation now resolves its grouping key registry-only (accountable_id from the identity registry; asserted fields are never read), verified against a bench-owned Sybil registry (r2-syb-a/b/c under one accountable id weigh as one). All other first-bench passing lines stand un-re-run. CEILING: CERTIFIED(local) for the v0 surface — the ONLY admitted evidence class is Till settlement receipts; new evidence classes are NOT admitted (G-OWNER per class; the Herald receipt-on-delivery class is named admissible in spec but NOT admitted in v0.1); public attestation feeds / leaderboards are NOT built (T2 + G-COUNSEL) and their tool names refuse -32602; cross-marketplace integrations NOT built (G-LIVE per platform). Genesis identities are CETech's own service agents as fixtures; v0 signs with a local test key (keys/, gitignored) — production findings-key custody is a gated decision. No star ratings exist and none are implied.", "not_tested": [ "New evidence classes — NOT admitted in v0.1 (G-OWNER per class); any class other than till_settlement refuses EVIDENCE_CLASS_NOT_ADMITTED by name", "Public attestation feeds / leaderboards — NOT built (T2 + G-COUNSEL); feed/leaderboard tool names refuse -32602", "Cross-marketplace integrations — NOT built (G-LIVE per platform); attestations are self-contained signed artifacts", "Herald receipt-on-delivery evidence class — named admissible in spec but NOT admitted in v0.1", "Production findings-key custody — v0 signs with a local test key (keys/, gitignored, chmod 600); custody is a gated decision" ], "bench_date": "2026-10-25", "bench_version": "0.1.0-rebench2-c12", "bench_score": { "pass": 10, "fail": 0, "na": 0, "total": 10 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-attest-mcp-rebench2-c12-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "2bb754bb2d1d41436d9c0635ece2fe604b96c3039718fd0f3e8c9cddf56e8c8c", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-attest-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-revoke-mcp", "name": "Eclipse Revoke MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-revoke-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — local v0.1 build; offline revocation checks against signed list copies" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card run 3 (scoped re-bench #2): 13 pass, 0 na of 13 checks — the C13/B1 provenance battery plus genuine-path controls, with run 2's closures standing. Bench history retained append-only: run 1 FAILED (D1–D3, test-bench/results/eclipse-revoke-mcp-2026-10-26.json) and run 2 FAILED (D4 — list-verification laundering, eclipse-revoke-mcp-2026-10-26-2.json); run 3 proves all four D4 variants (fingerprint-laundered recomputed, stripped sig/fingerprint, foreign unsigned epoch-9, foreign validly-attacker-signed) now cap at LIST_VERIFICATION_FAILED for hits AND absent refs, while genuine paths (supplied + stored) answer REVOKED_BY_ISSUER / COUNTER_NOTICED / NOT_LISTED exactly as before. CEILING: CERTIFIED(local) for own-issuer feed + offline check over fixture issuers. External distribution of the feed to registries/merchants is NOT built (T2 + G-REG/G-LIVE per consumer) — list_publish writes the local store only and v0 contains no network code; emergency revocation classes are NOT built (G-COUNSEL) — the closed reason vocabulary has no emergency class; no live push to subscribers exists. v0 signs with a local seed key (keys/, gitignored); production findings-key custody is a gated decision.", "not_tested": [ "External distribution of the feed to registries/merchants — NOT built (T2 + G-REG/G-LIVE per consumer); list_publish writes the local store only, no network code in v0", "Emergency revocation classes — NOT built (G-COUNSEL); the closed reason vocabulary has no emergency class", "Any live push to subscribers — NOT built; subscribers check offline against list copies and acknowledge epochs", "Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600); custody is a gated decision" ], "bench_date": "2026-10-26", "bench_version": "scoped-rebench-2", "bench_score": { "pass": 13, "fail": 0, "na": 0, "total": 13 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-revoke-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "02c2e4df9bed3c20fc964c815f412e4131d80462c451ee46179755a7ba292a5d", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-revoke-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-keyhold-mcp", "name": "Eclipse Keyhold MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-keyhold-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio — local v0.1 build; redemption by co-located executor, exercised on fixture transport" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — FIRST-PARTY SCOPE ONLY. Eclipse Bazaar Test Bench 2026-10-25, standing card scoped re-bench #3: 13 pass, 0 na of 13 checks on the card's check lines, comprising 59/59 individual bench probes across the D7/D8 boundary battery, the identity-exemption angle set (aliasing-by-copy, self-nesting, list-wrapped envelope, list owner_approval, signature-plus-extra-material, dotted keys on secret_enroll) and the K3/D6 spot batteries. Bench history retained append-only: runs 1–3 FAILED (test-bench/results/eclipse-keyhold-mcp-2026-10-25.json, -2.json, -3.json) and stand as the record for the lines they scored; every gating defect they raised is closed on the standing card or a retained predecessor card. CEILING — read exactly: certification covers first-party leases over ONE redemption class (https_static_key), exercised on a fixture transport — live redemption against a real third-party API was NOT exercised and no real credential exists in the package. Third-party custody is NOT built and is HELD (G-COUNSEL + G-OWNER + Verity security review of the redemption component; the gate may conclude never). The v0 envelope construction (ephemeral ECDH P-256 + HKDF-SHA256 + HMAC stream/EtM) is a local reference construction for the fixture/dogfood scope; the held security review may replace it before any wider custody claim. NAME: CONDITIONAL PASS — trademark/collision screen owed before any public surface (G-TM); the descriptor always reads 'credential leases, never raw keys'. v0 uses local seed keys (keys/, gitignored, chmod 600): the private master half is read ONLY by the redemption executor, never by the MCP server.", "not_tested": [ "Live redemption against a real third-party API — NOT exercised; v0 acceptance runs on a fixture transport and no real credential exists in the package", "Third-party custody — NOT built and HELD (G-COUNSEL + G-OWNER + Verity security review; may conclude never); custody_scope=third_party refuses THIRD_PARTY_CUSTODY_HELD by name", "Additional redemption target classes — NOT built (per class, G-OWNER); v0 redeems exactly one class: https_static_key", "Production key custody — v0 uses local seed keys (keys/, gitignored, chmod 600); password-manager custody and rotation rehearsal are later gate decisions", "Envelope construction review — the v0 seal/open construction is a local reference construction for the fixture/dogfood scope; the held security review may replace it", "Trademark/name screen — NOT done (G-TM owed before any public surface); name is a CONDITIONAL PASS and the descriptor always reads 'credential leases, never raw keys'" ], "bench_date": "2026-10-25", "bench_version": "0.1.0-rebench-4", "bench_score": { "pass": 13, "fail": 0, "na": 0, "total": 13 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-keyhold-mcp-2026-10-25-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e9c414a98d20a61018e19aa12df3f4b6f7d12d676b020d340e8d8d842b99115b", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-keyhold-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-strata-mcp", "name": "Eclipse Loft MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-strata-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, scoped re-bench r3 (standing): 12 pass, 0 na of 12 checks — the D2-only scope (key-substitution attack D2X + V3/V4/V5 tamper set + genuine packs with and without anchor, library and CLI). D1/D3–D10 were closed in scoped re-bench r2 and carried, not re-probed, per scope. History, all cards retained append-only: bench 1 FAILED (35 of 45 checks — test-bench/results/eclipse-strata-mcp-2026-10-25.json); scoped re-bench r2 FAILED (25 of 26 — eclipse-strata-mcp-2026-10-25-r2.json) on the sole remaining HIGH, D2. Scope — read exactly: SIMULATOR ONLY. P0 printers are host-shaped simulators (OctoPrint virtual + virtual Klipper/Moonraker, in-process) behind the production interface, with a deterministic simulated slicer; NO live printer was exercised at any point in any bench run, no heat exists in this bench, and no hardware claim of any class is made. TRUSTED SIGNER ANCHOR: Strata Proof verifies a pack only against a verifier-supplied registry / expected fingerprint; a pack's embedded key and self-consistent fingerprint never suffice — unanchored packs and unknown signers report PRINT_UNVERIFIED (UNVERIFIED_SIGNER) by design, never a silent verify. That anchor is what closed D2: in r2 an attacker who minted their own keypair, tampered the mandate (material swap, +365d expiry), re-signed and re-sealed produced PRINT_VERIFIED; in r3 the byte-for-byte same attack is refused solely on UNVERIFIED_SIGNER under a genuine anchor, under a genuine expected fingerprint, and with no anchor. GEOMETRY, narrowed in fix round D7 and consistent across spec, README, manifest and tool surface: declared_geometry_only — design_inspect returns the caller-declared bounding box plus arithmetic over it; manifold / triangle / wall-thickness facts are null, never echoed as verified; no geometry-kernel claim is made. BAMBU posture (spec): a Bambu adapter is P2+ and owner-Developer-Mode-only — the enablement act is documented as the owner's; there is no Bambu path, bypass, or claim at P0. NAME CONDITIONAL pending trademark screen (Stratasys shared root, same industry); fallbacks on record: Eclipse Sinter, then Eclipse Loft. N-CHECK: NOVELTY_PROVEN (bench 1, retained) — renamed-verb overlap 55% (<80%); a Kiln-shaped fixture printing a hand-edited +15 °C toolpath and an unbound job was refused on both counts — the mandate-and-bridge mechanism exists in no incumbent.", "not_tested": [ "Real hardware of any class — no physical printer, no heat; every bench target is a host-shaped simulator.", "Real slicer binaries (PrusaSlicer / Orca) — P0 slicing is a deterministic simulated slicer behind the production interface.", "Real Moonraker / OctoPrint endpoints and vendor clouds.", "Herald signer — P0 uses the local Ed25519 PinSigner fallback behind the production port; Herald custody is a later phase.", "Blackbox custody of packs (packs are Blackbox-form; the Blackbox product is not in the P0 path).", "P1/P2 adapters — including Bambu (owner-Developer-Mode-only posture per spec) and the Elegoo Neptune 4 dogfood purchase (owner decision D2).", "Unattended real printing — mandates default ATTENDED-required; UNATTENDED_RATED is explicitly signed per site." ], "bench_date": "2026-10-25", "bench_version": "verity-0.3.0-scoped-rebench-r3", "bench_score": { "pass": 12, "fail": 0, "na": 0, "total": 12 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-strata-mcp-2026-10-25-r3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "fa94b2ae956876f4a92392a9773531f2ae93d0eb5331a1217567db94a1e1fb7c", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-strata-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-corona-mcp", "name": "Eclipse Corona MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-corona-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25: 25 pass, 0 na of 27 checks (1 partial, 1 fail — LOW defects D-COR-1/D-COR-2, no verdict impact, retained on the card). CEILING — read exactly: CERTIFIED(local) for the local verifier only, at the P0 ceiling, and nothing broader. Proven: the 5-tool MCP surface + Gate CLI + Sheet CLI as shipped; staged-class sealed packs over the §14 fixture corpus (bench-built, bench-signed); served-class dogfood pack verification for cetech.ai (builder-sealed, bench-recomputed); the gate contract including WARN/ENFORCE claim asymmetry; the house profile on a bench house-shaped fixture. Render-proof packs are bound to deployed artifact hashes: a pack proves identity and mechanical soundness of the pinned bytes under named measured facts — it does NOT prove an asset is semantically the right asset; semantic approval is the separate human act of approving the pack's contact sheet once per version. Claim-gate wording (spec §8.2): a deploy may be reported 'verified live' only while a PASS served pack exists whose input hashes equal the currently deployed manifest; any served-byte change invalidates the proof automatically; the gate blocks the word 'verified', never the publish. No hosted or live scope is certified: the hosted matrix is a P2 seam only (HOSTED_MATRIX_NOT_AVAILABLE). N-CHECK: NOVELTY_PROVEN — shipped surface 7/7 novel core (5 MCP tools + Gate CLI + Sheet CLI), substrate verbs 0/7 = 0% (R3 kill line 80% not triggered). NAME CONDITIONAL pending trademark screen (Chaos Corona / Corona beer screen outstanding, D1); fallbacks on record: Eclipse Transit, Eclipse Behold, Eclipse Lantern.", "not_tested": [ "Real-device / hosted evidence class: P2 seam only (HOSTED_MATRIX_NOT_AVAILABLE verified); no hosted pack exists or was certified.", "Semantic correctness of any asset — never claimed: a pack proves identity and mechanical soundness of the pinned bytes; semantic approval is the separate human act on the contact sheet.", "Sentinel-mode UNSTYLED_RENDER on the live dogfood sites: sentinels not yet adopted on cetech.ai / thewhitereport.com / eclipsebazaar.com (owner site edits + publish outstanding); dogfood packs exercised heuristic mode only.", "Served-class rendering of Chromium/Firefox cells on GoDaddy-hosted dogfood sites from the bench VM: transport-blocked by the host, sealed honestly as PAGE_UNREACHABLE; served certification rests on the rendered cells plus loopback shapes.", "Full §14 B9 determinism as written (each dogfood site + full corpus x5): bench ran 5x on one stable fixture plus builder-suite shapes.", "ENFORCE posture as a flipped production state: mechanics benched in both modes; the flip is an owner config act (D2) and has not occurred.", "Herald-signed packs: bench and dogfood packs are local-signer packs (signer_type=local) verified through the PinSigner port grammar; no Herald custody exercised.", "Trademark screen for the name 'Eclipse Corona' (D1): still CONDITIONAL — Chaos Corona / Corona beer screen outstanding before any public surface; certification covers function, not the name.", "Third-party subjects, Bazaar listing mechanics, scheduled re-verification, public proof pages, CI adapters: P1/P2, not built, not certified." ], "bench_date": "2026-10-25", "bench_version": "1.0.0-verity-corona-bench", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-corona-mcp-2026-10-25.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "fc79e9295f59a286f48bbaf52d9c1b362f4d11ca650efd148f589aaa26204764", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-25", "verdict_age_days": 2, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-corona-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-crosslist-mcp", "name": "Eclipse Crosslist MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-crosslist-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(split per facet)", "record_status": "current", "certified": true, "scope": "CERTIFIED(split per facet) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-crosslist-mcp-2026-10-26-4.json: 39 pass, 0 na of 40 checks (1 partial — the builder-suite re-run line, whose sole failure was the stale fixed-count dogfood assert; fixed in this listing pass, suite now 50/50, smoke PASS). PER-FACET SCOPES — read exactly: root+ledger CERTIFIED(local): submit acceptance is identity-bound on every write facet (the observed registry record must match the submitted name + version + payload hash; Bazaar: product id/name + record hash), claimed-at-submit lands via the legal submitted→live→claimed two-step, stuck rows repair by receipted re-observation, and EVERY ledger_poll transition out of 'submitted' is identity-gated (live/failed via the shared identity gate, claimed via the repair gate) — a landed receipt proves the observed record matched the submitted artifact's identity at poll time, nothing about live registries. Bazaar facet CERTIFIED(local): the real catalog served through Crosslist (80 products at bench), publish/status writes under mandate. Official facet CERTIFIED(live-read) for list_servers/get_server/list_versions/get_version_detail; its writes are CERTIFIED(fixture) only and refuse REGISTRY_WRITE_UNAVAILABLE in live mode — NOT live-write certified. Smithery facet CERTIFIED(live-read) for search_servers/get_server ONLY; hosting/install-counts/releases/Connect sub-resources and publish/publish-release/deploy writes are CERTIFIED(fixture) only and refuse in live mode — NOT live-write certified. Glama facet CERTIFIED(fixture-read) only, all 8 verbs, ZERO write verbs — NOT live certified at any scope (live API returned 401; no key held). Herald dependency FIXTURE ONLY: mandates verified against a local ECDSA P-256 Herald-fixture key; production Herald RSA-JWS was not exercised. Receipts are Herald-SEALABLE with seal.status pending — never sealed. No live-write claim is made for any facet. KNOWN LIMITATIONS (standing LOWs on the card, in plain words): deeply nested error envelopes (wrapper depth 4 or more, and top-level list payloads) can escape detection, and error-shaped data keys can be refused by mistake (R3); on resubmission a stuck-row repair runs just before the mandate is verified, though nothing is written or accepted before that verification (R8); a track stuck at 'submitted' whose registry record is entirely absent has no automatic exit — it stays submitted rather than inventing a state (R9); submitting to Glama's absent native verb consumes the one-time mandate nonce, so a later legitimate submission can be refused as a replay (D8); the earlier claim that a production Herald key drops in unchanged was overbroad for RSA keys and is not repeated (D5); receipts are sealable and pending, not sealed (D7). N-CHECK (first bench, retained): the facet verbs deliberately mirror each registry's native verbs (renamed-verb share above the house line) — NO novelty claim rests on the facet verbs; the certified mechanism is the listing-state ledger plus the mandate constraint, which the bench exercised directly.", "not_tested": [ "Live writes on any facet — none exist or were exercised; Official/Smithery writes are fixture-scope only and refuse REGISTRY_WRITE_UNAVAILABLE live.", "Glama live API — 401 without a key, none held; Glama is fixture-read only at every scope.", "Production Eclipse Herald (RSA-JWS) signing/sealing — fixture ECDSA P-256 only; receipts sealable/pending, never sealed.", "Hosted / multi-tenant transport — P1; v0.1 is local stdio only. Deferred registries (mcpso, pulsemcp, lobehub; claude-connectors manual tracks) are P1, absent by design." ], "bench_date": "2026-10-26", "bench_version": "0.1.0-rebench-r7-pollonly (scoped Phase 2 re-bench of the R7 poll fix ONLY; carried LOWs not re-benched)", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-crosslist-mcp-2026-10-26-4.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "aae0f0c1ff4cecb442408d84beaa3cccd9d5dcc6cc4aa1950fb548cfa128af95", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "CURRENT", "drift_status": "CURRENT", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-crosslist-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-verbatim-mcp", "name": "Eclipse Verbatim MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-verbatim-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-mcp-2026-10-26-2.json (scoped re-bench of the baseline PARTIAL; baseline card retained append-only): all 5 re-bench scopes PASS. Proven: the 10-tool local stdio surface as shipped (builder suite 64/64 + smoke PASS, re-run and confirmed by the bench); canonicalization verbatim-canon/1.1 — an independent bench implementation written from the amended spec §5/§6/§7/§8.1 alone, importing no product code, reproduces snapshot usc26-119-124-de68dcc8b3db exactly (census 8/8; statutory 2,277/2,277 hashes + byte lengths + word counts; editorial 2,277/2,277; corpus_root and editorial_root equal to served; manifest_sha256 recomputed equal; §8.1 derivation reproduces the snapshot suffix de68dcc8b3db); run against the superseded 1.0 seal it diverges at exactly one section (§7519), isolating the single published canon rule change. Cite-check: 0 false MATCH across the hostile subset on the new snapshot (digit alteration localized identically to baseline, punctuation/quote-mark/em-dash swaps DIVERGE, editorial-as-statute NOT_IN_CORPUS with EDITORIAL hint, instruction-shaped passages NOT_IN_CORPUS / DIVERGES, wrong-section claims NOT_IN_CORPUS with found-elsewhere). Tamper: every entry/bytes tamper shape is named by section and degrades the signature to SIGNATURE_UNVERIFIED; metadata-only tampers degrade loudly. Non-Title-26 citations return CORPUS_OUT_OF_SCOPE across tools (13 title/CFR forms); grammar failures stay CITATION_MALFORMED. KNOWN LIMITATIONS (standing observations on the card, in plain words): a cite-check MATCH for a repealed section carries no status field, so a repealed section's line can match without the response saying it is repealed (D-5); 115 sections that carry no identifier attribute in the source share a derived citation form and cannot be addressed by citation grammar — they are reachable only via manifest paging, search, or unclaimed cite-check (D-6); cite-check's candidate pre-filter samples 32-byte windows at a step of 8 — it can only ever produce non-MATCH outcomes, never a false MATCH (D-7). Two spec-clarification errata candidates are recorded for the next spec touch, not product fixes: a long-form prose title citation ('Title 18, United States Code, §1341') returns CITATION_MALFORMED rather than CORPUS_OUT_OF_SCOPE (D-8), and the spec does not yet state in one line that a note nested inside a note contributes all its descendant text to the parent note's editorial bytes — the reading the seal uses (D-9). SIGNING: the P0 manifest is signed through the Herald port with labelled FIXTURE keys only (signer.kind 'fixture', FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL (spec D1, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before D1 closes.", "not_tested": [ "Hosted or remote serving — v0.1 is local stdio only; no hosted serve path exists or was certified.", "Production Herald custody — P0 signing uses labelled fixture keys only; no production key was exercised.", "Title 26 Regulations (26 CFR) — out of P0 scope by gate decision; no CFR verb exists on the surface.", "Anything past release point Public Law 119-124 — the corpus is a dated, sealed snapshot; later law is not in it and currency is never claimed.", "The trademark + confusion screen for the name 'Eclipse Verbatim' (spec D1, owner-side) — still open; it gates any public surface, not this local certification.", "A third-party recompute by anyone other than the bench's independent implementation — the procedure is published (spec §5–§8.1) and the Verbatim Proof companion tool ships with the product, but no outside party has yet run it." ], "bench_date": "2026-10-26", "bench_version": "scoped re-bench (fix round Phase 2) — scopes: §17.2 test 1 on amended §5, D-2 fresh shapes, D-3 fresh shapes, cite-check hostile subset, seal/envelope + new-snapshot checks; D-5/D-6/D-7 observation re-confirmation", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-verbatim-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "9c3248c120cf58a8785cb5f25d83d021fd6c2b3295ca5bfa79d54b0b14816ab3", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "CURRENT", "drift_status": "CURRENT", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-verbatim-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-roll-mcp", "name": "Eclipse Roll MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-roll-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-roll-mcp-2026-10-26-rebench.json (scoped re-bench; baseline card eclipse-roll-mcp-2026-10-26.json retained append-only). THE HONEST ARC, on the record: the first bench FAILED (23 pass / 11 FAIL of 34 grouped checks) on two HIGH defects — D1, revocation/expiry did not propagate past session_open (a pack sealed FILED_VERIFIED under an expired mandate), and D2, Proof's pack_verify certified a filing the read-back had refuted — plus a UPL fence that keyword-matched and a renamed-key secret-scan bypass. The fix round closed D1–D10 (25 new regression tests, 22 proven failing pre-fix); the full suite runs 63/63 on three consecutive runs (a ~3.4% flake, root-caused to the scan screening system-issued session ids, was killed). Verity's scoped re-bench then attacked the FIX code with fresh shapes — forged-consistent evidence packs, coordinated base+read-back tamper at seal, valid-window ghost artifacts, revoke-after-approval, planted foreign radar entries — 17/17 PASS, zero new defects; K1 delta-existence, the N-check (0/18 identical verb names vs the Wageward spine, inherited by reference), and grammar-drift all re-verified PASS; NOVELTY_PROVEN stands. SCOPE, read exactly: certification covers the 18-tool local stdio product at FIXTURE scope — every Gauge adapter is a labelled fixture, NO live registry read has ever been exercised, and NO submission verb exists on any surface (prep-and-seal only; the human submits via the registry's own channel). The counsel gate (spec §10.3) stands before any P1 / live phase regardless of this verdict. Two standing items remain on the card for ruling: a seal attempted under a revoked mandate surfaces APPROVAL_SCOPE_MISMATCH (inherited Wageward spine shape) where sibling verbs surface MANDATE_REVOKED — harmonization is an owner/Verity call; and seeded Radar entries are born claiming REGISTRY_READ with observed_at empty (observation D10d). NAME CONDITIONAL (spec D2, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before the screen closes.", "not_tested": [ "Any live registry read — no Gauge adapter has ever run against a live registry; all adapters exercised are labelled FIXTURE adapters, and the live adapter is unregistered and refuses", "Any submission to any registry — no submission verb exists at P0 in any name; nothing was or could be filed by this product", "Counsel review (spec §10.3) — a hard gate before P1 / any live phase; not performed and not part of this certification", "The trademark screen for the name 'Eclipse Roll' (spec D2, owner-side) — still open; it gates any public surface, not this local certification", "Customer-facing / multi-entity operation (P3, not proposed) and the EDGAR Next submission adapter (P2, specced only)", "Template-fill drafting — gated on a counsel-approved template set (spec §10.1); the drafting class refuses until then" ], "bench_date": "2026-10-26", "bench_version": "1.1.0-verity-phase5-rebench", "bench_score": { "pass": 17, "fail": 0, "na": 0, "total": 17 }, "card_url": "https://eclipsebazaar.com/cards/eclipse-roll-mcp-2026-10-26-rebench.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "b4e52d5d9afee179dbe870ba9946d5b95236e5355b743cba092aa49e985b43a0", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-roll-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-verbatim-eo-mcp", "name": "Eclipse Verbatim — Executive Orders", "product_url": "https://eclipsebazaar.com/products/eclipse-verbatim-eo-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-verbatim-eo-mcp-2026-10-26-3.json (scoped re-bench #3 of fix round 2, commit 56537e4; cards -1/-2 retained append-only — the mechanism was certified-grade on card -1 and certification was withheld on card -2 on EO-D1-2 alone). Proven: the 10-tool local stdio surface as shipped (builder suite 76/76 in substance — 72 PASS on plain bench runs plus 4 copy-dependent tests PASS under the bench replication harness, their plain-run failures being this VM's environment only; smoke PASS re-run by the bench); snapshot eo-20261022-26818c895dee (graph-3): 1,315 sealed documents, 10,667 edges, 823 divergence records, all OPEN (OMISSION 719, TYPE_DISAGREEMENT 104). EO-D1-2 CLOSED — the one defect that ever falsified a served claim: whole-cue scope emission trusted the savings idiom (a continuation assertion) and partial strikes; the graph-3 FULL census is 9 → 5, every surviving FULL re-derived by the bench's own reading of the sealed asserting text, the 4 unsupported FULLs corrected exactly (EO 11958→11501 twice and EO 13637→11958 to UNSPECIFIED; EO 13470→12333 to IN_PART 'Part 1'), and an exhaustive sentence-level sweep of all 13,282 sealed segments finds exactly 3 FULL candidates — precisely the genuine TEXT units; the idiom strip never eats a genuine cue (overreach battery: both orders, replacement form, single-clause continue+revoke). EO-D1-3 CLOSED: all 186 stated ranges re-derived verbatim in their pinned segments (186/186), binding sample 27/27. EO-D8 CLOSED in substance: graph-2 → graph-3 edge sets identical (10,613 unique keys), exactly 6 scope-only diffs, documents_root + divergences_root byte-identical, zero assertion groups gained or lost, net −66 exact (observation EO-O9: the spec A6 −94/+28 instance split differs by one each way from the bench's grouping, −93/+27 — a counting-convention artifact; a future accounting should state its grouping key). Riders CLOSED: EO-D5-2 (9/9 fresh Public Inspection marking variants refuse PUBLIC_INSPECTION_NOT_INGESTED by name against an empty PI index; bare 'PI' stays generic −32602, never stretched) and EO-D7 (§8.3 snapshot + coverage blocks on all 10 tools' successes and on refusal envelopes, SNAPSHOT_NOT_FOUND and GRAPH_VERSION_MISMATCH standing without blocks by documented construction; disposition carries divergences[] and self_limiting_terms[] as serve-time-derived, hash-exact pointers, never evaluated). Extraction bar re-measured on a fresh 15-assertion labelled sample: precision 1.000, recall 1.000; corpus FULL precision exhaustive at 5/5. NEW LOW FINDINGS (synthetic-only, zero sealed instances, corpus-swept): EO-D1-4 — four whole-cue binding residuals outside the implemented grammar (truncated idiom without 'and effect'; roman-numeral parts; an appendix struck wholly; a comma-joined cue about another object), recorded with a PRE-RESEAL CONDITION — the next reseal's bench sweeps the new batch for these shapes before the snapshot serves as current; EO-D1-5 — hyphenated compound ordinals ≥13 misquote the range tail ('twenty-first section' → range 'first section'), a verbatim-accuracy gap, never FULL. Observation EO-O8: snapshot history holds two builder-iteration seals (d31caba, ede0001) and graph-3's manifest names ede0001 as its previous rather than c44a7ad80308 directly — append-only history is honestly kept and the certified lineage reconciles exactly. THE FENCE (gate C3, load-bearing): no output of this product characterizes legal effect; every disposition answer remains an edge set + as_of + coverage window + the §2.2 completeness sentence, bench-verified byte-identical to the spec constant. Coverage re-derives from the manifest: sealed from 2000-02-10, 258 exclusions all NO_FR_FULL_TEXT_XML (257 documents 1994–1999 + EO 13548), unsealed layer from 1931-08-26; 1,315 + 258 = 1,573. SIGNING: the snapshot seal is a FIXTURE seal (FIXTURE_SIGNED) — never production Herald custody. NAME CONDITIONAL: the name inherits the pending Eclipse Verbatim trademark screen (owner-side); certification covers the local product's function under its working name, not the name.", "not_tested": [ "Hosted or remote serving — v0.1 is local stdio only; no hosted serve path exists or was certified.", "Production Herald custody — the snapshot seal is FIXTURE_SIGNED with a labelled fixture key; no production key was exercised.", "Sealed texts before 2000 — the Federal Register full-text XML floor is 2000 (measured); 1994–1999 orders exist only in the unsealed metadata+edges layer, and no sealed text is claimed for them.", "Any characterization of legal effect — refused by construction: no status field exists; disposition answers report what the named sources assert, as graph state as of a named snapshot, with the standing completeness sentence.", "EO→USC authority resolution against a live Code corpus — the port is empty by design at v0.1 and answers by name (CODE_CORPUS_UNAVAILABLE); resolution activates when the sealed Code corpus lands.", "The trademark screen for the Verbatim family name (owner-side) — still open; it gates public surfaces under the name, not this local certification.", "Any reseal after card -3 — EO-D1-4 / EO-D1-5 are recorded with a pre-reseal sweep condition; no reseal has occurred since certification." ], "bench_date": "2026-10-26", "bench_version": "Scoped re-bench #3 of EO fix round 2 (commit 56537e4): FULL-emission audit third pass (every graph-3 FULL edge re-derived from its sealed asserting text by the bench's own reading; exhaustive sentence-level FULL sweep over all 13,282 sealed segments), savings-idiom overreach battery, range-grammar fresh shapes + all-186-range re-derivation, EO-D8 accounting audit under three independent assertion-groupings + spot attribution, riders EO-D5-2/EO-D7 with fresh marking variants and every refusal class, regression floor (sentence byte-identity extracted from the governing spec, exclusion census, recompute convergence via suite canon tests, suite + smoke). Environment note: this VM intermittently EPERMs file writes (os.sendfile blocked outright; tempfile probe unreliable) — the 4 copy-dependent suite tests fail under plain runs in rotating subsets and PASS under a bench-side replication harness using only environment shims (pinned tempdir + retry-tolerant copyfile); product code exercised unmodified. Rigs: test-bench/refix-bench-eo3/ (rig.py, riders.py, riders2.py, riders3.py, run4.py).", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-verbatim-eo-mcp-2026-10-26-3.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "01a19f71cbdfc4c71c97a8a2420982a6da84cd51ae526f8075b48c76aacabdbd", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-verbatim-eo-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-flood-witness-mcp", "name": "Eclipse Flood Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-flood-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-flood-witness-mcp-2026-10-26-2.json (scoped re-bench of the FW-D1..D7 fix round; card -1 PARTIAL(local) retained append-only and superseded). Proven: flood-evidence witness at Florida scope for the two sealed partitions Leon (snapshot nfhl-fl-leon-20260611-bec93b592c31; 12,099 features) and Monroe (snapshot nfhl-fl-monroe-20261022-4776f79b6d7c; 9,664 features), operative index fw-index-202610-abd4c392bd16 enumerating all 67 Florida county partitions (65 NOT_SEALED, named). All seven card -1 defects FIXED and verified against the fix code with fresh shapes, not the builder's regressions: FW-D1 by independent ID-derivation recompute over every manifest and index present (6/6 reproduce; ~60 strip-set variants never collide); FW-D2 by byte-comparison of the manifest scope string against the operative index plus a full public-copy sweep; FW-D3 by 9 fresh multi-record LOMR fabrications (fires iff the per-case record set differs, names only truly differing cases); FW-D4 by 5 fresh drift shapes including a revised-date-only restudy; FW-D5 by minting a coverage receipt against a fresh synthetic partition/index and reading the claim; FW-D6 by direct read of both implementations (end-to-end run is an open environmental evidence debt); FW-D7 by a grammar-vs-body key diff over every stored receipt. P0 partition completeness remains OPEN (2 of 3): Miami-Dade is NOT_SEALED in the operative index, with no snapshot directory present. One NEW LOW (FW-D8) stands as a printed condition: the drift LOMR step iterated snapshot B only, so a case wholly removed in B never fired drift — fixed in code (sorted union of case ids) after the bench; it MUST hold before any second-vintage drift output is published, and is latent at the current single-vintage scope. FLAG-1 QUALIFIER: the LOMC override branch (LOMC_OVERRIDE_APPLIES) is FIXTURE-PROVEN ONLY — the sealed corpus contains zero LOMA/LOMR-F records and the branch has never fired on real sealed data. All seals are FIXTURE_SIGNED (Herald fixture key; owner open item O2) and labelled as such. Nothing in this verdict speaks to determination-of-record, SFHDF, lender, or insurance use: the product is an evidence-grade receipt witness only, per gate fence. NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.", "not_tested": [ "Miami-Dade partition — NOT_SEALED (pending) in the operative index; 65 of 67 Florida partitions are enumerated NOT_SEALED and no determination can be minted against them", "Second-vintage drift on real data — drift classification is proven at the classifier level with fabricated shapes; it remains latent until a second vintage of any partition seals, and the FW-D8 fix must hold before any second-vintage drift output is published", "The LOMC override branch on real sealed data — FIXTURE-PROVEN ONLY (zero LOMA/LOMR-F records in the sealed corpus; the LOMA layer is absent from FEMA's county shapefile distribution)", "Production Herald custody — all seals are FIXTURE_SIGNED with a labelled fixture key (owner open item O2); no production key was exercised", "Hosted or remote serving — v0.1 is local stdio only; the runtime has no live-query path by construction", "Full builder suite re-run and the FW-D6 end-to-end run at re-bench — open environmental evidence debts (this VM's exec write latch), graded environmental on card -2, not product defects", "Any determination-of-record, SFHDF, lender-compliance, or insurance use — refused by construction under the gate fence; the product is an evidence-grade receipt witness only", "The trademark screen for the Flood Witness name (owner-side, spec O1) — still open; it gates public surfaces under the name, not this local certification" ], "bench_date": "2026-10-26", "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-flood-witness-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "65560f32f49cab64f931209e9d7154abbd4beb80e24936fc54ad011ee556faac", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-flood-witness-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-recall-witness-mcp", "name": "Eclipse Recall Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-recall-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-recall-witness-mcp-2026-10-26-2.json (scoped re-bench of the RW-D1..RW-D6 fix round + transport repoint; card -1 PARTIAL(local, FIXTURE scope), 50 checks 43P/7F, retained append-only and superseded). Proven: sealed campaign-vintage witness over fixture flat files — nightly anchor + hash-chained per-campaign vintages, closed recall-events/1.1 drift grammar (spec §7 names; Δ1 ACCEPTED at card -1), sealed-vintage-only posture-at-date receipts and mandate-bound CAMPAIGN-LEVEL check receipts with byte-exact standing sentences, churn instrumentation with segment-derived series_state. Builder suites reproduced first-hand: 35/35 + 18/18 fix-round regressions, smoke PASS; bench battery 136 checks, 127 pass — the 9 fails group into three NEW LOW conditions (RW-D7/RW-D8/RW-D9); no prior defect survives. All six card -1 defects FIXED and verified against fresh shapes, not the builder's regressions: RW-D1 (HIGH) phrase battery — bench shape end-to-end (27V321000 733→1042, “advised not to drive”) emits ESCALATION_DO_NOT_DRIVE + sealed advisory_classes [DO_NOT_DRIVE], 11/11 fresh positives, and an independent cross-signal: 15 live campaigns re-fetched from api.nhtsa.gov, phrase tags agreeing with the API's parkIt/parkOutSide flags on every row; RW-D2 series_state stays MEASURING under a methodology-only segment and flips only when a rates-bearing segment seals; RW-D3 ask-shape screen refuses BY NAME incl. 14 bench-fresh spellings while benign record questions still serve; RW-D4 layout_hash MEASURED — header and free-text column permutations refuse LAYOUT_DRIFT_REFUSED, unpermuted real-shape files seal; RW-D5 prev_vintage_hash and anchor-chain tampers name MISMATCH in verify_receipt and the recompute CLI; RW-D6 campaign-scoped NOT_SEALED prints the campaign's own first vintage with the corpus floor labelled beside it. LIVE PROOF VERIFIED FIRST-HAND (5/5): the live store seals 24V809 with cross_check OK and DO_NOT_DRIVE agreeing with parkIt: true; the diverged store seals nothing (FAILED + named); rcpt-00001 recomputes MATCH and carries exactly the 4 campaigns the live API returns for Porsche 911 MY2024 (24V155000, 24V809000, 25V896000, 26V682000), tags vs flags 4/4. All seals under FIXTURE ECDSA keys, labelled on every artifact. NO live nightly seal exists: the flat-file spine host (www-odi.nhtsa.dot.gov) remains unreachable from this egress (re-probed 2026-10-26, empty reply) and was NOT re-routed to the API — the file is the canon source. LIVE scope additionally requires (a) the first real nightly ingest and (b) live-key cutover (fixture keys at P0, owner's call) — scope items, not defects. Conditions RW-D7/RW-D8/RW-D9 (all LOW) are printed on card -2 and bind the next grammar/seal touch; no escalation-completeness claim beyond the live-stock-proven phrase families may appear in any copy. Nothing in this verdict speaks to any vehicle's safety, any specific VIN's repair state, or compliance with any law (gate C2/C5/C11). NAME CONDITIONAL: working name, trademark screen owed (spec O1); certification covers the local product's function under its working name, not the name.", "not_tested": [ "Live nightly ingest — no live nightly seal exists: the flat-file spine host (www-odi.nhtsa.dot.gov) is unreachable from the build egress (re-probed 2026-10-26) and the spine was NOT re-routed to the API; LIVE scope requires the first real nightly ingest", "Production Herald custody — all seals are under FIXTURE ECDSA keys, labelled on every artifact (spec O3); live-key cutover is the owner's call and has not been exercised", "Escalation completeness beyond the live-stock-proven phrase families — RW-D9: operate/use paraphrase families (“should not be operated”, “never operate”, “do not use”) tag nothing; no as-served instance found in the live stock sampled; bound to the recall-events/1.2 bump", "Narrative park-outside text — RW-D7: a constructed rollaway-narrative shape (“parked outside the owner's home”) tags a false PARK_OUTSIDE; no live-stock instance; fix at recall-events/1.2 (owner-directed-voice requirement)", "Genesis-link assertion — RW-D8: first-vintage prev_vintage_hash and first-anchor prev_anchor_hash tampers verify MATCH (content integrity unaffected); the assert lands at the next seal-store touch", "Per-VIN unrepaired status — never determined by construction (gate C5): the consumer VIN lookup is not automated, no per-VIN code path exists, and receipts print scope_class CAMPAIGN-LEVEL only", "Hosted or remote serving — v0.1 is local stdio only", "The trademark screen for the Recall Witness name (owner-side, spec O1) — still open; it gates public surfaces under the name, not this local certification" ], "bench_date": "2026-10-26", "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-recall-witness-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "c27b7e245cdfdaa4142e8bd18692d408550a207c0c4e83d9c1c0a8a11a140a5b", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-recall-witness-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-sunset-mcp", "name": "Eclipse Sunset", "product_url": "https://eclipsebazaar.com/products/eclipse-sunset-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/sunset/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1 fix (repo @ 88f2aa6): probe 5 chain attacks PASS 4/4 + strict extras 9/9 — on a tampered ledger the previously-PROVEN claim returns UNPROVEN + chain_invalid: true, no forged PROVEN is minted, detect_sunsets / migration_diff / ingest_snapshot refuse CHAIN_INVALID; full prior suite re-run 44/44 (unwitnessed claims UNPROVEN, witnessed proof citing bench-recomputed snapshot hashes, fixture-pair detection exact, migration diff sane, hygiene 14/14). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 41/44, defect D1 HIGH — closed by this re-bench. Scope = LOCAL/fixture only: local JSON snapshot ingest, stdio transport, bundled weather fixtures. No live-registry claim is made or tested — none exists in v0.1.1, and the server honestly says so.", "not_tested": [ "Live registry crawling — not in v0.1.1 by design (later phase); the server ingests local snapshot JSON files only and makes no live-registry claim", "Hosted or remote serving — v0.1.1 is local stdio only", "A schema_breaking claim type in verify_sunset_claim — by SPEC design the claim enum is deprecated|removed only; the schema-breaking proof surface is detect_sunsets / migration_diff, verified there at bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-sunset-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-nexus-witness-mcp", "name": "Eclipse Nexus Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-nexus-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/nexus-witness/VERDICT.md (Verity, independent bench over stdio JSON-RPC; rates and hashes recomputed independently from fixtures/rates.json + SPEC §6). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture-vintage)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture-vintage) — Verity independent bench 2026-10-26 (repo @ ec06f2e): 81/81 checks passed, two consecutive runs. Replay fidelity 11/11 (an old receipt verifies against the OLD fixture rule after a newer vintage is added; receipt id/hashes recomputed independently per SPEC §6); forgery matrix 22/22 (naive tamper INVALID on every field; re-sealed forgeries — including the new rate claimed at the old vintage — still INVALID, because verify_receipt replays the fixture rule at the receipt's vintage instead of trusting the seal); N-check 18/18 (no bare-answer path; unknown jurisdiction/category/vintage refuse cleanly and no rate is ever invented); honesty sweep 12/12 (DEMO envelope on every determination output; zero real-rate, tax-advice, or live-determination claims); hygiene 18/18 (zero network/payment code; exactly the 4 spec tools). Scope = LOCAL / fixture-vintage ONLY: local fixture lookup, stdio transport, bundled fictional fixture rates (13 rules, 5 fictional 'Fixture *' jurisdictions). DEMO rates only — NOT tax advice; no live tax determination is made by the product or tested here. Defects D1–D3 (all LOW) stand on the record as fix-before-live and are not hidden: D1 unkeyed seal (VALID means 'consistent with the fixture rule at its vintage', not 'issued by this server'; _verify does not assert source/demo_label/scope constants), D2 refusal responses carry no DEMO envelope, D3 advertised additionalProperties: false schemas not enforced in dispatch (extra argument keys silently ignored). Any live phase remains behind the SPEC §2 counsel gate (licensed data source + legal counsel review + explicit owner gate), and D1 must be closed before any hosted/live scope.", "not_tested": [ "Live tax determination — not in v0.1 by design: no real jurisdiction, real rate, tax-advice, or filing surface exists; any live phase remains behind the SPEC §2 counsel gate (licensed data source + legal counsel review + explicit owner gate) and is out of scope for this verdict", "Hosted or remote serving — v0.1 is local stdio only; bench defect D1 (unkeyed seal) must be closed before any hosted/live scope", "Server-issued authenticity — the seal is an unkeyed local SHA-256 hash seal, disclosed in SPEC §2/§6; VALID means 'consistent with the fixture rule at its vintage', not 'issued by this server' (bench defect D1)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-nexus-witness-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-warranty-mcp", "name": "Eclipse Warranty", "product_url": "https://eclipsebazaar.com/products/eclipse-warranty-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/warranty/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, store copies only). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 D1/D2 fix round (repo @ 6fd6784): 96 probes recorded, 95 asserted PASS, 0 FAIL, 1 observation (O1, design-consistent, no condition attached). D1 attacks PASS 26/26 (supplied-pack injections/relabels/wrong-types → INVALID; store copies → INVALID + transfer refused; get_pack structural refusal 3/3); D2 attacks PASS 24/24 (wrong-type and extra-field arguments rejected cleanly on all five tools, zero coercion, nothing registered by a rejected call); P2 tamper matrix PASS 5/5 bound fields + 11/11 chain + 6/6 supplied-pack attacks; P4 negative space PASS 18/18 (unregistered serial = plain negative, duplicate serial SERIAL_ALREADY_REGISTERED, unknown tools NO_SUCH_TOOL); P1 mechanism spot-check PASS 3/3 (fresh-process verify VALID after transfer, no original holder). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 67 asserted PASS / 0 hard FAIL, defects D1 (MEDIUM, unsealed-field injection) + D2 (LOW, schemas unenforced) — both closed by this re-bench. The v0.1.0 seal break is verified real and its disclosure judged honest and complete for LOCAL/fixture scope: packs sealed under v0.1.0 verify INVALID under v0.1.1, no migration, fixtures re-registered. Scope = LOCAL/fixture only: caller-supplied fixture purchase refs, stdio transport, HMAC-SHA256 demo seal with a local demo key. The pack is a witness record, not a warranty contract — no adjudication, coverage, eligibility, or enforceability is claimed by the product or tested here. Observation O1 stands on the record: get_pack refusal is structural-only by design (a pure value tamper is still returned by get_pack but gated everywhere it matters — verify INVALID, claim_check transferable:false, transfer refused); consumers must treat verify_pack, not get_pack, as the validity gate (SPEC §5.3). Bench note D3 (informational, by design): transfer requires no holder authorization — possession of pack_id is a bearer capability, exactly as SPEC §3/§5 specify for v0.1; it must be revisited before any hosted/live scope.", "not_tested": [ "Live retailer, manufacturer, or payment integration — not in v0.1.1 by design: no third party is contacted and no claim is filed anywhere; registrations operate on caller-supplied fixture refs only", "Hosted or remote serving — v0.1.1 is local stdio only; transfer is a bearer capability on pack_id possession (bench D3, informational, by SPEC design) and must be revisited before any hosted/live scope", "Warranty adjudication, coverage, eligibility, or enforceability — none exists in the product at any scope; the pack is a witness record, not a warranty contract", "Migration of v0.1.0-sealed packs — none exists by disclosed design: v0.1.0 packs verify INVALID under v0.1.1 and fixture packs are re-registered (SPEC Bench Fix addendum)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-warranty-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-toolprint-mcp", "name": "Eclipse Toolprint", "product_url": "https://eclipsebazaar.com/products/eclipse-toolprint-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/toolprint/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, isolated state dirs, own canonicalizer from SPEC §3). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 240c329): 18/18 PASS, deterministic across 2 runs. Anchored tail-truncation (the v0.1 D1 repro) detected as TAIL_TRUNCATION_SUSPECTED with chain_valid:false; unanchored reads explicitly carry anchored:false / anchor_match:null and assert internal consistency only; a same-count forged tail (independently recomputed record_hash, invisible to bare-chain recompute) is caught as CHAIN_HEAD_MISMATCH by the caller anchor alone; anchor material (head_hash + record_count) present and advancing on pin_session, verify_call, and get_session_chain, with tool_version 0.1.1 on every envelope. Regression spot-checks PASS: verbatim presented description = VALID, swapped-fixture search = INVALIDATED with pinned 332a2771… / presented 6246163e…, and the v1 fixture fingerprint + SPEC §3.1 canonical preimage are byte-exact unchanged by the fix. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local), 40/40 probes PASS, defect D1 (MEDIUM — tail truncation erased a proof record undetectably, falsifying SPEC §2.3's unqualified tamper claim) — closed by this re-bench via implementation (caller-anchored head) plus the qualified SPEC §10 claim. Scope = LOCAL only: a local verification engine operating on caller-supplied tool lists/descriptions plus bundled fixtures, stdio transport; it does NOT proxy live MCP traffic, does not connect to remote servers, does not execute described tools, and makes no network calls — no live-traffic claim is made by the product or tested here. Claim honesty PASS with 1 non-blocking observation on the record: SPEC §2.3's original unqualified sentence and §8 item 4 remain verbatim in the body, neutralized only by §10's supersession header; the document read whole is accurate. §9.3 signed/external anchoring for cross-party evidence remains open by design and is not claimed.", "not_tested": [ "Live MCP traffic proxying or interception — not in v0.1.1 by design: the engine never proxies live traffic, connects to remote servers, or executes described tools; a live-traffic scope upgrade requires its own spec + bench", "Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied tool lists + bundled fixtures", "Cross-party evidence use — signed chain heads / external anchoring (SPEC §9.3) remain open by design and are not claimed; unanchored chain reads assert internal consistency only, never truncation detection", "Per-call metering or payment enforcement — none exists in v0.1.1 by design: the $0.05/call (PC-3) term is commercial metadata for hosted/commercial deployment; no payment, checkout, or billing code is in the server" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-toolprint-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-boomerang-mcp", "name": "Eclipse Boomerang", "product_url": "https://eclipsebazaar.com/products/eclipse-boomerang-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/boomerang/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, independent hashlib/hmac recomputation, no repo imports; fresh server process per D1 vector and per fuzz case). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1/D2 round (repo @ 985fe9f): 57/57 re-bench checks PASS, and the prior full bench suite re-run against v0.1.1 scores 83/83 (v0.1: 80/83). D1 (MEDIUM — unhashable-typed ids crashed the stdio process via uncaught TypeError at store lookups) CLOSED: the bench's crash vectors (list/dict purchase_id / return_id across initiate_return, get_return, verify_return) each return a clean JSON-RPC error in a fresh process with the server alive and answering tools/list afterwards; a 56-case wrong-type fuzz sweep over every advertised argument of all five tools plus 15 protocol-garbage cases killed no process; bool-as-int amount rejected as a type error, never accepted as 1. D2 (LOW — seal_type missing on verify_return INVALID branches and list_denials vs SPEC §5 'all responses carry scope + seal_type') CLOSED: every verify_return branch (VALID and all INVALID paths, reached via independently re-sealed records) and the list_denials response + stored denial entries now carry both fields uniformly. Mechanism spot-check PASS, semantics unshifted: happy path AUTHORIZED with the return record's receipt_hash + mandate_hash + purchase_seal identical to the sealed purchase and verify_return VALID; wrong serial → DENIED / SERIAL_MISMATCH. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), bench suite 80/83, the SPEC §3 novel mechanism passing in full (every bypass denied with the spec'd code, binding independently recomputed, seal-transplant forgery rejected x8, override audit: exactly the 5 spec tools and 10 override-shaped calls all NO_SUCH_TOOL) with defects D1 + D2 — both closed by this re-bench per the prior verdict's stated upgrade path. Scope = LOCAL/fixture only: caller-supplied fixture purchase records (receipt + mandate), stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Authorization is a sealed local record, NOT a real-world returns/logistics action — it does not ship, receive, refund, restock, or instruct any third party, and no merchant, carrier, payment, or logistics system is contacted; nothing about real merchant/carrier/refund integration is claimed by the product or tested here.", "not_tested": [ "Real-world returns, logistics, refund, or restock action — not in v0.1.1 by design (SPEC §7 non-goals): no merchant, carrier, payment, or logistics system is contacted and no third party is instructed; authorization is a sealed local record only", "Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture purchase records", "Payment, checkout, or per-return metering enforcement — none exists in v0.1.1 by design: the $1.00/return term is commercial metadata (Procure per-order pattern); no payment or checkout code is in the server", "Production key custody — seals use an HMAC-SHA256 demo key generated locally (gitignored keys/demo.key); no production key claim is made" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-boomerang-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-rebuttal-mcp", "name": "Eclipse Rebuttal", "product_url": "https://eclipsebazaar.com/products/eclipse-rebuttal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/rebuttal/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, fresh server process + isolated data dir + isolated key file per scenario; attack cases reused from prior suite). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C4/D5 round (repo @ 3f0668c): 39/39 scoped probes PASS, builder suite re-run 23/23. C1/D2 (HIGH — build_packet/map_evidence never verified the case seal, so a tampered chain was re-sealed into a VALID packet) CLOSED: tampered stored case (authorized_by -> buyer:mallory) -> validate_case case_seal_valid=false, map_evidence + build_packet hard refusal SEAL_INVALID, no packet stored, attacker value emitted nowhere (6/6). C2/D1 (HIGH — packet seal excluded text_rendering, so fabricated text verified VALID) CLOSED: seal now covers the full packet incl. text_rendering; supplied + stored text tamper INVALID and edit-any-field sweep 12/12 INVALID (5/5). C3/D3 (MED — mismatched receipt silently used via receipts[0] fallback) CLOSED: receipt sections MISSING, packet INCOMPLETE, mismatched receipt traced nowhere under 2 reason classes (8/8). C4/D4 (MED — external re-seal verified under unkeyed SHA-256) CLOSED: HMAC-SHA256 demo-key seals; unkeyed/wrong-key/foreign-key re-seals INVALID, legitimate key-holder flow VALID (7/7). D5 (LOW — null-valued elements in present sections) CLOSED: no null elements, partial nulls emit only present values (6/6). Spot-check P1 regression PASS (7/7): complete fixture COMPLETE + case_seal_valid=true, 11/11 elements traced, within_scope derivation correct, all 5 sections present, get_packet VALID. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 45/51 probes, core mechanism (traceability + anti-fabrication battery) passing in full with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: caller-supplied fixture dispute + mandate-chain + receipt data, stdio transport, HMAC-SHA256 demo seal with a local demo key (keys/demo.key, gitignored, mode 0600). Packet generation only — the tool never files, submits, or transmits anything, no card network/issuer/merchant/platform is contacted, and the generic GEN-* reason-code table is not any network's proprietary codes and claims no network affiliation; nothing about real filing, submission, or network acceptance is claimed by the product or tested here.", "not_tested": [ "Filing, submission, or transmission to any card network, issuer, merchant, or platform — not in v0.1.1 by design (SPEC §9 non-goals): packet generation only, no network calls at all", "Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture dispute + mandate-chain + receipt data", "Payment, checkout, or per-filing metering enforcement — none exists in v0.1.1 by design: the $5.00/filing term is commercial metadata (PC-7 pattern); no payment or checkout code is in the server", "Proprietary network reason codes or network affiliation — mapping is a small generic GEN-* table, labelled generic; no legal advice or win/loss prediction is provided", "Production key custody — seals use an HMAC-SHA256 demo key generated locally (gitignored keys/demo.key); the seal proves unchanged-since-sealed under that local demo key only, no production key claim is made" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-rebuttal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-crawlway-mcp", "name": "Eclipse Crawlway", "product_url": "https://eclipsebazaar.com/products/eclipse-crawlway-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/crawlway/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code, all hashes recomputed independently from SPEC §3 formulas; builder suite 25/25). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix C1–C3/D4/D5 round (repo @ d3af623): 48/48 scoped probes PASS, 0 FAIL. C1 (D1, HIGH — a standalone receipt object resealed with the public formula verified VALID with chain_valid: true) CLOSED: non-ledger objects (resealed forgery at position 1 and 99, resealed identity-swap of a genuine receipt) return INVALID with chain_valid: false and in_ledger: false; forged receipt_id returns RECEIPT_NOT_FOUND; the genuine ledger receipt still verifies VALID by id and by object (10/10). C2 (D2, MEDIUM — the terms-record seal was never enforced) CLOSED: both store-swap variants (hash-only; text+hash with stale seal) make record_crawl refuse with TERMS_SEAL_INVALID (nothing minted, ledger unchanged) and prior receipts verify INVALID with terms_status: seal_invalid; an untouched publisher in the same store is unaffected (12/12). C3 (D3, MEDIUM — the meter counted unsealed ledger lines) CLOSED: after appending a non-JSON garbage line and a well-formed-but-unsealed line, meter_report totals stay at the sealed count with rejected_lines: 2 surfaced and breakdowns byte-identical (5/5). D4 (LOW — filtered meter reports were internally inconsistent) CLOSED: for filters {}, {publisher}, {crawler}, {publisher+crawler}, total_receipts equals every breakdown sum and metered_total_usd equals total × 0.01 (9/9). D5 (LOW — unbound fields on a supplied receipt were not authenticated) CLOSED: an extra field (license_scope) or a tampered position verifies INVALID with structure_valid: false (6/6). Spot-check PASS 6/6: happy-path hashes match the bench's independent recomputation and revocation semantics are unregressed (revoked receipts verify TERMS_REVOKED with binding_valid: true, chain_valid: true; record_crawl under revoked terms refuses and mints nothing). Known LOW, non-blocking, disclosed (D6, fix-before-live): a corrupt non-JSON store line is handled by meter_report (counted in rejected_lines) but crashes the non-meter tools via the shared loader — the server exits instead of answering; the failure is loud and safe-direction (no false VALID, no inflated meter) and is recorded as fix-before-live for any hosted/long-running deployment. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 49/49 asserted probes PASS with defects D1–D5 — all closed by this re-bench. Scope = LOCAL/fixture only: receipt mechanics only — no crawling, no fetching, no network calls, no marketplace; callers supply content fingerprints (SHA-256 hashes) and Herald-card-shaped crawler identity refs, never content; the $0.01/call meter is recorded, never charged in v0.1.", "not_tested": [ "Crawling, fetching, or any network access — not in v0.1.1 by design (SPEC §2 scope): receipt mechanics only; callers supply fingerprints (hashes), never content", "Hosted or remote serving — v0.1.1 is local stdio only, operating on caller-supplied fixture terms, identities, and fingerprints; known LOW D6 (a corrupt non-JSON store line crashes non-meter tools, failing loud) is fix-before-live for any hosted/long-running deployment", "Payment, checkout, or charging — none exists in v0.1.1 by design: meter_report records the meter at $0.01/call with charged: false; the price is commercial metadata (PC-1 pattern) and no payment or checkout code is in the server", "Identity resolution or authentication of Herald cards — v0.1.1 validates the herald:: shape only; no card is resolved or authenticated", "A marketplace or listing function — none exists in v0.1.1; receipts are sealed, verified, metered, and revoked locally only" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-crawlway-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-outwatch-mcp", "name": "Eclipse Outwatch", "product_url": "https://eclipsebazaar.com/products/eclipse-outwatch-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/outwatch/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code, all hashes recomputed independently from SPEC §2; builder suite 29/29). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (LOCAL)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1–D3 round (repo @ b65c32e): 21/21 checks PASS, 0 FAIL (P6 aggregates 82 fresh-process vectors). D1 (HIGH — malformed arguments crashed the server process: list/dict target_id TypeError, invalid-IPv6 urlparse ValueError) FIXED: 25 original malformed cases + 57-vector fuzz sweep (wrong types on every arg of every tool, fresh process per vector) → 0 crashes, 0 tracebacks, every vector a clean JSON-RPC isError, process alive and tools/list responsive after each. D2 (HIGH — probes followed HTTP redirects, LOCAL scope bypassable by trampoline to an always-200 or external page) FIXED: redirects never followed, witnessed as-is — same-origin 302→/down(503), cross-origin 302→second-port /ok(200), external-shaped 302, redirect loop, and 302→302→503 chain all record status=302 only with destination hit counts unchanged (0→0). D3 (LOW — self-report refusal was an exact-key denylist and declared schemas were never enforced) FIXED: 19 variant shapes across all read/probe tools (uptime_pct, Uptime, UPTIME, selfReportedUptime, sla_pct, nested {meta:{uptime:…}}, unknown keys, register-time and nested-in-list forms) all refused cleanly, zero influence (availability exactly 0.5, receipt_count 2, badge unchanged). Regression spot-checks PASS: badge ladder 19×200+1×503 → availability 0.95 → UP; chain tamper on a store copy (seq-3 field edit) → valid=false, tampered_seqs=[3], pristine chain valid=true checked=6. New defects: none. Known LOWs remain open as documented for LOCAL scope, non-blocking (D4: hash chain unauthenticated — forged append / tail truncation undetectable under store-write access; pin chain_head externally, call verify_chain separately. D5: vantage names free-form and list form uncapped, mitigated by vantage_mode: local-simulated stamp). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (LOCAL), 72/76 checks PASS with HIGH defects D1/D2 and LOWs D3–D6 — D1/D2/D3 (and D6 bool-as-int as a side effect) closed by this re-bench. Scope = LOCAL only: probes run only against localhost or fixture:// endpoints, external probing refused; vantage points are local-simulated probe identities, NOT geographically independent; no self-report input accepted; $299/mo is a pricing term only — no checkout/payment code.", "not_tested": [ "External or public network probing — refused by design in v0.1.1 (SCOPE_EXTERNAL_REFUSED): no live external monitoring is performed, tested, or claimed", "Real geographic vantage independence — not in v0.1.1 by design: vantage points are local-simulated probe identities only, stamped vantage_mode: local-simulated on every receipt", "Hosted or remote serving — v0.1.1 is local stdio only; known LOWs D4 (unauthenticated chain, tail truncation undetectable under store-write access) and D5 (free-form vantage names, uncapped list form) remain documented for LOCAL scope", "Payment, checkout, or charging — none exists in v0.1.1 by design: the $299/mo feed license is commercial metadata / a stated pricing term only, and no payment or checkout code is in the server", "Dashboards, alerting, badge issuance/revocation beyond the derived badge_state, or any certification claim by the product itself — none exists in v0.1.1; certification is Verity's bench verdict only" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-outwatch-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-mpp-session-witness-mcp", "name": "Eclipse MPP Session Witness MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-mpp-session-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Label on record: MPP Session Witness — PASS-CONDITIONAL (sandbox/fixture), Verity re-bench of v0.1 @ 70cc818; the sole condition R-W1 was doc-only and is discharged by coordinator edits to the witness spec §5.4, verified on disk 2026-10-27. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. No test-bench scorecard is claimed for this listing; scorecard_ref is null." }, "verdict": "PASS-CONDITIONAL (sandbox/fixture)", "record_status": "current", "certified": false, "scope": "local stdio, fixture sessions + mock relay, Moderato testnet SHAPES, no chain interaction, no live clearing, no live Meter ingest, K6 claims only", "not_tested": [ "Live clearing — not tested and not claimed: v0.1 runs fixture sessions against a local mock relay only; no chain interaction of any kind", "Mainnet — not tested and refused by design: startup hard-refuses any mainnet marker; Moderato testnet shapes only (chainId 42431)", "Live Meter ingest — not tested and not claimed: draw records are emitted in Meter's record grammar for later ingest only", "Live protocol operation, Stripe API, deposit custody — absent at v0.1 by design; none exists in the package" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-mpp-session-witness-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-feedforge-mcp", "name": "Eclipse Feedforge", "product_url": "https://eclipsebazaar.com/products/eclipse-feedforge-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/feedforge/VERDICT.md + REBENCH-1.md (Verity, independent bench over stdio JSON-RPC only, never importing builder code; recompute.py written from SPEC §3/§4 + rules.json alone; builder suite 29/29). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity independent re-bench 2026-10-26, REBENCH-1 of the v0.1.1 Bench Fix D1 round (repo @ 1e41e3f): full prior suite 98/98 PASS, 0 FAIL (P1 11/11 · P2 14/14 · P3 6/6 · P4 3/3 · P5 55/55 · P6 6/6 · P7 3/3), defects list empty, plus expanded wrong-type fuzz 156/156 PASS on one persistent server process with a liveness ping (list_rules → 12 rules) after every vector. D1 (HIGH — the verify_feed supplied-feed path performed no type validation; five malformed feed objects raised unhandled TypeError/AttributeError and killed the server process) CLOSED: the 5 original crash vectors (list/dict catalog_id; entries:[123]; entries:\"abc\"; attributes-as-string) all return clean ToolErrors with no process death, verified in the prior suite AND verbatim in the expanded fuzz (supplied-feed deep shapes 23 vectors; 8 wrong value types × every argument of all 5 tools = 80 vectors; raw protocol attacks — non-string tool names, non-dict arguments, malformed/truncated JSON lines — server keeps answering after each). Behavior preservation PASS: fixture transform seals to feed_18337452aa65cc76 (full hash 18337452aa65cc76eb57c986e0d8f3ff58f2d6b389a09cf16df9d33cee9e94a5) over catalog cat_5820376e0fc71b86 — exactly SPEC §4.1 — and deep-equals the bench's independent recompute (85 attributes, 9 entries; CSV fixture also deep-equals + VERIFIED); spot recompute of SHOE-001/price_cents, MUG-002/availability, BAG-009/category, LAP-003/weight_grams, TEE-004/category matches feed values + explain_attribute provenance; tamper semantics preserved 9/9 (missing entries/attributes/unmapped_fields/feed_hash and partial provenance records are MISMATCH, never validation errors; untampered copies by-object and by-feed_id VERIFIED). Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 93/98 — the novel mechanism itself passed without exception (byte-for-byte independent recompute of all 85 fixture attributes, provenance always resolving to the real raw source value, absent-never-invented, tamper naming on value AND provenance, determinism, complete 99-call explain sweep); the sole condition was the D1 fix + P5 re-bench, now closed. Informational carry-overs, non-blocking (unchanged from v0.1): currency tokenization is a substring match (\"100 EURO\" yields EUR; SPEC does not define tokenization — recommend SPEC v0.2 state the token rule explicitly); duplicate product ids are both kept and explain_attribute resolves a duplicated product_key to the first entry; ragged-CSV extra cells beyond the header are discarded by the csv.DictReader restkey path (no field name, nothing to report). Scope = LOCAL/fixture only: local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only — no LLM calls, no network calls; no live catalogs benched or implied; $49/mo is a pricing term for the future hosted form only — no payment/checkout/hosting code.", "not_tested": [ "Live merchant catalogs or marketplace/catalog API sync (Shopify etc.) — not in v0.1.1 by design (SPEC §7): local engine over caller-supplied rows/CSV/JSON + bundled fixtures only", "Hosted or remote serving — v0.1.1 is local stdio only; the $49/mo hosted bundle form is a future commercial shape, not a v0.1 feature, and no hosted service is live or sold in v0.1", "LLM or network calls of any kind — none exist in v0.1.1 by design: deterministic documented rules (R01–R12, rules.json) only; Python 3 standard library only", "Payment, checkout, hosting, accounts, or billing — none exists in v0.1.1 by design: the $49/mo figure is commercial metadata / a stated pricing term for the future hosted form only", "Feed publishing or submission to any platform (Google/UCP endpoints etc.) — none exists in v0.1.1; feeds are sealed locally and verified by recompute only" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-feedforge-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-permits-mcp", "name": "Eclipse Permits", "product_url": "https://eclipsebazaar.com/products/eclipse-permits-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-permits-mcp-2026-10-26-2.json (scoped re-bench of the card -1 PARTIAL fix round; card -1 retained append-only): the witnessed-ledger mechanism, fence/refusal battery, chain-tamper and unchanged-read behaviour all PASS at local scope. Per the card's own scope verdicts: the Accela Citizen leg is certified at FIXTURE conformance only — the §7.7 Florida dogfood exit gate (owner's own Accela account, ≥1 real chain, ≥2 reads) remains OUTSTANDING and owner-side, outside this verdict; the dual-source leg is OUT OF CERTIFIED SCOPE (no dual-route jurisdiction at P0; refusal path benches correctly). Signing posture at P0 is fixture-labelled (FIXTURE_SIGNED).", "not_tested": [ "Live Accela Citizen reads under the owner's own account — the §7.7 Florida dogfood exit gate is outstanding and owner-side; certified scope for that leg is FIXTURE conformance only", "Dual-source agreement/divergence on a real dual-route jurisdiction — out of certified scope at P0 (no dual-route jurisdiction exists)", "Production Herald signing custody — P0 seals are fixture-labelled (FIXTURE_SIGNED)", "Any jurisdiction beyond the coverage registry — UNWITNESSED by construction; no portal scraping or aggregator witness source exists" ], "bench_date": "2026-10-26", "bench_version": "Scoped re-bench of the fix round ONLY (P-D1 + P-D2), fresh shapes per house law: Rig D (bench-owned, rig_d_rebench.py) — B7 full re-run (7 fence shapes x 14 agent verbs) + case/whitespace/unicode-lookalike key variants, string-value embedding, extreme nesting (in-args to depth 250, root-level raw depth 3000), arrays-of-arrays, duplicate raw-JSON keys, non-object arguments, operator-surface confusion incl. T3-signed operator call carrying fence keys, false-positive sweep on legitimate rich traffic (real NYC receipt + person-bearing payload via witness_verify on both stdio and handle() paths; citizen session_open with person-slot-bearing mandate scopes), P-D2 independent audit (own person-value scan, structural key scan, spec-only recompute, receipt byte-identity vs 37a228d), regression spot (B2 two on-disk shapes, B4 unchanged-read, B14 oracle both directions), suite + smoke re-run", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-permits-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "14569262eee810ea648718f93ce016457237425ae21a01cf98cb7e19a1ac24e6", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0 (P0, commit c4e7e18 on 37a228d)", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-permits-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-sec-figure-witness-mcp", "name": "Eclipse SEC Figure Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-sec-figure-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-sec-figure-witness-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "eclipse-scholarly-witness-mcp", "name": "Eclipse Scholarly Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-scholarly-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "CERTIFIED(local, fixture scope)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture scope) — Verity scoped re-bench 2026-10-26, standing card eclipse-scholarly-witness-mcp-2026-10-26-2.json (card -1 PARTIAL(local, fixture scope) retained append-only and superseded), scope language exact from the card: sealed snapshot srw-20261026-ea6bc90cf693, duplicate-bearing audit receipts recompute MATCH on both verification surfaces with tamper-by-name divergence, receipts carry the full §9.3 field set incl. the CC-BY attribution, disposition answers carry the §6.3 as-of block on all branches, work_resolve surfaces per-pin source labels, and the reinstatement-only population shape is consistent under amendment A3. Fixture signer (FIXTURE_SIGNED) — no live/production claim; PubMed errata coverage window 2023-01-01..2026-10-26 remains disclosed in the manifest known_bounds.", "not_tested": [ "Live/production signing — receipts and snapshot are FIXTURE_SIGNED (house fixture HMAC key, disclosed in the seal block); no live claim attaches until a live signer decision (spec O3) is taken", "Live source ingest — answers serve from the sealed snapshot only; no live passthrough exists or was tested" ], "bench_date": "2026-10-26", "bench_version": null, "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-scholarly-witness-mcp-2026-10-26-2.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "e7cc56a87c8de14fb206da47c4b14c20c4ce78f34aa5d972fdc3d426d62e2313", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-scholarly-witness-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-patent-witness-mcp", "name": "Eclipse Patent Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-patent-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": "PARTIAL", "record_status": "current", "certified": false, "scope": "PARTIAL(local, FIXTURE scope) — Eclipse Bazaar Test Bench 2026-10-26, card eclipse-patent-witness-mcp-2026-10-26.json: certification WITHHELD on three MED defects (PW-D1, PW-D2, PW-D4); this product is NOT certified. The card's scope language is binding: scope caps at local, FIXTURE scope — every seal is FIXTURE_SIGNED under fixture keys over fixture extracts; the mechanism (sealed legal-status event ledger, claims divergence, assignment-chain witness, source-drift witness) was measured certified-grade and every derivation was independently recomputed byte-identical, but no CERTIFIED verdict exists for this product. Live ODP ingest is MEASURED BLOCKED (bench re-verified HTTP 401 without an operator ODP key) and no live seal exists.", "not_tested": [ "Certification — withheld pending a fix round on PW-D1/PW-D2/PW-D4 (PW-D3 as rider) plus a scoped re-bench", "Live ODP ingest and any live seal — measured blocked without an operator ODP key (HTTP 401)", "Patent search, full-text retrieval, status lookup, fee/deadline calculators, monitoring — these verbs do not exist on any surface by construction" ], "bench_date": "2026-10-26", "bench_version": "verity-full-bench-1", "bench_score": null, "card_url": "https://eclipsebazaar.com/cards/eclipse-patent-witness-mcp-2026-10-26.json", "scorecard_digest": { "algorithm": "SHA-256", "value": "4a7bf09304e48f6169c976c74d7d0e5e92015b7c89a604879118fc0647fc8ef4", "method": "SHA-256 over the scorecard file bytes exactly as served at card_url" }, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": "2026-10-26", "verdict_age_days": 1, "covered_version": "0.1.0 (P0, HEAD 4ab3edd)", "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-patent-witness-mcp.html", "verify_recipe": [ "Open the bench scorecard (JSON) — the published record of this verdict: scope, per-check evidence, bench version and date.", "Recompute its SHA-256 digest (curl the scorecard URL | sha256sum) and compare with the digest on the verify page.", "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-trademark-witness-mcp", "name": "Eclipse Trademark Witness", "product_url": "https://eclipsebazaar.com/products/eclipse-trademark-witness-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": null }, "verdict": null, "record_status": null, "certified": false, "scope": null, "not_tested": null, "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-trademark-witness-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No bench verdict has been published for this listing — there is no scorecard to verify." }, { "product": "eclipse-split-mcp", "name": "Eclipse Split", "product_url": "https://eclipsebazaar.com/products/eclipse-split-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus-batch-20261026/bench/split/VERDICT.md + REBENCH-1.md + DELTA-BENCH-AMENDMENT-1.md (Verity, independent benches over stdio JSON-RPC only, allocations + hashes recomputed from SPEC §6/§8, builder code never imported for expected results; builder suite 60/60 at v0.1.2). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (local, fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture) — Verity: v0.1.1 independent re-bench 35/35 PASS, 0 FAIL (REBENCH-1 of the v0.1.1 Bench Fix D1–D4 round, repo @ e213490) plus v0.1.2 Amendment #1 scoped delta-bench 94/94 PASS, 0 FAIL (repo @ 1daf662) — the CERTIFIED (local, fixture) verdict carries to v0.1.2. Delta-bench: order event default + explicit identical (partial-completion allocations 63/37 over 100 per §6 independent recompute; settlement hash recomputes with settlement_event as hash-covered sealed content; genuine order verifies VALID via stored and supplied paths); session close-out seals settlement_event {type: session_closeout, session_id, draw_count, draw_attestation_ref} exactly as specified, draw_count 4117 → exactly ONE settlement record/event, accumulated total 250 allocated exactly; required-field validation 36/36 clean typed refusals with no settlement written and a valid settle succeeding afterward; hash/producibility on event data — tamper without rehash INVALID 5/5, malformed settlement_event with fully consistent rehash INVALID 18/18, never a crash; idempotence absolute in both orders (first sealed record returned verbatim, incl. garbage repeat arguments — judged consistent with the amended spec's verbatim wording); legacy v0.1.1 compatibility — supplied and stored-path legacy records without settlement_event verify VALID as order events, stored record byte-identical afterwards (verify fabricates nothing); process safety — wrong-type + protocol fuzz all clean errors, process alive, happy path works afterward; version metadata — initialize serverInfo 0.1.2, server.json 0.1.2, exactly six tools, settle schema documents session_closeout as ONE event. Re-bench v0.1.1: D1 CLOSED (4 original death vectors → clean errors, alive, incl. fresh-process re-runs; 59 wrong-type fuzz + 9 protocol fuzz cases clean; raw NaN/Infinity weights refused; garbage non-JSON line survived; happy path works after the full battery in the same process); D2 CLOSED (crafted zero-completion/total-0/empty-allocations record, non-completer allocation, and off-by-one allocations, each with consistent re-hash → INVALID; genuine settlement VALID via stored and supplied paths); D3 CLOSED (repeat settle with total 0, a different total 999, or a string total all return the SAME sealed record); D4 CLOSED (superseded mandate recomputes clean to its own mandate_hash under independent recompute excluding lifecycle fields; weights remain hash-covered). Regression spot-checks PASS: rounding 100/3 equal → 34/33/33 byte-exact; partial-completion renormalization 63/37 per §6; amend_weights → MANDATE_SEALED. Prior verdict on v0.1.0 (VERDICT.md): CONDITIONAL (local, fixture), 65/69 — defects D1–D4, all closed at v0.1.1. Scope = LOCAL/fixture only: allocation math + sealed records only — no money movement, no payment rails/wallets/payouts; fixture completion records with unkeyed SHA-256 demo seals (fix-before-live: keyed seal required before any non-fixture use); partial-completion renormalization is the documented §6 rule; the $1.00/settlement-event figure is a commercial term only — no payment/checkout/MPP network code exists in the build.", "not_tested": [ "Any money movement, payment rails, wallets, payouts, checkout, or MPP network/session code — none exists in v0.1.2 by design (SPEC §2/§7): allocation math + sealed records only; the Amendment #1 session close-out is a settlement-event definition over local records, not a live MPP integration", "Production attestation, identity verification, or non-repudiation — fixture completion records with unkeyed SHA-256 demo seals only; DISCLOSED fix-before-live: a keyed seal (HMAC/signature) is required before any non-fixture use", "A settle gate for non-fixture use — in fixture scope any caller may settle once ≥1 completion exists and idempotence makes that eligible set permanent; delegator-only settle / all-participants-recorded / settle window required before any non-fixture claim (SPEC v0.1.1 addendum)", "Hosted or remote deployment, multi-currency / FX, and dispute resolution — none exists in v0.1.2 by design (SPEC §7 non-goals)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-split-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-brake-mcp", "name": "Eclipse Brake", "product_url": "https://eclipsebazaar.com/products/eclipse-brake-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/spot-brake-012.md (Verity spot re-bench of v0.1.2, independent fresh-process, own probe script — no builder test code reused; ND1/C1 closed 5/5 strip variants → FAIL:5, honest paths unchanged 3/3, ND2 fixed, ND3 accepted spec-correct, no new findings). Prior chain: rebench-brake.md (v0.1.1 re-bench, CONDITIONAL), bench-brake.md (v0.1.0 FAIL), fix claims fix-brake-011.md / fix-brake-012.md. These benches issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product." }, "verdict": "CERTIFIED (LOCAL/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL/simulator) — Verity re-bench of v0.1.1, 2026-10-26 (argus101-program-20261027/rebench-brake.md) fixed and independently verified every defect from the v0.1.0 FAIL bench (D1–D10), including both blockers — the P9b partial→HALTED forgery fails at verifier step 1 with no key, and the submit path cannot put Brake into a state its own verifier rejects — returning CONDITIONAL on a single condition C1 (ND1). Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-brake-012.md) CLOSED C1: all five close-statement strip variants (statement deleted or None, final flag kept, stripped, or double-stripped) return verified: false, error BRAKE_VERIFY_FAIL:5, step 5, downgraded: true per §6.6; honest interim and honest final (HALTED and UNPROVEN-HALT) paths verify unchanged 3/3 with no downgraded key. ND2 (per-runtime re-enrolment acts under one CLEAR) fixed and verified 3/3 with duplicate/fresh-POLLING/D8 guards holding; ND3 ACCEPTED as spec-correct (§4.5/§4.6/§6.6). No new findings. Builder suite 51/51 (fresh process); spot bench own probes 13/13. Scope never exceeds LOCAL/simulator: local policy endpoint + fixture runtime, no live fleets.", "not_tested": [ "Live fleets — not tested and not claimed: v0.1.2 runs a local policy endpoint + fixture runtime only; no real fleet is halted, polled, or contacted, and no live-fleet path exists in the tree", "Production signing custody — signing is a fixture HMAC stand-in for the Herald pattern; fixture keys are derivable from the published source (labelled §7.4 fixture discipline), so a presenter holding the fixture keys can mint indistinguishable artifacts — scope-inherent, disclosed by the bench", "Hosted fleet shape — waits Gate B1; the local package is the reference implementation and no hosted endpoint exists or is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-brake-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-benchkit-mcp", "name": "Eclipse Benchkit", "product_url": "https://eclipsebazaar.com/products/eclipse-benchkit-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/rebench-benchkit.md (Verity re-bench, independent fresh-process, own probes in /tmp — fresh keys/data dirs per scenario, own fabrications and forgeries; prior FAIL bench bench-benchkit.md, fix claim fix-benchkit-011.md). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product. Repository PUBLIC (free-funnel policy, post-bench): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-benchkit-mcp @ v0.1.1. Official MCP Registry submission: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-benchkit-mcp v0.1.1 (see ship report ship-benchkit.md for live status)." }, "verdict": "CERTIFIED (local/fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local/fixture) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-benchkit.md): CERTIFIED (local/fixture). All prior v0.1.0 FAIL defects closed and independently verified — D1 (sample predictable to vendor) and D2 (F-B14 startup/config fence absent) blockers, M1–M4 majors (seal counts unsigned, recompute unauthenticated, keys hardcoded, verifier token missing), m1–m5 minors. Builder suite 27/27 fresh process. The decisive property holds adversarially: the spot-check sample is unknowable pre-reveal from every public input probed (6,005 candidate nonces from public state matched none; caller-supplied verifier/vendor nonces refused by name, 0 manifests). Two NEW minors recorded, neither gating this scope: N1 fence-scan encoding edges (sk_live_ form, uppercase scheme, scheme-less endpoints) and N2 seed-commitment provenance (commitment first appears in the manifest at draw time; unpredictability rests on per-draw CSPRNG regardless). Scope binds exactly: vendor self-bench SDK in the Assay scorecard format with verifier spot-check sampling, against fixture vendor servers only — local/fixture scope. A spot-check receipt is a statement about a sample of one sealed scorecard, powered as stated on its face — not a house bench verdict and not a certification of any vendor server.", "not_tested": [ "Live vendor servers — not tested and not claimed: v0.1.1 is exercised only against fixture vendor servers; no network client exists in the tree (no socket/urllib/requests/http.client) and artefacts carry value_class: test", "N1 (minor, open) — fence-scan encoding gaps: sk_live_ free-text form, uppercase HTTPS scheme, and non-http(s)/scheme-less endpoints can pass check_config; bounded at this scope because fixture execution never dials a descriptor — queued for the next fix loop", "N2 (minor, open) — the verifier seed commitment is not anchored pre-submission (it first appears inside the manifest at draw time); unpredictability is carried by per-draw CSPRNG entropy, not by the commitment — wording/mechanism alignment queued for the next fix loop", "Eclipse Assay / Eclipse Cupel as products — NOT a Benchkit surface by the HARD RULE: Benchkit consumes the Assay scorecard format as a specification only; Assay and Cupel are internal tools with no product surface, price, licence, or buy path anywhere in Benchkit or this listing" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-benchkit-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-payseal-mcp", "name": "Eclipse Payseal", "product_url": "https://eclipsebazaar.com/products/eclipse-payseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/rebench-payseal-012.md (Verity narrow re-bench, independent fresh-process, re-signed forgeries and own-variant probes; prior benches bench-payseal.md (v0.1.0 FAIL) and rebench-payseal.md (v0.1.1 CONDITIONAL), fix claims fix-payseal-011.md + fix-payseal-012.md). This bench issued no test-bench/results scorecard; scorecard_ref is null and no scorecard is claimed or hosted for this product. Repository PRIVATE (priced-product policy): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-payseal-mcp @ 158369b (v0.1.2). Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-payseal-mcp v0.1.2 (see ship report ship-payseal.md for live status)." }, "verdict": "CERTIFIED (LOCAL/simulator, fixture triples)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL/simulator, fixture triples) — Verity narrow re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/rebench-payseal-012.md): R-P1 (gating MAJOR from the v0.1.1 CONDITIONAL) closes clean — all four verbatim re-signed forgeries and every Verity variant that should fail now fail at check 3, and the no-over-blocking controls still pass (honest full → MATCH, honest partial → PARTIAL_DELIVERY, exact-aggregate duplicate splits, fully-delivered zero-priced line). R-P2 (a)–(e) spot-verified fixed (parsed-host locality, env scan beyond PAYSEAL_*, recursive tree scan, non-evaluate tools fenced in-process, refusal printed exactly once). Both fixer pins adjudicated spec-faithful. Builder suite 38/38 fresh process; F-P9 decisive recomputed on an independent code path (leg hashes, all 3 leg signatures, token unchanged from v0.1.1, record_hash per §4.6, Herald-fixture signature, offline verify from the §6.2 export alone → MATCH). Idempotency/metering unchanged (exactly 1 metering point per sealed evaluation; refusals meter 0). Surfaces disjoint in fresh stdio subprocesses; tool version on the wire 0.1.2. Three boundary observations recorded, none gating. Scope is exactly LOCAL/simulator, fixture triples — no live input, execution, or payment claim is licensed by this verdict.", "not_tested": [ "Live invoices, mandate services, delivery systems, or payment rails — not tested and not claimed: v0.1.2 evaluates fixture triples only; no network or payment code exists in the tree", "Payment execution of any kind — Payseal is verdict-only by construction (no pay/settle/transfer/escrow/release verb exists on either surface); the Till payment rail is a separate counsel-gated surface, not part of this product or listing", "Production signing custody — signing is a fixture HMAC stand-in for the Herald RS256 pattern; fixture keys are local-only and fixture-key verification is fixture-sense only; real Herald signing is the live-phase form, not built", "Hosted deployment — no hosted endpoint exists or is claimed in v0.1.2; the local stdio package is the reference implementation; per-call charging waits a hosted endpoint (metering shape recorded, never charged in v0.1.2)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-payseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-settleseal-mcp", "name": "Eclipse Settleseal", "product_url": "https://eclipsebazaar.com/products/eclipse-settleseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/rebench-settleseal.md (Verity re-bench, independent, bench-written dataset + spec matcher, fresh-process stdio, cross-process determinism, scratch-tree pin/fence probes, full chain-correct attacker reseals). Prior FAIL bench: bench-settleseal.md; fix claim: fix-settleseal-011.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (simulator, fixture records)", "record_status": "current", "certified": true, "scope": "CERTIFIED (simulator, fixture records) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-settleseal.md): all three blockers, both majors, and the minor from the v0.1.0 FAIL bench are fixed and independently re-proven — verify pins only the out-of-band key-store Herald key (attacker reseals and presented-key swaps all FAIL), the shipped v0.1.0 private key is burned and absent tree-wide outside keys/, and the run receipt is fully recomputed with run_id bound (rebind/window/leg tampers FAIL by named step). M1 two-leg taxonomy RATIFIED: SPEC §2.5 enum extended 8→11 with MISSING_PAYOUT / MISSING_RAIL / MISSING_LEDGER (present in exactly two legs, absent from the named leg), amendment logged in SPEC.md AMENDMENTS 2026-10-27. Builder suite 27/27 fresh process; F-S9 decisive test passed against a bench-written dataset and bench-written spec matcher (13 keys: 2 matched, 11 exceptions, 11 distinct classes) with fresh-process recompute SETTLE_VERIFY_PASS. Scope never exceeds simulator / fixture records: three-way reconciliation (mandate ledger vs rail settlement vs bank payout) over fixture records only; moves no money; no live rail/bank integration.", "not_tested": [], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-settleseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-mockmint-mcp", "name": "Eclipse Mockmint", "product_url": "https://eclipsebazaar.com/products/eclipse-mockmint-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/rebench-mockmint.md (Verity independent re-bench, fresh-process, bench-written probes: strip battery 12 artifacts per level, 58 hostile calls, forged-ecosystem and wrong/removed-anchor probes, F-K10 outsider flow 12/12). Prior FAIL bench: bench-mockmint.md; fix claim: fix-mockmint-011.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null). Repository PRIVATE (priced-product policy): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-mockmint-mcp @ v0.1.1. Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-mockmint-mcp v0.1.1, status active / isLatest (confirmed by registry API fetch at ship, publishedAt 2026-10-27T06:28:16Z)." }, "verdict": "CERTIFIED (LOCAL/sandbox)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL/sandbox) — Verity re-bench of v0.1.1, 2026-10-26 (argus101-program-20261027/rebench-mockmint.md): all three v0.1.0 blockers (D1 shipped private keys, D2 presenter-trusted verification, D3 detection claim exceeding measurement), majors D4–D6, and minors D7–D10 fixed and independently re-proven; builder suite 49/49 fresh process, additionally re-run 49/49 by the shipper. The verifier has a real out-of-band trust anchor (fully forged ecosystems and the shipped-key exploit shape both fail; a removed anchor refuses rather than trusting presenter material); no private key material exists in the tree outside the gitignored keys/ store; and the F-K11 detection claim matches measurement level-for-level, including the Amendment A1 boundary: single-identifying-field detection (mint_id / artifact_id / mockmint_ ref resolving against the ledger export) is SYNTHETIC_MOCKMINT, while records retaining only non-identifying fields or bare payload values are NO_WATERMARK_FOUND — detection is NOT claimed for bare payload values with every structural field removed. Scope never exceeds LOCAL/sandbox: watermarked synthetic counterparties for commerce testing; every artifact carries the §4.4 watermark; no hosted mint, no live system, no real counterparty. Four new minors (N1–N4) recorded in the re-bench, none blocking at this scope (see not_tested).", "not_tested": [ "Hosted or any non-local scope — none claimed: no hosted mint, no network egress, no live merchant/agent/API connection exists in the tree", "Bare-payload detection — NOT claimed and measured as the honest limit: values hand-copied as bare payload with every structural field removed return NO_WATERMARK_FOUND (SPEC §11.2 / §14 Q-K1, Amendment A1); the listing states this limit rather than overselling detection", "§12 enforcement inside Till/Meter production ingest — Mockmint's contract remains stated, not verified in this product; verification is owned by the Till/Meter benches per SPEC §14 Q-K4", "N1 (minor, open) — malformed explicit trust-anchor entries are silently discarded and the anchor falls through to env/store instead of failing that role closed; not exploitable (presenter material can never enter through this path) — hardening queued", "N2 (minor, open) — detect attribution with conflicting identifying fields attributes to the chain-lookup mint without flagging the conflict; detection itself (synthetic) is correct; SPEC §11.2 is silent on conflicts — queued", "N3 (minor, open) — idempotent re-activation of an already-ACTIVE_SANDBOX mint returns success before the window check when carrying a ts at/after expires_at; no state change and no extra metering, and emission remains window-gated — queued", "N4 (minor, open) — three variant shapes do not trigger the §12 refusal helper (a herald_attestation top-level key name, a mockmint_ ref nested as a dict-of-dict inside refs, and a mockmint_ ref nested in an arbitrary sub-object outside refs); all five canonical §12 triggers and four attestation shapes pass — helper shape list to be enumerated exactly, queued" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-mockmint-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-reviewseal-mcp", "name": "Eclipse Reviewseal", "product_url": "https://eclipsebazaar.com/products/eclipse-reviewseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/rebench-reviewseal.md (Verity independent re-bench; prior FAIL bench bench-reviewseal.md, fix claim fix-reviewseal-011.md). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null). Repository PRIVATE (priced-product policy): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-reviewseal-mcp @ v0.1.1 (commit 8ff7f12a49cdf724dde192d80c0b27f52c8ec018). Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-reviewseal-mcp v0.1.1, status active / isLatest (confirmed by registry API fetch at ship, publishedAt 2026-10-27T06:31:11Z)." }, "verdict": "CERTIFIED (LOCAL/simulator, fixture corpus)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL/simulator, fixture corpus) — Verity re-bench of v0.1.1, 2026-10-27 (argus101-program-20261027/rebench-reviewseal.md): all 8 re-bench conditions pass on independent probes (fresh stdio processes; pack-alone verification with bench-written stdlib-only code, zero product imports). B3 decisive: chain hashes, both signatures on every record and the corpus-open record, snapshot hash and both snapshot counter-signatures all verify from pack keys alone; recomputed head hash matches; F-R12 exact unreduced rational Fraction(7,10) == snapshot 7/10. Forgery boundary confirmed: minting a BOUND_VERIFIED receipt from source + fixtures + pack alone fails (UNBOUND_RECEIPT_UNVERIFIABLE / UNBOUND) — the issuer key is exported nowhere and lives only in keys/ (mode 600, gitignored). Fence battery 15/15 + 5/5 refused by named class; malformed sweep across all 11 tools = named refusals, zero mutation; builder suite 36/36 fresh process, re-run 36/36 by the shipper. Scope binds exactly: binding, chaining, snapshot, and recompute behaviour over fixture corpus only — not any live marketplace's review integrity, and not the truth of any review's content. Two minor residual notes (n1/n2) recorded in not_tested, neither blocking at LOCAL scope.", "not_tested": [ "Live marketplace scope — none claimed and none exists in the tree: no live marketplace integration, no real reviews, no real buyers; any scope beyond LOCAL requires asymmetric keys + re-bench (SPEC §10.2)", "n1 (minor, scope-inherent) — an evidence pack is recomputable but NOT tamper-evident against its own holder: because the sanctioned fixture-HMAC branch exports verification keys and verification key = signing key, a pack holder can alter a record, re-chain, and re-sign records + snapshot so the server recompute returns verified for the fabricated pack (both attacks demonstrated in the re-bench). The statistic claim (recompute over a pack received from a trusted origin) is unaffected and receipt minting is NOT enabled by this (the issuer key is never exported). Pack origin trust is out-of-band at this scope", "n2 (minor) — RECEIPT_UNVERIFIABLE precedence: on a store-tampered transcript the export names CHAIN_GAP, not RECEIPT_UNVERIFIABLE (chain assessed first); the reason is less specific, never less safe — the export still downgrades and the statistic is still withheld on every auditor path", "Production signing custody — signing keys are locally generated fixture keys in the gitignored keys/ store (mode 600); the pack exports marketplace + witness fixture verification keys, explicitly labelled fixture-only; the receipt-issuer key is never exported", "Truth, quality, or authorship of any review's content — Reviewseal attests binding and corpus integrity only (SPEC §0.3); UNBOUND is never a fake/fraudulent verdict" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-reviewseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-continuity-mcp", "name": "Eclipse Continuity", "product_url": "https://eclipsebazaar.com/products/eclipse-continuity-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/spot-continuity-012.md (Verity spot re-bench; history bench-continuity.md + rebench-continuity.md). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null). Repository PRIVATE (priced-product policy): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-continuity-mcp @ v0.1.2 (commit bcd599231b774cba4704b3aa951ddfb0b1e34baa). Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-continuity-mcp v0.1.2, status active / isLatest (confirmed by registry API fetch at ship, publishedAt 2026-10-27T06:44:27Z)." }, "verdict": "CERTIFIED (local/fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local/fixture) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-continuity-012.md), closing condition C1 from the v0.1.1 re-bench (rebench-continuity.md; original bench bench-continuity.md): the pin parser fails closed on every probe constructed (the 4 N1 shapes refuse on both tools x both anchor chains + empty chain + stdio surface, 28/28, no verdict/receipt; 51 unconsumable variants x both tools, 102/102 refuse; nested wrappers, descriptor abuse, double secret aliases, scalar/bool/None values all refuse), every supported pin shape provably binds, and N2 (stdio non-JSON line -> named JSON-RPC parse error -32700 / MALFORMED_INPUT) is fixed. No-regression spots pass (A5/A6/A7, F-C14 recomputed by independent bench code from SPEC text alone, builder suite 49/49). Scope binds exactly: signed identity-continuity chains (genesis, typed append, fork freeze, principal-only resolution, revocation, offline + prefix verification) over fixture principals/models/keys, local stdio only — no live registry or production identity claim (SPEC SS11). Refusal-vs-support ruling on its face: the spec names no pin shape, C1 allowed either branch, and refusal is the fail-closed direction.", "not_tested": [ "Live identity scope — none claimed and none exists in the tree: no live registry, no production identity store, no real principals; any scope beyond local/fixture requires asymmetric keys + re-bench (SPEC SS11)", "Trustworthiness of a chained agent — Continuity proves same-principal lineage only; nothing about a new model's capability, safety, or fitness is attested or implied", "Production signing custody — signing is consumed through a fixture Herald interface stub (HMAC fixture keys, local gitignored keys/ store mode 600); Continuity stores key refs in links, never private key material, and defines no signing scheme of its own", "Hosted/networked operation — local stdio only in v0.1.2; no charge path exists (metering records only, SS9.2)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-continuity-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-regulens-mcp", "name": "Eclipse Regulens", "product_url": "https://eclipsebazaar.com/products/eclipse-regulens-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/spot-regulens-012.md (Verity spot re-bench; history bench-regulens.md + rebench-regulens.md). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null). Repository PRIVATE (priced-product policy): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-regulens-mcp @ v0.1.2 (commit ada541cf0de2f8748ec171e37330d9b2203a5460). Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-regulens-mcp v0.1.2, status active / isLatest (confirmed by registry API fetch at ship, publishedAt 2026-10-27T07:00:15.326369Z)." }, "verdict": "CERTIFIED (LOCAL/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED (LOCAL/simulator) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-regulens-012.md), closing all three conditions (N1–N3) of the v0.1.1 re-bench (rebench-regulens.md; original bench bench-regulens.md): N1 single trust anchor closed (genuine artifacts RECOMPUTED; rotation and deletion of both keys/ files fail closed IMPACT_VERIFY_FAIL:1, never via the fixtures fallback; KEY_STORE_MISSING: at the anchor layer; issuance with keys missing refuses SIGNATURE_INVALID, no sealed output); N2 §6.2 face text verbatim at the top level of 14/14 envelope classes; N3 unhashable subscriber_ref yields named SET_VERSION_NOT_FOUND across the surface (9/9 named tools + 21-call same-class sweep, zero generic-envelope leaks). No-regression spots pass (T7 fabrication FAIL:5, T8 total fabrication FAIL:1, F-R13 P4 × S-B independently recomputed exactly with no regulens imports, 5-process determinism 1 distinct output, builder suite 47/47 with socket-denied parity). Scope binds exactly: regulation-change impact receipts mapped to the subscriber's own declared control set over fixture regulator publications, local stdio only — NO live ingestion (SPEC §10 source-terms gate unbuilt by design) and the §6.2 'not legal advice; not a compliance determination' posture applies to every receipt and envelope.", "not_tested": [ "Live ingestion — none claimed and none built by design: no live regulator feed, site fetch, scrape, poll, or republication exists in v0.1.2; live phases are gated on the SPEC §10 source-terms review + counsel review of the §11.2 language and require a re-benched code change", "Legal advice / compliance determinations — never offered: Regulens emits a deterministic impact receipt over declared controls only; it states no remediation, required action, or deadline, and an unaffected (nil) result means only that the mapping over the declared set found no anchor match, never that a subscriber is unaffected in law", "Undeclared controls — invisible by construction (SPEC L5): the mapping sees only the subscriber's sealed declared set at the cited set_version; no inference, enrichment, or validation of the legal correctness of a subscriber's anchors", "Production signing custody — witness + subscriber keys are locally generated fixture keys in the gitignored keys/ store (files mode 600, never committed); signing is consumed through the Herald interface pattern and no production custody scheme is claimed. Informational observation from the spot re-bench: the signing path retains its documented D3 bootstrap (a signing call on a missing store key creates a fresh keys/ key, operationally a rotation) — verify/resolve paths create nothing and no burned artifact is resurrected", "Hosted/networked operation — local stdio only in v0.1.2; no charge path exists (SPEC §9.2: metering records only, no payment call, no entitlement/subscription check)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-regulens-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-scapegoat-mcp", "name": "Eclipse Scapegoat", "product_url": "https://eclipsebazaar.com/products/eclipse-scapegoat-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/spot-scapegoat-012.md (Verity spot re-bench, fresh processes, nonexistent state dir, bench-side tamper code only, subject tree unmodified). Prior history: bench-scapegoat.md (v0.1.0 bench) + rebench-scapegoat.md (v0.1.1 re-bench, CONDITIONAL (local) with condition C1/N1). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local) — Verity spot re-bench of v0.1.2, 2026-10-27 (argus101-program-20261027/spot-scapegoat-012.md), closing the sole condition C1 (defect N1) from the v0.1.1 re-bench: proof_verify step 2 recomputes the signed proof_path_head_hash over the presented path and step 4 binds the presented path to the recomputed walk including every entry's conformance_checks — 6/6 N1 rows and 11/11 bench-devised path attacks FAIL at the named steps, honest pack PASSes, and re-pointing the head hash fails at step 1 (Herald signature over the verdict core). No-regression spots re-proven: F-S13 both branches PASS from the pack alone in a fresh process with a nonexistent state dir (no store created), B1 gating pair, byte-identical determinism (verdict_hash 9f2ee71e… across fresh processes), builder suite 53/53 fresh process and 53/53 with sockets denied. Combined with the v0.1.1 re-bench (B1–B3, M1–M4, m1–m6 verified), the product is CERTIFIED (local): local stdio, fixture record sets only, recompute verdicts only — causal evidence, NOT a legal liability determination; the SPEC §10 counsel gate (evidentiary use in real disputes) is untouched and still binding.", "not_tested": [], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-scapegoat-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-sponsorline-mcp", "name": "Eclipse Sponsorline", "product_url": "https://eclipsebazaar.com/products/eclipse-sponsorline-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-sponsorline.md (Verity bench, builder suite re-run from clean state, F-S14 re-run independently with bench-side harness in a fresh process with an empty state dir, 44 bench-devised adversarial probes, scope/claims audit by grep + code read; subject tree unmodified by the bench). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local) — Verity bench of v0.1.0, 2026-10-27 (argus101-program-20261027/wave2/bench-sponsorline.md): builder suite 25/25 re-run from clean state; decisive fixture F-S14 independently reproduced in a fresh process from pack + pinned keys alone (payments ACTIVE with per-action 5000 / aggregate 20000 limits and window on the receipt face; publishing and contracting UNACCEPTED by derivation over the complete chain; same descriptor COVERED-BY-RECEIPT as payments, CLASS_MISMATCH as publishing and contracting); 44/44 adversarial probes (pack-smuggled keys ignored, forged signatures fail at receipt_signatures, revocation replay, presented-status substitution, receipt-face tampering, malformed-args battery with store byte-identical, cross-surface byte-identical NO_SUCH_TOOL refusals, all 6 ordered class pairs CLASS_MISMATCH, 300-op seeded fuzz). PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture sponsors/parties only, value_class \"test\" on all artifacts, fixture HMAC stand-in for the Herald pattern (no live Herald key), no counsel-gate (§10) surface built or claimed. Conditions applied at ship: C1 — the bench's library-helper condition: the internal helper behind F-S14 branch (c) is not exposed on any tool surface and is not cited standalone in this listing or the README (verifier surface is receipt_verify only); C2 — the §11.2 liability fence is carried verbatim in the README, in the full manifest of record (server.legacy.json), and in this listing (the registry server.json description is the ≤100-char short form per the registry limit). All 3 builder deviations (D1 enrolment record_type, D2 unchained PRESENTATION_NOT_FOUND refusal, D3 SPEC.md §11.4 enumeration) were ACCEPTED at bench.", "not_tested": [ "Real sponsors, real sponsored parties, or real actions — fixture sponsors/parties only; no real acceptance is solicited or recorded", "Legal effect of an acceptance — whether a Sponsorline acceptance creates, transfers, limits, or enforces legal liability is a counsel question; the SPEC §10 counsel gate (e-signature enforceability, permissible terms language, org signatory authority, consumer-protection limits, insurance and platform-terms interaction, revocation's legal effect) is unbuilt by design and no live phase exists in this code to flip", "Live Herald RS256 signing — v0.1.0 signing is a fixture HMAC stand-in for the Herald pattern; Sponsorline holds no live Herald key", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation — local stdio only; no charge path and no live Meter ingest (metering points only, $0.10/attestation is a book reference)", "Standalone use of the internal action-check library helper (bench condition C1) — it is not a tool and must never be exposed or cited standalone unless it first gates on a successful verify_pack of the same pack; any such exposure is a scope change requiring re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-sponsorline-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-morphguard-mcp", "name": "Eclipse Morphguard", "product_url": "https://eclipsebazaar.com/products/eclipse-morphguard-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-morphguard.md (Verity bench of v0.1.0 + spot re-bench of v0.1.1 closing C-1; independent fresh-process F-G9 and long-chain verification, bench-side adversarial battery, subject tree unmodified by the bench). Fix of record: wave2/fix-morphguard.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local, fixture payee records)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture payee records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-morphguard.md) returned PASS-CONDITIONAL at that scope subject to conditions C-1..C-4; the spot re-bench of v0.1.1 in the same record CLOSED C-1 and confirmed C-2/C-3/C-4: builder suite 32/32 re-run from clean state; decisive fixture F-G9 independently reproduced in a fresh process from pack file + local pinned fixture keys alone (drift classes exactly [bank_id, rail], last_agreeing_seq=4, head_fingerprint == fingerprint(drifted set)); C-1 long chains verified end-to-end at 23/30/40 records (verify args >20k generic cap, within the 200k pack limit) and chain_export labels witnessed only when its embedded transcript actually verified (refusal/failed transcripts downgrade to UNWITNESSED_EXPORT); 28-check adversarial battery on the verify layer (tamper, swap, deletion, forged signatures, pack-carried keys rejected at keys_pinned, wrong/swapped pinned keys fail) and 300-step model-checked state fuzz with 0 illegal transitions. Scope is exactly: local stdio MCP, fixture payee records only, verdict to caller only (never executes payment), HMAC pinned-fixture-keys signing (fixture stand-in, not public keys), no counsel-gate (§10) live phase built or claimed. Export packs carry fixture detail tokens for recompute and are NOT value-free (C-3); drift receipts carry fingerprints + changed field classes only, never values. chain_verify proves integrity of the records presented, not completeness of history (C-4): a consistently pruned prefix verifies as that shorter chain, so callers needing completeness must pin the head fingerprint + record count out-of-band.", "not_tested": [ "Real payee, vendor-master, bank, or rail data — fixture payee records only; SPEC §10 counsel gate (a) checking details against any real vendor-master / bank / rail system is unbuilt by design, named, with no dormant live path", "Holding or processing real bank-account numbers — SPEC §10 counsel gate (b) (data-protection + NACHA-adjacent obligations) is unbuilt by design; no real bank-account number enters any fixture", "Automatically halting a real payment — SPEC §10 counsel gate (c): any integration where a BLOCK automatically halts a real payment inside a third party's AP flow (interference/liability review) is unbuilt by design; Morphguard returns a verdict to the caller only and never pays, settles, releases, or holds funds", "Fraud prevention for live payments — SPEC §10 counsel gate (d): marketing the verdict as fraud prevention for live payments is counsel-gated and NOT claimed; never claimed for v0.1.1 are fraud prevention, bank-account verification, 'prevents vendor fraud', live monitoring, or any Till/payment capability", "Asymmetric / third-party verifiability — v0.1.1 signing is an HMAC-SHA256 fixture stand-in for the Herald RS256 pattern using pinned fixture keys only; the pinned fixture keys are HMAC secrets, NOT public keys, and anyone holding a pinned fixture key could forge a chain, so no public or third-party verifiability is claimed; RS256 (or equivalent asymmetric) is required before any scope where verifier and signer are in different trust domains", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation — local stdio only; metering point only on payee_check ($0.05/check shape), no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-morphguard-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-adproof-mcp", "name": "Eclipse Adproof", "product_url": "https://eclipsebazaar.com/products/eclipse-adproof-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-adproof.md (Verity bench of v0.1.0 + spot re-bench of v0.1.1 closing C1/F2; builder suite re-run clean-state, decisive F-A10 and C1 probes reproduced independently in fresh processes, 28/29 adversarial verify battery with the 1 miss a bencher expectation error recorded in the bench, subject tree unmodified by the bench). Fix of record: wave2/fix-adproof.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local/fixture)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-adproof.md) returned PASS-CONDITIONAL (local/fixture) subject to condition C1; the spot re-bench of v0.1.1 in the same record CLOSED C1 and F2: builder suite 26/26 re-run from clean state; bencher-written independent C1 probes — orphan bind (locally hashed real fixture claim never submitted, and an arbitrary 'a'*64 hash) refused CLAIM_NOT_SUBMITTED with no pointer, no store.json created, zero state and zero metering; the full zero-submit path never reaches PUBLISHED or VERIFY_PASS; submitted binds meter exactly once and idempotent re-binds do not double-meter; future-bound pointer at the gate refuses POINTER_BOUND_IN_FUTURE (F2, not POINTER_MISMATCH, no gate receipt). Decisive fixture F-A10 independently reproduced: VERIFY_PASS in a fresh subprocess with a new empty data dir (no store.json created — genuinely offline/stateless), and tamper classes fail at their named steps (claim word altered VERIFY_FAIL:1, Herald signature stripped VERIFY_FAIL:3, presented-digest substitution both variants VERIFY_FAIL:1). Scope is exactly: local stdio MCP, fixture claims/documents only, fixture publish pipeline, offline pointer verification from artifact+document+pointer+gate receipt+chain segment+pinned public keys; value_class 'test' on all artifacts; no advertising-claims counsel-gate (SPEC §10) live phase built or claimed. Load-bearing label (SPEC §11.1, verbatim): the pointer proves substantiation was BOUND, not that it substantiates — substantiation adequacy is the publisher's/counsel's call. F5 standing fence: RSA key generation uses the random module (Mersenne Twister), not a CSPRNG — fixture-only; CSPRNG keygen + re-bench required before any scope above fixture.", "not_tested": [ "Real claims, real substantiation documents, or any live publisher / ad-platform / marketing use — fixture claims/documents only; the SPEC §10 advertising-claims counsel gate is unbuilt by design, named, with no dormant live mode: before any live use counsel must clear (a) §11's label language, (b) the gate's marketing description, (c) what, if anything, a carried pointer may be represented as to advertisers, publishers, and regulators", "Substantiation adequacy — whether a document actually substantiates a claim, and whether a claim may lawfully run, is the publisher's/advertiser's call with their counsel, outside Adproof entirely; never claimed for v0.1.1 are 'substantiated', 'verified claim', 'compliant advertising', 'FTC-safe', 'legally cleared', or any implication that a gate PASS means a claim is true, supported, or lawful to publish; no tool reads, scores, or reviews a substantiation document's contents (no adequacy verb exists)", "F5 — RSA key generation uses the random module (Mersenne Twister), not a CSPRNG: acceptable only for fixture keys at local/fixture scope; any scope above fixture requires CSPRNG key generation and a re-bench, and no such scope is claimed", "Bench C2 notes F3/F4, left as documented notes at v0.1.1 — the key-argument blocklist is enumerative rather than an allowlist (inert: no code path consumes a key from a pointer, receipt, or tool argument; verification uses pinned public keys only), and the function layer tolerates extra/irrelevant fields (server schemas declare additionalProperties: false but server.handle does not enforce schemas; no malformed required field was accepted in any bench test)", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone generates its own fixture keys on first run to run the full suite", "Hosted or live operation — local stdio only; metering point only per claim bound ($0.05/claim shape), no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-adproof-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-feeseal-mcp", "name": "Eclipse Feeseal", "product_url": "https://eclipsebazaar.com/products/eclipse-feeseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-feeseal.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean-state 29/29, decisive F-F9 reproduced independently in both runs, bencher adversarial battery 33/33, scope audit confirming the §10 counsel gate genuinely unbuilt; clean bench, no conditions, F-2/F-3 advisory only). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture transactions)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture transactions) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-feeseal.md), clean bench, NO conditions: builder suite 29/29 re-run clean by bencher; decisive fixture F-F9 independently reproduced in fresh processes — batch spanning the v1 (250 bps) to v2 (300 bps) succession boundary recomputes exactly, including OVERCHARGE +70 (charged 350 vs v1-prescribed 280); relabelling the overcharged transaction as schedule_version 2 does not move the verdict (sealed in-force v1 governs, VERSION_CLAIM_MISMATCH on the verdict's face), and an edited sealed schedule copy fails at step 1 (FEESEAL_VERIFY_FAIL:step1_schedule_seal, UNVERIFIED_EXPORT). Bencher adversarial battery 33/33: forged signatures, presented-verdict substitution, schedule-swap, 21-call malformed-args battery, refusal-must-not-mutate, key custody, metering exactness, determinism — all pass. Scope is exactly: local stdio MCP, fixture schedules + fixture transactions only, value_class 'test' on all artifacts; no real fee is charged, audited, refunded, or adjusted by Feeseal and no live marketplace is touched; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): every fee charged is sealed against the published fee-schedule version in force; overcharges against that version are detected automatically. Advisory F-2/F-3 (non-blocking, do not limit scope): signing is an HMAC fixture stand-in for Herald RS256 (disclosed; live phase would need real Herald signing + re-bench); sealed effective_to is derived, never mutated; feeseal_verify step 4 does not independently anchor prev_hash (not exploitable without the Herald key; v0.2 hardening note).", "not_tested": [ "Real fees, real marketplace schedules, or any live marketplace use — fixture schedules + fixture transactions only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: operating Feeseal live (sealing a real marketplace's schedule as evidence against it, publishing findings about a named live marketplace, enforcing or collecting on variances, or holding Feeseal out as an audit of a named live marketplace) is counsel-gated under the FinTech Law / marketplace packet, additionally implicating defamation/commercial-disparagement and contract-interference analysis counsel must scope before any live design exists", "Any real fee audited, charged, refunded, or adjusted — Feeseal detects and evidences variances against the sealed version only; it never charges, refunds, withholds, adjusts, or collects any amount and issues no instruction to do so; never claimed for v0.1.0 are 'fee audit', 'refund recovery', 'guaranteed accurate fees', 'certified fee schedule', any implication of live marketplace coverage or enforcement, or any finding about a real platform (SPEC §11.3 strings are named here only as never claimed)", "Provenance beyond the seal — a verdict proves only that the charged fee does or does not equal the deterministic output of the sealed version as presented, for the stated inputs; it does not prove the presented schedule was the one actually published to the world, that transaction inputs are complete, or that any remedy is owed (SPEC §11.4)", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 with local fixture keys (keys/ gitignored, mode 600, never committed); a live phase requires real Herald signing and a re-bench; a fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering point only per signed-verdict transaction ($0.002/transaction shape), no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-feeseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-trueprice-mcp", "name": "Eclipse Trueprice", "product_url": "https://eclipsebazaar.com/products/eclipse-trueprice-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-trueprice.md (Verity bench of v0.1.0, 2026-10-27, PASS-CONDITIONAL C1–C4; builder suite re-run clean 35/35, F-T8 reproduced independently, adversarial pass incl. pack counter-signature/forgery/substitution, stored-record tamper, §5.3 refusals, malformed-args battery, fuzz, key custody) + delta re-bench of v0.1.1 in the same record (suite 44/44, independent probes 11/11, F-T8 regression probe rc=0; C1/C2/C4 CLOSED, C3 scope wording verified on README + server.json surfaces). Fix record: argus101-program-20261027/wave2/fix-trueprice.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture quote/checkout pairs)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture quote/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-trueprice.md) PASS-CONDITIONAL(local, fixture quote/checkout pairs) with conditions C1–C4, plus delta re-bench of v0.1.1 in the same record: C1, C2, C4 CLOSED at scope and C3 satisfied as scope wording (C3 persists as a scope limit, not a defect). Builder suite 35/35 at v0.1.0 and 44/44 at v0.1.1 (35 prior + 9 new TestBenchFixes011) re-run clean-state by bencher both times; decisive fixture F-T8 independently reproduced in fresh processes at both benches — quote sealed at T=2026-10-27T01:00:00Z, checkout drifting in exactly 3 named terms verified DRIFT, pack re-verified in a verifier-only subprocess from pack + pinned keys alone with drift re-derived exactly {unit_price, fees_as_stated, subscription_terms, total_all_in}. Delta re-bench independent probes 11/11 PASS with fresh bench-generated keys: stored counter-signature stripped/forged/absent-label-injected all SEAL_DEFECT with no verdict, intact MATCH; tampered stored receipt RECEIPT_UNVERIFIED and never served (idempotent re-verify also withholds it), intact served; DRIFT pack with drift_receipts dropped fails at step drift_receipt; key material nested 4 deep rejected key_material_in_pack; quote_ref drift fixture DRIFT ['quote_ref'] exactly. Scope is exactly: local stdio MCP, fixture quote/checkout pairs only, value_class 'test' on all artifacts; no live storefront, cart, payment page, price feed, or merchant system is touched, no real quote or checkout is sealed or judged, and Trueprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): quote + full terms are hash-sealed at quote time; checkout drift of any term produces a drift receipt in a Docket-grade evidence pack format — admissibility is a court's decision; Trueprice warrants the pack's recomputability, not its admission. C3 scope limit (standing): scope stays local/fixture until signing is real Herald RS256; v0.1.x verification is NOT public-key verification — the pinned key file holds a shared HMAC secret, not a public key, and any holder of it can forge seals; no RS256 / public-key / third-party-verifiability claim is licensed.", "not_tested": [ "Real quotes, real checkouts, or any live merchant use — fixture quote/checkout pairs only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: (a) sealing real quotes / verifying real checkouts against live merchants, (b) evidence-law wording in any live listing, pack, or sales material (fenced per SPEC §11.2 until counsel clears it), (c) any integration that blocks or alters a live checkout on a DRIFT verdict, (d) retention/handling of real consumers' quote data — each requires counsel clearance, a scope edit in code, and a Verity re-bench at the new scope", "Any checkout blocked, price altered, merchant contacted, or payment executed/refunded — Trueprice is evidence-only: a DRIFT verdict is information for the caller and evidence for a later dispute, nothing more; never claimed for v0.1.1 are price accuracy, best-price, merchant endorsement/partnership, live monitoring of any store, that a MATCH means the price was fair, or 'prevents price fraud' (SPEC §11.3 strings are named here only as never claimed); no wording implies a verdict can be bought or a drift finding suppressed (SPEC §11.4 — metering attaches to the seal, identical regardless of later verdicts)", "Production signing / public-key verification — v0.1.1 signing is a fixture HMAC stand-in for Herald RS256 (local fixture keys, keys/ gitignored, mode 600, never committed); scope stays local/fixture until signing is real Herald RS256, and v0.1.x verification is NOT public-key verification: the pinned key file holds a shared HMAC secret, not a public key (condition C3, standing scope limit); a fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering point only per completed quote_seal ($0.02/quote shape), no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-trueprice-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-kitseal-mcp", "name": "Eclipse Kitseal", "product_url": "https://eclipsebazaar.com/products/eclipse-kitseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-kitseal.md (Verity bench of v0.1.0, 2026-10-27, PASS-CONDITIONAL(local) C1–C2; builder suite re-run clean 34/34, F-K11 reproduced independently both branches, adversarial pass incl. attacker-key-in-record, stored-digest lies caught at named steps, dual-spine fork attempts, signature-strip, malformed-args battery, refusal-must-not-mutate (10/10), 60-call fuzz, key custody, read-path probe F1 + receipt chain-context probe F2) + delta re-bench of v0.1.1 in the same record (suite 40/40 clean-state, independent tampered-store/gap/receipt probes, F-K11 regression both branches PASS; C1/C2 CLOSED, carve-out lifted). Fix record: argus101-program-20261027/wave2/fix-kitseal.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture loadouts)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture loadouts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-kitseal.md) PASS-CONDITIONAL(local) with conditions C1–C2, plus delta re-bench of v0.1.1 in the same record: C1 CLOSED, C2 CLOSED at scope (local) — the v0.1.0 carve-out is LIFTED and no new findings were raised. Builder suite 34/34 at v0.1.0 and 40/40 at v0.1.1 (34 prior + 6 new TestReadPathVerifyC1C2) re-run clean-state by the bencher both times; decisive fixture F-K11 independently re-run in a fresh subprocess (pack + pinned key file only) at both benches, both branches PASS — verified:true, recomputed config_hash == loadout_status head hash 6ff16dd3…b7c6c @ seq 6, final tools [tool-alpha, tool-beta, tool-delta]; seq-3 withheld → KITSEAL_VERIFY_FAIL:gap@3, current_config:null, verified_through:2, export labelled STALE_OR_PARTIAL. Delta probes: tampered store (head result_config_hash set to deadbeef… + delta-1 Kitseal signature zeroed) → loadout_status, feed_read and the pack face all fail closed KITSEAL_VERIFY_FAIL:signature@1, state UNVERIFIED, no head hash asserted, no feed items served; deleted seq-3 record → gap@3 explicit (gaps:[3], gap_at:3), chain_complete_through=2 (verified prefix only); receipt_verify: isolated genuine seq-4 receipt → verified:false at genesis@0, gapped prefix → gap@2, tampered predecessor → signature@2, full chain → verified:true. Scope is exactly: local stdio MCP, fixture loadouts only, operator-declared fixture configurations, value_class 'test' throughout — now including loadout_status, feed_read, and pack-face head/state fields, which verify-before-serve; no real agent is sealed or streamed, Kitseal connects to no runtime, and no configuration is captured from any system; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, verbatim): an agent's full tool/permission configuration is sealed and streamed; every change emits a delta receipt to subscribers (employers, insurers, auditors). Mandatory gloss (SPEC §11.3): sealed = an operator declared this configuration, in this order, at these times — recompute it yourself. Observation F4 (standing): signing is an HMAC-SHA256 fixture stand-in for the Herald pattern; symmetric fixture keys mean the operator/Kitseal key holder set is a local trust domain — consistent with (local) scope, to be revisited at any post-counsel gate.", "not_tested": [ "Real agents, real subscribers, or any live use — fixture loadouts only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: seals presented as compliance/insurance evidence for real agents (reliance language, misrepresentation exposure when an operator seals a configuration the agent does not run, employee-monitoring / workplace-surveillance rules, trade-secret handling of sealed configs, and the runtime-attested capture integration as a separate later clearance) — each requires counsel clearance, a scope edit in code, and a Verity re-bench at the new scope", "Any runtime state — Kitseal seals what it is given: a seal binds the operator's declaration (presentation, sequence, hashes) and is never evidence that an agent runs the sealed configuration; never claimed for v0.1.1 are 'verified configuration', 'attested loadout', 'the agent's actual tools', 'compliance-ready', or any implication that a seal describes running state (SPEC §11.3 strings are named here only as never claimed); every displayed configuration carries its config_seq + config_hash per SPEC §11.4", "Production signing — v0.1.1 signing is an HMAC-SHA256 fixture stand-in for the Herald pattern (local fixture keys, keys/ gitignored, mode 600, never committed); symmetric fixture keys mean the operator/Kitseal key holder set is a local trust domain (bench observation F4), to be revisited at any post-counsel gate; a fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering records only per SPEC §9.1 (genesis_sealed, delta_receipted, subscription_period, pack_exported), the $49/mo shape is a book reference with no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-kitseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-shelfprice-mcp", "name": "Eclipse Shelfprice", "product_url": "https://eclipsebazaar.com/products/eclipse-shelfprice-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-shelfprice.md (Verity bench of v0.1.0, 2026-10-27, PASS-CONDITIONAL(local, fixture listing/checkout pairs) C1–C4 with stored-path carve-out; builder suite re-run clean 33/33, also under a socket-denied harness, F-SP8 reproduced independently in a fresh process, pack-path adversarial 19/19 tampers downgraded to UNWITNESSED_EXPORT, stored-path tampers F1–F5 documented, §5.3 refusals, malformed-args battery, 120-op fuzz, surface disjointness, Trueprice cross-verification excluded both ways) + delta re-bench of v0.1.1 in the same record (suite 43/43 clean-state, bencher's own tampered-store probes 26/26, F-SP8 regression PASS, C4 wording audit PASS on README + server.json + source surfaces; C1–C3 CLOSED, carve-out lifted). Fix record: argus101-program-20261027/wave2/fix-shelfprice.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture listing/checkout pairs)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture listing/checkout pairs) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-shelfprice.md) PASS-CONDITIONAL(local, fixture listing/checkout pairs) with conditions C1–C4 and a stored-path carve-out, plus delta re-bench of v0.1.1 in the same record (stored paths only): C1 CLOSED, C2 CLOSED, C3 CLOSED at scope — the carve-out is LIFTED and no new findings were raised. Builder suite 33/33 at v0.1.0 and 43/43 at v0.1.1 (33 prior + 10 new TestStoredPathIntegrity) re-run clean-state by the bencher both times; decisive fixture F-SP8 independently reproduced in a fresh process at both benches — seal at fixture T=2026-10-27T01:00:00Z (listing v3), checkout drifting exactly price + one fee + returns terms, pack re-verified in a verifier-only subprocess from pack + pinned fixture keys alone (fresh empty data dir, no state files written): verified True, verdict DRIFT re-derived, drifted exactly [unit_price, fees_as_stated, total_all_in, returns_terms_hash]. Delta probes 26/26 PASS: stored term_hashes rewritten to the drifted checkout's hashes and Herald signature zeroed both meet SEAL_DEFECT with no verdict issued and no record appended (the DRIFT-to-signed-MATCH laundering is dead); tampered stored verdict, backdated stored seal, forged seal_hash/2030 expiry, and tampered drift receipt all refuse SEAL_DEFECT and are never served, while intact controls serve normally on every path. Scope is exactly: local stdio MCP, fixture listing/checkout pairs only, value_class 'test' throughout — now including the online stored-read paths (checkout_verify fresh + idempotent, view_seal idempotent return, seal_status, drift_receipt_get), which recompute and signature-verify stored seals, verdicts, and receipts before serving; no live marketplace, listing page, storefront, cart, or seller system is touched, scraped, or judged, and Shelfprice never blocks or alters a checkout; no counsel-gate (SPEC §10) live phase built or claimed. Novel mechanism (SPEC §2.1, with the §11.2 substitution applied): the price + terms an agent saw are sealed at view time, so view-to-checkout drift is recomputable from the buyer-held pack by the buyer. Accepted limitation F6 (on the face of the bench): a pack truncated to a prefix of the record chain verifies over the presented records only — the format has no completeness anchor; nothing presented can be forged or upgraded. C4 (standing scope condition): scope stays local/fixture until signing is real Herald RS256; no surface may describe v0.1 verification as public-key verification — 'pinned fixture keys' wording only. Verification uses pinned fixture keys only (fixture HMAC stand-in; not public-key verification); the pinned key file holds a shared HMAC secret, not a public key, any holder can forge seals, and no public-key or third-party verifiability is claimed.", "not_tested": [ "Real listings, real checkouts, or any live marketplace use — fixture listing/checkout pairs only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: (a) sealing real listing views / verifying real checkouts on live marketplaces (integration, scraping, and platform-terms review), (b) any characterization language beyond 'drift' in a live listing, pack, or sales material, (c) any integration that blocks or alters a live checkout on a DRIFT verdict, (d) retention/handling of real buyers' view/checkout data (privacy review), (e) any claim that a drift receipt is admissible or binding — each requires counsel clearance, a scope edit in code, and a Verity re-bench at the new scope", "Any checkout blocked or altered, price altered, seller or marketplace contacted, or payment executed or refunded — Shelfprice is evidence-only: a DRIFT verdict is information for the buyer and evidence for a later dispute, nothing more; drift proves difference, not intent. Never claimed for v0.1.1 are price accuracy, best-price, seller/marketplace endorsement or partnership, live monitoring of any marketplace, or that a MATCH means the price was fair (SPEC §11.3 strings are named here only as never claimed); a MATCH means only that the presented checkout matched the sealed view in every term; no wording implies a verdict can be bought or a drift finding suppressed (SPEC §11.4 — metering attaches to the seal, identical regardless of later verdicts)", "Production signing / public-key verification — v0.1.1 signing is an HMAC-SHA256 fixture stand-in for the Herald pattern (local fixture keys, keys/ gitignored, mode 600, never committed; signer face: herald-fixture (fixture HMAC stand-in)); C4 (standing scope condition): scope stays local/fixture until signing is real Herald RS256; no surface may describe v0.1 verification as public-key verification — 'pinned fixture keys' wording only. Verification uses pinned fixture keys only (fixture HMAC stand-in; not public-key verification); the pinned key file holds a shared HMAC secret, not a public key, any holder can forge seals, and no public-key or third-party verifiability is claimed. A fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering point only per SPEC §9.1 (exactly one Meter record per completed view_seal; verifications, drift receipts, status, and exports never meter), the $0.001/seal or $99/mo shape is a book reference with no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-shelfprice-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-skillseal-mcp", "name": "Eclipse Skillseal", "product_url": "https://eclipsebazaar.com/products/eclipse-skillseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-skillseal.md (Verity bench of v0.1.0, 2026-10-27, PASS-CONDITIONAL(local, fixture claims + fixture verdict receipts), sole condition C1/F1; builder suite re-run clean 42/42, F-S9 decisive fixture independently reproduced in a fresh socket-denied process, adversarial pass: attacker-key receipt, bench-ref spoof and format swap all RECEIPT_SIGNATURE_INVALID, presented-digest substitutions caught on verify/render/offline verify_export paths, stored-read paths F1 documented, malformed-args battery with zero claim/meter writes, key custody verified, metering B-S8 reproduced, scope audit §10 unbuilt, surface = exactly 5 caller + 2 operator tools disjoint, §11.4 forbidden strings absent tree-wide) + delta re-bench of v0.1.1 in the same record (suite 48/48 clean-state, bencher's own tampered-store C1 probes 6/6 PASS, F-S9 regression PASS; C1 CLOSED, no new findings). Fix record: argus101-program-20261027/wave2/fix-skillseal.md. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture claims + fixture verdict receipts)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture claims + fixture verdict receipts) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-skillseal.md) PASS-CONDITIONAL(local, fixture claims + fixture verdict receipts) with sole condition C1 (F1, stored-read assertion bypass), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture claims + fixture verdict receipts) — no new findings. Builder suite 42/42 at v0.1.0 and 48/48 at v0.1.1 (42 prior + 6 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times; decisive fixture F-S9 independently reproduced in a fresh process, socket-denied, at both benches — claim A (valid pointer) VERIFIED, claim B (no pointer) UNVERIFIED/NO_RECEIPT, claim C (pointer to A's receipt) UNVERIFIED/RECEIPT_SUBJECT_MISMATCH, identical rendered-record key shape with render_status the sole filter field, offline verify_export on A verified=True/VERIFIED_EXPORT. Delta probes 6/6 PASS: forged latest_rendered, tampered claim_record, tampered stored receipt, list-filter forgery, and cross-claim transplant of a genuine Herald-signed rendering all downgrade to the UNVERIFIED_EXPORT form only (no stored claim/receipt/rendering values served, forged strings absent), while intact controls serve VERIFIED normally. Scope is exactly: local stdio MCP, fixture claims + fixture verdict receipts only, value_class 'test' throughout — now including the stored-read paths (skillseal_claim_get, skillseal_claim_list), which recompute claim hash + publisher signature, the hash-chained record stream, stored receipt hashes + pinned bench signatures, and the latest rendering's Herald signature + receipt-face binding before serving anything; no live marketplace, router, registry, or bench system is read, polled, or written, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): a skill claim is a pointer to a bench-verdict receipt; a claim with no receipt renders as UNVERIFIED in a standard format counterparties and routers can filter on. Non-blocking bench observations F2 (receipt validation does not reject unknown extra fields — hash-covered, pinned bench signature still required) and F3 (genuine WITHDRAWN exports verify as VERIFIED_EXPORT with render_status UNVERIFIED via a dedicated verify_export branch that can only ever assert UNVERIFIED) remain open observations, untouched. Skillseal benches nothing, certifies no skill, and issues no verdicts.", "not_tested": [ "Live receipt ingestion, live routers/marketplaces, or any real agent, skill, or bench outcome — fixture claims + fixture verdict receipts only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: ingesting receipts from a live bench pipeline, serving renderings to live routers or marketplaces, or any public claim that a named third party's skills are verified — each is a separate, counsel-cleared, re-benched build reviewed under the house claim/counsel review for marketplace-facing trust claims", "Any benching, scoring, or verdict issuance by Skillseal itself — Skillseal benches nothing, certifies no skill, and issues no verdicts (SPEC §11.2); it defines the claim pointer, the render rule, and the verification procedure only, and consumes verdict receipts as artifacts owned by the house bench ecosystem. The SPEC §11.4 forbidden claim strings are never claimed for v0.1.1 (they are listed in SPEC §11.4 only and are not reproduced on this surface); UNVERIFIED means only that no verifiable receipt was presented — it is never a negative finding about an agent (SPEC §11.3) — and a VERIFIED rendering is never presented detached from the receipt's own verdict + scope strings; no wording implies a verdict can be bought (SPEC §9.2: no price attaches to any bench verdict or receipt itself)", "Production signing / public-key verification — v0.1.1 signing is a fixture HMAC-SHA256 stand-in for the Herald / bench signature patterns (local fixture keys, keys/ gitignored, mode 600, never committed); the live RS256 Herald signing form is unbuilt. Verification uses pinned fixture keys only, selected by the pinned in-source mapping by receipt format — a key is never taken from, or selected by, the record under verification; the pinned key file holds shared HMAC secrets, not public keys, and no public-key or third-party verifiability is claimed. A fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering points only per SPEC §9.1 (exactly one Meter record per completed skillseal_verify run that produces a rendered record; refusals, cache re-renders, and idempotent re-verifications emit none; VERIFIED and UNVERIFIED outcomes meter identically), the FREE publication + $0.02/verification shape is a book reference with no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-skillseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-namesake-mcp", "name": "Eclipse Namesake", "product_url": "https://eclipsebazaar.com/products/eclipse-namesake-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-namesake.md (Verity bench of v0.1.0, 2026-10-27, PASS-CONDITIONAL(local, fixture registry snapshot), sole condition C1/Finding 1; builder suite re-run clean-state 33/33 twice plus a socket-denied run, determinism byte-identical across fresh stores, F-N9 decisive fixture independently recomputed with a scorer rewritten from the spec text, adversarial pass: forged builder signature, forged Herald signature, key-supplied-inside-record, full forgery with recomputed record_hash, forged Genesis entry signature, presented-score/verdict substitution battery — all named refusals or §6.3 downgrades with verdict_claim null; snapshot entry removal/byte-drift refused; malformed-args battery on every tool on both surfaces with no tracebacks; refusal-must-not-mutate verified; key custody 600/gitignored/values absent from source; metering exactness reproduced (3 sealed screens = 3 points, 0 for refusals and idempotent re-screens, value_class 'test' on 100% of artifacts checked); scope audit §10 unbuilt with fence startup refusals bench-reproduced; surface = exactly 4 builder + 3 operator tools disjoint, no registry-write verbs; §11.4 forbidden claim strings absent tree-wide excl. SPEC.md's own forbidding enumeration) + delta re-bench of v0.1.1 in the same record (suite 37/37 clean-state twice, bencher's own on-disk store-tamper C1 probes ALL_C1_OK for score-tamper and signature-tamper across all four stored-read paths, snapshot_ref strictness closed, F-N9 regression F_N9_MATCH=True; C1 CLOSED, Finding 2 CLOSED, no findings in delta scope). Fix record: argus101-program-20261027/wave2/fix-namesake.md. Independent scoring reproduction at v0.1.0 bench: composite 0.627436 → REVIEW for the F-N9 candidate, identical to the server. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED(local, fixture registry snapshot)", "record_status": "current", "certified": true, "scope": "CERTIFIED(local, fixture registry snapshot) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-namesake.md) PASS-CONDITIONAL(local, fixture registry snapshot) with sole condition C1 (Finding 1, stored-read paths served unverified stored verdicts), plus delta re-bench of v0.1.1 in the same record (stored-read paths only): C1 CLOSED at scope (local, fixture registry snapshot) — no new findings; Finding 2 (snapshot envelope without snapshot_ref accepted) also CLOSED. Builder suite 33/33 at v0.1.0 and 37/37 at v0.1.1 (33 prior + 4 new TestStoredReadVerification C1 regressions) re-run clean-state by the bencher both times, the v0.1.0 suite also under a socket-denied harness; decisive fixture F-N9 independently recomputed by the bencher with a scorer rewritten from the spec text (builder scorer NOT imported) at both benches — agent-harborlight name 0.628205 / purpose 0.6 / capability 0.666667 / composite 0.627436 → REVIEW, server top_k[0] identical, fresh-process stdio verify from artifacts alone verified:true / VERIFIED_EXPORT. Boundary pins exact at v0.1.0 bench: exact 'Payseal!' composite 0.500000 → COLLISION by exact-name override, near 'Payseel' 0.454286 → REVIEW, stem-only 'Ledger Lynx' 0.242424 → CLEAR. Delta probes ALL_C1_OK: intact control serves the sealed CLEAR verdict normally on every path (screen_list carries verified:true / VERIFIED_EXPORT); score-tamper (stored CLEAR→COLLISION, max 0.999999, hash/signature NOT recomputed) and Herald-signature-tamper (signature f*64) both downgrade on verdict_get, breakdown_get, screen_list (incl. verdict-filtered lists: COLLISION=0, CLEAR=0) and idempotent re-screen to UNVERIFIED_EXPORT / verdict_claim null / NAMESAKE_VERIFY_FAIL:, metering unchanged; a snapshot envelope without snapshot_ref now refuses SNAPSHOT_INCOMPLETE with 0 screens / 0 metering, and verify over a ref-less snapshot downgrades at step snapshot_hash. Scope is exactly: local stdio MCP, fixture registry snapshot only, scoring version namesake-score/1.0 (weights name 0.5 / purpose 0.3 / capability 0.2; thresholds REVIEW ≥ 0.40, COLLISION ≥ 0.70 plus exact-normalised-name override), value_class 'test' throughout — now including the stored-read paths (namesake_verdict_get, namesake_breakdown_get, namesake_screen_list, and the idempotent path of namesake_screen), which recompute-verify the stored screen before serving anything; no live registry is read, nothing is registered, reserved, assigned, blocked, renamed, or revoked, and no counsel-gate (SPEC §10) live phase is built or claimed. Novel mechanism (SPEC §2.1, verbatim): similarity scoring over registered agent identities (name, purpose, capability profile) issues a collision verdict before an agent launches under a confusing identity. Non-blocking bench observation Finding 3 (dispatch does not enforce schema additionalProperties:false — unexpected extra args are silently ignored, with no state or verdict effect observed) remains open, untouched. A Namesake verdict is a similarity screen over a stated snapshot — it is not a trademark opinion, not a legal clearance, and not permission to launch (SPEC §11.2).", "not_tested": [ "Live-registry screening, any verdict carrying consequences in a real registry, or any real agent identity — fixture registry snapshot only; the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: screening against a live registry, a verdict carrying consequences in a real registry (blocking, flagging, or delaying a real launch), or any public marketing of the screen as clearance — each is a separate, counsel-cleared, re-benched build, with counsel review of (a) trademark-adjacent claim language and (b) the consequences a verdict may carry", "Any trademark opinion, legal clearance, or permission to launch — a Namesake verdict is a similarity screen over a stated snapshot (SPEC §11.2): a CLEAR verdict does not mean a name is legally available, non-infringing, or registrable anywhere, and a COLLISION verdict does not mean a name infringes anything; a CLEAR verdict means only 'no collision above threshold in this snapshot under namesake-score/1.0'. The SPEC §11.4 forbidden claim strings are never claimed for v0.1.1 (they are listed in SPEC §11.4 only and are not reproduced on this surface); no wording implies live registry coverage, registration, or legal advice, and no wording implies a verdict outcome can be bought (SPEC §9 / L7: metering attaches to the screen, identical for CLEAR, REVIEW, and COLLISION). Cross-script and homoglyph collisions are a known blind spot of v0.1 scoring (SPEC Q-N3): the fixture normaliser covers the Latin-script fixture set only, and no listing implies coverage the scorer does not have", "Production signing / public-key verification — v0.1.1 signing is a fixture HMAC stand-in for the Herald pattern (local fixture keys, keys/ gitignored, mode 600, never committed); the live RS256 Herald signing form is unbuilt and counsel-gated. Verification uses pinned fixture keys only — keys are pinned out-of-band and never read from, or selected by, a record under verification; the pinned key file holds shared HMAC secrets, not public keys, and no public-key or third-party verifiability is claimed. A fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering points only per SPEC §9 (exactly one Meter record per completed namesake_screen reaching a sealed verdict; refusals and same-snapshot idempotent re-screens emit none; CLEAR, REVIEW, and COLLISION meter identically), the $5/screen shape is a book reference with no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-namesake-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-sourceseal-mcp", "name": "Eclipse Sourceseal", "product_url": "https://eclipsebazaar.com/products/eclipse-sourceseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-sourceseal.md (Verity bench of v0.1.0, PASS-CONDITIONAL(local), conditions C1–C2, builder suite re-run clean-state twice 22/22, F-S9 decisive fixture independent in fresh processes both directions, adversarial pass: record-supplied key refs ignored, forged seals fail at seal, single-field receipt tampers fail at named steps, forgery/duplication pins, presented-verdict substitution ignored, 60-call malformed-args battery with store byte-identical, refusal-must-not-mutate, key custody 600/gitignored) + rebench-sourceseal.md (v0.1.1: C1+C2 CLOSED, suite 27/27, new C3+C4) + rebench2-sourceseal.md (v0.1.2: C3+C4 CLOSED, suite 34/34, new C5+C6) + rebench3-sourceseal.md (v0.1.3: C5+C6 CLOSED, C1–C6 all CLOSED, suite 39/39, 152 independent in-process checks PASS / 0 FAIL, gate sweep defecting at the same named step on every serve surface, F-S9 re-confirmed, no new conditions). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS(local)", "record_status": "current", "certified": false, "scope": "PASS(local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-sourceseal.md) PASS-CONDITIONAL(local) with conditions C1–C2; delta re-bench of v0.1.1 (rebench-sourceseal.md): C1+C2 CLOSED, new C3 (major, stored bundle not bound to requested answer) + C4 (minor, malformed store shapes crashed); delta re-bench round 2 of v0.1.2 (rebench2-sourceseal.md): C3+C4 CLOSED, new C5 (major, pack face/duplicated fields unbound and echoed verified on stored serve) + C6 (minor, store keys/siblings/metering unvalidated on the mutating path); delta re-bench round 3 of v0.1.3 (rebench3-sourceseal.md): C5+C6 CLOSED, C1–C6 all CLOSED, zero new findings, no new conditions — CONDITIONS CLOSED, Sourceseal — PASS(local). Builder suite re-run clean-state by the bencher at every bench: 22/22 at v0.1.0, 27/27 at v0.1.1, 34/34 at v0.1.2, 39/39 at v0.1.3; R3 independent probes: 152 in-process checks PASS / 0 FAIL plus subprocess wire/envelope/F-S9 battery PASS. Decisive fixture F-S9 independently reproduced at every bench in fresh processes from the shipped bundle + pinned keys alone, with content hashes also recomputed by bencher code straight from the raw store files: receipt_verify valid, source_reverify f1–f4 SOURCE_UNCHANGED; f1 mutated after seal → receipt chain still valid AND reverify SOURCE_CHANGED for exactly f1 (SPEC §6.4 asymmetry, both directions). PASS(local) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture stores only, value_class:\"test\" throughout, fixture HMAC Herald stand-in (pinned herald-fixture); the SPEC §10 counsel gate (live/web fetch, reliance, republication) is unbuilt, confirmed — no code path exists; no claim about any real source's truth or any answer's faithfulness. Novel mechanism (SPEC §2.1, verbatim): each answer ships with its primary-source pointer plus a retrieval receipt (fetcher, time, content hash) — provenance at the granularity of one fact. Stored serves in v0.1.3 are verify-before-serve (C1), bind-before-serve (C3), malformed-store hardened (C4), canonical constructed faces with exact key sets and no echoed injections (C5), and whole-store validated before any write (C6). Non-blocking observations F3 (source_reverify by design never checks chain/seal — it carries no verified/sealed claim and must be paired with receipt_verify), F4 (HMAC fixture stand-in; fetcher identity is a named field, not a signature, Q-S2; primary-source adjudication is fixture-declared, Q-S3), and R3 O1–O3 remain observations, no conditions. SPEC §11.2 blunt scope limit: the receipt proves a fetch of specific bytes at a time by a named fetcher — it does not prove the source was truthful, nor that the answer faithfully represents the source.", "not_tested": [ "Live or web source fetching, shipping receipts relied on as attribution or evidence for real answers, or any republication of retrieved content beyond hashes/pointers — the SPEC §10 counsel gate is unbuilt by design, named, with no dormant live mode: each live phase is a separate, counsel-cleared (copyright/terms/reliance review), re-benched build. v0.1.3 has zero network code; fixture reads are local file reads by pointer, and the fail-closed fence refuses URL-fetch config, non-fixture endpoints, live keys, and value_class other than \"test\" at startup and per-tool", "Any claim about a real source's truth or a real answer's faithfulness — a Sourceseal receipt proves a fetch of specific bytes at a time by a named fetcher; it does not prove the source was truthful, nor that the answer faithfully represents the source (SPEC §11.2). Faithfulness checking is Quoteline's surface, never performed or implied here. The SPEC §11.4 forbidden claim strings are never claimed for v0.1.3 (they are listed in SPEC §11.4 only and are not reproduced on this surface)", "Production signing / public-key verification — v0.1.3 signing is a fixture HMAC stand-in for Herald (pinned ref herald-fixture, local fixture key in keys/, gitignored, mode 600, never committed); live RS256 Herald is unbuilt and counsel-gated. The pinned key file holds a shared HMAC secret, not a public key, and no public-key or third-party verifiability is claimed. Fetcher identity is a named field, not a signature (SPEC Q-S2, stated not solved), and primary-source determination is fixture-declared in v0.1.3 (Q-S3) — bench observation F4. A fresh clone generates its own fixture keys to run the full suite", "source_reverify alone as a verification — by SPEC §6.2 separation it never checks chain/seal and carries no sealed/verified claim (bench observation F3); a holder must pair receipt_verify (chain + pinned seal recompute) with source_reverify (per-fact SOURCE_UNCHANGED / SOURCE_CHANGED / SOURCE_GONE verdicts)", "Hosted or live operation — local stdio only; metering points only per SPEC §9 (exactly one Meter record per completed sourceseal_answer_seal reaching SEALED; verification and re-fetch emit no metering event), the $0.01/answer shape is a book reference with no charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-sourceseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-promptseal-mcp", "name": "Eclipse Promptseal", "product_url": "https://eclipsebazaar.com/products/eclipse-promptseal-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-promptseal.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), condition C1, builder suite 27/27 re-run twice, F-PS13 decisive fixture independent, stored-read + adversarial + malformed batteries) + rebench-promptseal.md (v0.1.1: C1 CLOSED, suite 30/30, new C2+C3) + rebench2-promptseal.md (v0.1.2: C2+C3 CLOSED, suite 36/36, new C4+C5+C6) + rebench3-promptseal.md (v0.1.3: C4+C5+C6 CLOSED, C1–C6 all CLOSED, suite 49/49, 102/102 checks + 31/31 probes PASS, F-PS13 re-confirmed, no new conditions). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS (local/fixture)", "record_status": "current", "certified": false, "scope": "PASS (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-promptseal.md) PASS-CONDITIONAL (local/fixture) with condition C1 (minor, stored-read: incident_link idempotent path echoed stored link before chain check); delta re-bench of v0.1.1 (rebench-promptseal.md): C1 CLOSED, new C2 (lineage binding) + C3 (incident_link idempotent pairing); delta re-bench round 2 of v0.1.2 (rebench2-promptseal.md): C2+C3 CLOSED, new C4 (serve canonicalization) + C5 (pack duplicates unbound) + C6 (whole-store validation); delta re-bench round 3 of v0.1.3 (rebench3-promptseal.md): C4+C5+C6 CLOSED, C1–C6 all CLOSED, no new conditions — CONDITIONS CLOSED, Promptseal — PASS (local/fixture). Builder suite re-run by bencher at every bench: 27/27 at v0.1.0, 30/30 at v0.1.1, 36/36 at v0.1.2, 49/49 at v0.1.3; R3 independent probes: 102/102 checks + 31/31 C6 probes PASS. Decisive fixture F-PS13 independently reproduced: pack written to file, trace_verify in fresh subprocess with empty data dir verified:true, prompt_hash + approver_ref + version_record_hash equal receipt face values, prompt_hash=sha256(body) recomputed. PASS (local/fixture) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: seal chain + Herald approval binding + incident traceability over fixture prompts/deployments/incidents ONLY; NOT production prompts, real deployments, or runtime attestation (SPEC §11.2 — the chain proves which prompt version was sealed and who approved it, and that a fixture deployment's binding named it; it does not prove the sealed prompt is what actually ran in any live process); dispute use is SPEC §10.1 counsel-gated and UNBUILT — no production ingest, deployment connector, or runtime hook exists. Novel mechanism (SPEC §2.1, verbatim): production system prompts are sealed and versioned; every runtime incident can be traced to the exact prompt version and its approver. Stored serves in v0.1.3 are canonical (exact per-type field sets, injected counter_signature/unknown fields are chain defects), pack duplicates are bound exactly to chain copies, and the whole store is validated at load on every path. Non-blocking observations O1 (lineage_status lists state:APPROVED under chain_ok:false, disclosed in-band, not an export/receipt) and O2/R3 observations remain observations, no conditions. Fixture Herald key is a test double (pinned herald-fixture, keys/ gitignored mode 600); Promptseal consumes Herald-signed approval records, issues none, redefines none; value_class:\"test\" throughout.", "not_tested": [ "Production prompts, real deployments, or runtime attestation — SPEC §11.2 fence: the chain proves which prompt version was sealed and who approved it, and that a fixture deployment's binding named it; it does not prove the sealed prompt is what actually ran in any live process. Runtime attestation is an integration claim, never a v0.1 claim, and no runtime integration exists in v0.1.3", "Sealing real production prompts (prompt bodies may carry trade-secret/confidential material), binding to real deployments, any runtime-attestation integration, or use of a trace receipt in an employment, contractual, or regulatory dispute — the SPEC §10.1 counsel gate is UNBUILT by design, named, with no dormant live mode: each live phase is a separate, counsel-cleared, re-benched build. v0.1.3 has no production-prompt ingest path, no deployment connector, and no runtime hook", "Production signing / Herald authority — fixture Herald key is a test double (pinned herald-fixture, local fixture key in keys/, gitignored, mode 600, never committed) and confers no Herald authority; Promptseal verifies and cites Herald-signed approval records, issues none, and holds no real Herald key. A fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering points only per SPEC §9 (exactly 1 promptseal_lineage_month_active event per lineage; seals, approvals, binds, links, traces and refusals add none; no charge path built, no live Meter ingest), the $49/mo shape is a book reference with no charge path built" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-promptseal-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-faircharge-mcp", "name": "Eclipse Faircharge", "product_url": "https://eclipsebazaar.com/products/eclipse-faircharge-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-faircharge.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local, fixture charge streams + sealed authorizations), conditions C0–C7, suite 18/18 re-run x2, F-FC8 decisive independent, spec-contradiction ruling on §2.2.2) + fix-faircharge.md / rebench-faircharge.md (v0.1.1) + fix2-faircharge.md / rebench2-faircharge.md (v0.1.2, D1–D6) + fix3-faircharge.md / rebench3-faircharge.md (v0.1.3: E1–E4 CLOSED, C0–C7 + D1–D6 hold, suite 44/44, 214/214 effective serialized checks, one new minor F1 hygiene note, non-blocking). Shipper suite re-run fresh pre-ship: 44/44 OK (x2, pre- and post-ship-prep). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS (local, fixture charge streams + sealed authorizations)", "record_status": "current", "certified": false, "scope": "PASS (local, fixture charge streams + sealed authorizations) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-faircharge.md) PASS-CONDITIONAL (local, fixture charge streams + sealed authorizations) with conditions C1–C7 plus spec-hygiene condition C0 (spec §2.2.2 formula sentence contradicted fixtures F-FC4/F-FC8; Verity ruled the fixture/defining-test reading governs and the shipped behaviour IS the fixture's; §2.2.2 + §6.4 step-3 amended to it); fix round v0.1.1 closed C0–C7; delta re-bench of v0.1.1 (rebench-faircharge.md) and round 2 of v0.1.2 (rebench2-faircharge.md) raised D1–D6 and E1–E4; delta re-bench round 3 of v0.1.3 (rebench3-faircharge.md): E1 (pack face binding) + E2 (anomaly gate coverage) + E3 (envelope) + E4 (whole-store validation) CLOSED, C0–C7 and D1–D6 hold under serialized re-runs and full-strength frontier sweeps — CONDITIONS CLOSED, Faircharge — PASS (local, fixture charge streams + sealed authorizations). Builder suite re-run by the bencher at every bench: 18/18 at v0.1.0, 44/44 at v0.1.3 (38 prior + 6 round-3 fixes); R3 independent probes: 213 PASS / 1 probe-bug FAIL, standalone re-run PASS = 214/214 effective serialized checks. Decisive fixture F-FC8 independently reproduced at every bench: counter-signed seal (both thresholds pinned minor-only, scheduled step 1050@idx4), charges [1000,1030,1090,1050,1090,1095,1200] → exact sequence WITHIN, WITHIN, CREEP_PER_CHARGE, WITHIN, WITHIN, CREEP_CUMULATIVE, CREEP_BOTH; serialized pack verifies in a fresh process from pack + pinned public keys alone. PASS (local, fixture charge streams + sealed authorizations) is not CERTIFIED — certified is false, and nothing beyond the PASS verdict at its exact scope is claimed. Scope is exactly: local, fixture charge streams + sealed authorizations only; no live merchant, card network, bank feed, billing system, or real charge is touched; no real consumer financial data enters any fixture; value_class:\"test\" throughout. SPEC §11.2 measurement-not-breach fence: Faircharge measures drift against the sealed original authorization. Whether a measured increase breaches the merchant's terms or any law is a contract/legal question for Docket/counsel — Faircharge makes no breach, overcharge, or misconduct finding. A CREEP verdict is a measurement, not an accusation and not a breach finding; WITHIN_TERMS means only that the stream measured within its own sealed thresholds (or that a dimension was unpinned, labelled on the face — §6.3 no-verdict-laundering). The SPEC §10.1 counsel gates are UNBUILT, named in not_tested. Novel mechanism (SPEC §2.1, verbatim): creep is detected against the sealed price history from the original authorization, so a merchant's gradual increases are measured against proof, not memory. Stored serves in v0.1.3 are verify-before-serve (receipts hash/signature-gated, C3), the canonical measurement pack binds all 15 face fields exactly (E1, verifier_transcript dropped), the anomaly queue gates every store-consuming surface (E2), the stdio envelope survives non-object requests (E3), and mutators whole-store-validate before any write (E4). Non-blocking hygiene note F1 stands, verbatim class: container-level foreign keys undetected + re-persisted (never served, no verdict impact) (full text in not_tested).", "not_tested": [ "Hygiene note F1 (Verity delta re-bench round 3, MINOR, class-c hygiene, E4-adjacent, NON-BLOCKING): container-level foreign keys undetected + re-persisted (never served, no verdict impact). A foreign key on a relationship OBJECT (relationships..certified=true) or at store ROOT (certification:\"Cyan Eclipse Certified\"), serialized, is never checked by _store_shape_ok / _chain_defect / _whole_store_defect (container key sets are not allowlisted) — status serves clean and a mutator on that relationship mints and re-persists the foreign key verbatim. No false serve resulted: status/export/receipt outputs are constructed explicitly (the key never appears in any output; the export pack is the canonical 15 fields, key absent from export JSON — verified), no verdict/anchor/receipt is affected, and the same key inside a PACK fails pack_face. The store is internal state, never the Docket deliverable. Hygiene fix for a later pass: exact key-set allowlists for store root + relationship objects in _store_shape_ok / _whole_store_defect. F1 is recorded as hygiene debt; it does not gate the deliverable and did not affect the verdict.", "Live charge streams or real consumers' authorizations — sealing real consumers' real subscription authorizations or measuring live charge streams from any real account/card/bank source (privacy + financial-data review) is SPEC §10.1 counsel gate (a), UNBUILT by design: v0.1.3 has no network imports tree-wide, the fail-closed fence refuses merchant/bank/card endpoints, live keys, real-format financial identifiers, and value_class other than \"test\"; no live merchant, card network, bank feed, billing system, or real charge is touched and no real consumer financial data enters any fixture", "Use of a measurement pack in a live chargeback, regulator complaint, or legal proceeding (SPEC §10.1 gate (b), evidence-language review, Docket-coordinated) and any integration that acts on a verdict automatically against a live charge — blocking/cancelling (gate (c), interference review) — are UNBUILT: no such verb exists on either surface, Faircharge never blocks, reverses, disputes, or alters any charge, contacts any merchant, or cancels anything; the measurement pack is Docket's deliverable and breach is Docket/counsel's question (§11.2 fence on every creep receipt + pack face)", "Marketing language asserting breach, overcharging as a legal conclusion, or merchant misconduct (SPEC §10.1 gate (d)) — fenced pre-counsel in README/manifest/receipts; never \"catches merchants cheating\", \"proves overcharging\", or \"unauthorized charge detector\"; also never claimed: live monitoring of any account, charge blocking/reversal, savings amounts, or that WITHIN_TERMS means a price is fair", "Production signing / Herald authority — Herald signing in v0.1.3 uses locally generated fixture keys (keys/, chmod 600, gitignored, never committed); verification reads keys/pinned-public.json only ({n,e} per role, Herald + caller publics) and key material in tool args or inside a pack is refused pre-verification. The fixture signing key holds no funds and authorizes no charge. A fresh clone generates its own fixture keys on first run to run the full suite", "Hosted or live operation — local stdio only; metering points only per SPEC §9 (exactly one Meter-grammar relationship-month record per sealed relationship non-terminal in that period, fixture clock in v0.1; measurements, creep receipts, status and exports emit no further metering, a creep finding is never a per-event charge per §11.4, CLOSED/BASELINE_DEFECT relationships emit none), the $5/mo shape is a book reference with no payment verb, invoice, collection mechanism, or charge path built and no live Meter ingest" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-faircharge-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-timecapsule-mcp", "name": "Eclipse Timecapsule", "product_url": "https://eclipsebazaar.com/products/eclipse-timecapsule-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-timecapsule.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator, public seal registry over fixture commitments), conditions C1–C8, suite 27/27 re-run x2, F-T10 decisive independent) + fix/rebench rounds v0.1.1–v0.1.3 (C1–C8, D1–D5, N1–N3 closed) + fix4-timecapsule.md / rebench4-timecapsule.md (v0.1.4: R1 CLOSED, conditions NONE, suite 69/69, independent harness 72/72 — CERTIFIED). Shipper suite re-run fresh pre-ship: 69/69 OK (pre- and post-ship-prep). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local/simulator, public seal registry over fixture commitments, value_class \"test\")", "record_status": "current", "certified": true, "scope": "CERTIFIED (local/simulator, public seal registry over fixture commitments, value_class \"test\") — CERTIFIED — Eclipse Timecapsule v0.1.4, local/simulator scope only: public seal registry over fixture commitments, value_class \"test\". No certification claimed beyond this scope. Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-timecapsule.md) PASS-CONDITIONAL (local/simulator, public seal registry over fixture commitments) with conditions C1–C8; fix rounds v0.1.1–v0.1.3 closed C1–C8, D1–D5 and N1–N3; delta re-bench round 4 of v0.1.4 (rebench4-timecapsule.md): R1 (aux anchor signature-null bypass) CLOSED, remaining conditions NONE, builder suite 69/69 re-run by the bencher, independent harness 72/72 checks PASS, regression spot probes confirm C/D classes stay closed — CERTIFIED at exactly this scope. Decisive fixture F-T10 independently reproduced at the bench: from the registry export + pinned public keys alone, an author's complete track record recomputes (8 seals, gapless author_seq, head counts exact, tallies identical) and a cherry-picked presentation of only the winners fails step 5, naming the missing author_seq values. Scope is exactly: local/simulator, public seal registry over fixture commitments, value_class \"test\"; fixture cryptography only (1024-bit fixture RSA, fixture keys, fixture clock); no live prediction, real SLA, real outcome feed, or public registry deployment exists in v0.1.4. Gates remain unbuilt by design and are OUT of certified scope: no public hosting, no outcome feed, no SLA enforcement, no charge path, no network. Score ≠ merit (SPEC §10.3): a track record establishes only that stated commitments were sealed before their windows and scored under their pinned rules over presented outcomes — whether the commitments were hard, the outcomes true, or the author skilled is outside what the recomputation shows. Novel mechanism (SPEC §2.1, verbatim): predictions and SLA commitments are sealed publicly before the outcome window and scored at maturity — a track record that cannot be backdated or cherry-picked. Stored serves are verify-before-serve / downgrade-labelled (C5), aux stores (metering + anomalies) are Herald-anchored with entry-by-entry validation (C6 + R1), and every anchor-consulting surface fails closed as STORE_DEFECT / AUX_ANCHOR_DEFECT on a signature-defective aux anchor with zero writes.", "not_tested": [ "Live public track records relied on by third parties (SPEC §10 counsel gate) — a track record marketed to sell agent services or forecasts, cited in investment or procurement decisions, or attached to an enforceable SLA with penalties is OUT of v0.1.4, hard, UNBUILT by design: this tree contains no public-registry hosting, no outcome-feed integration, no public anchoring, and no SLA-enforcement code whose later activation the gate could be misread to authorize; a live phase, if counsel clears it, is a separate, re-benched build", "Public hosting / network operation — local stdio only, no network imports tree-wide; the gates (hosting, outcome feed, SLA enforcement, charge path, network) are unbuilt and out of certified scope by design", "Real outcomes / oracle claims — outcome records are fixture records presented with a source ref; Timecapsule does not originate outcomes and no fixture source is styled as an oracle or anything more than a fixture source in any artifact (Q-T1); the track record's honesty extends exactly as far as those presented sources (§10.3 disclaimer)", "Enforcement / collection / reputation rating — Timecapsule scores commitments; it does not collect on them, enforce them, or move money, and a track record is never a single blended reputation rating or a claim that a HIT rate establishes skill (SPEC §11.3 forbidden claims are bench-grepped absent tree-wide)", "Production signing / Herald authority — fixture cryptography only (1024-bit fixture RSA, locally generated fixture keys in keys/, chmod 600, gitignored, never committed); verification reads pinned keys/public-keys.json only and never keys embedded in a record or export; no key in this product can move money or enforce an SLA. A fresh clone generates its own fixture keys on first run to run the full suite", "Author identity continuity (SPEC Q-T3, accepted, stated not solved) — author_ref is a fixture key hash; an author who rotates keys forks their track record into two authors under this spec; author_counter_sign uses server-held fixture author keys (house fixture custody pattern) with no caller-identity proof — in-scope for simulator, must not survive a live phase", "Hosted or live operation / charge path — metering points only per SPEC §9 (exactly one Meter-grammar metering point per accepted seal at the FREE + $0.10/seal price shape; scoring, outcome presentation, reads, verifies, refusals, voids and idempotent re-seals emit none), no charge, checkout, or collection path is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.4", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-timecapsule-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-burnline-mcp", "name": "Eclipse Burnline", "product_url": "https://eclipsebazaar.com/products/eclipse-burnline-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/bench-burnline.md (Verity bench of v0.1.0, PASS-CONDITIONAL, conditions C1–C7) + fix/rebench rounds v0.1.1–v0.1.4 (fix-burnline.md … fix4-burnline.md; rebench-burnline.md … rebench4-burnline.md; C1+C2, C3, C4, C5+C6+O2 closed) + fix5-burnline.md / rebench5-burnline.md (v0.1.5: C7+O3 CLOSED, conditions NONE, suite 53/53, independent probes 113 assertions — CERTIFIED (local/simulator)). Shipper suite re-run fresh pre-ship: 53/53 OK (pre- and post-ship-prep). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local/simulator)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local/simulator) — CERTIFIED — Eclipse Burnline v0.1.5, local/simulator scope only: fixture spend streams, fixture Till mandates, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only. No certification claimed beyond this scope. Final verdict wording (Verity delta re-bench round 5, rebench5-burnline.md, verbatim): CERTIFIED (local/simulator) — v0.1.5. C1+C2 closed in v0.1.1, C3 in v0.1.2, C4 in v0.1.3, C5+C6+O2 in v0.1.4, C7+O3 in v0.1.5; no remaining conditions. Scope: fixture spend streams, fixture Till mandates, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only. Nothing certifies live budget enforcement (§10 counsel gate, unbuilt), real Herald/Meter/Till interop, or that a verdict stops spend. Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave2/bench-burnline.md) PASS-CONDITIONAL with conditions C1–C7; fix rounds v0.1.1–v0.1.5 closed C1–C7 + O2 + O3; delta re-bench round 5 of v0.1.5: C7 CLOSED, O3 CLOSED, C1–C6 not reopened, remaining conditions NONE, builder suite 53/53 re-run by the bencher, independent probes 113 assertions — CERTIFIED at exactly this scope. Decisive fixture F-BU14 independently reproduced at every bench (fresh process, empty data dir): exported ladder pack verifies true and the ABORT verdict sits at exactly the first head where the pinned burnline-linear/1.0 projection crossed the abort threshold, cumulative burn 3100 < cap 10000, byte-identical on rerun. Scope is exactly: local/simulator, fixture spend streams + sealed fixture Till mandates only, fixture HMAC stand-in signatures, pinned model burnline-linear/1.0 only; value_class \"test\" on every artifact; exact rational arithmetic, ceiling rounding, no floats in signed objects. Burnline issues verdicts only — it holds no spend authority, blocks no transaction itself, and moves no money; nothing certifies that a verdict stops spend (enforcement is the consuming runtime's act, and a runtime that ignores a verdict is recorded as VERDICT_UNACKNOWLEDGED). Two limits stated wherever the mechanism is described: (a) intervention is possible only when the trajectory crosses a threshold before the cap — a single record can jump the cap with no prior intervention possible (F-BU8, NO_PRIOR_INTERVENTION_POSSIBLE); (b) the projection is the pinned model's arithmetic over the records presented, not a prediction about any real system's future spend; the model is never a learned model. Novel mechanism (SPEC §2.1, verbatim): burn-trajectory forecasting over sealed budget mandates intervenes before breach — throttle, escalate, or abort — and the intervention itself is receipted. Stored serves and every mint path verify before serving/minting (C1–C7 closures): chain, burn, receipts, acks and the recomputed defect set are recomputed from source data; store containers (root, stream, metering, refusal entries) carry exact key sets — foreign keys are detected and refused, never silently re-persisted (O3); a tampered store yields a named BURNLINE_VERIFY_FAIL refusal or a downgraded pack, never the stored assertion and never a signed close over unverified bytes.", "not_tested": [ "Live budget enforcement (SPEC §10 counsel gate) — forecasting over real spend against real budgets, and any verdict presented as binding on a real runtime or spend account, is OUT of v0.1.5, hard, UNBUILT by design: this tree contains no live spend source, no production-runtime surface, and no dormant live path to flip; a live phase, if counsel clears it, is a separate, re-benched build (counsel packet contents at SPEC §10.2, incl. liability allocation, agency/instruction, and forecast-accuracy representation limits)", "Real Herald / Meter / Till interop — mandates are consumed in Till's grammar, spend records in Meter's grammar, and signing follows the Herald pattern, all as FIXTURE stand-ins in v0.1.5 only; nothing certifies interop with any real Herald, Meter, or Till system, and Burnline defines no mandate, ledger, or signing format of its own", "That a verdict stops spend — Burnline issues THROTTLE | ESCALATE | ABORT | CLEAR verdicts only; enforcement is the consuming runtime's act, no verb moves money, blocks or releases a spend, raises a cap, or alters a mandate, and an unacknowledged verdict is recorded as such on the pack's face", "Forecast accuracy beyond the pinned fixture arithmetic — the projection is burnline-linear/1.0's deterministic arithmetic (exact rationals, ceiling rounding) over the records presented; no claim is made that it predicts any real system's future spend, and a single record can jump the cap with no prior intervention possible (F-BU8)", "Production signing / Herald authority — fixture HMAC stand-in signatures only (fixture keys in keys/fixture-keys.json, chmod 600, gitignored, never committed; 4 fixture refs: herald/meter/burnline/runtime); verification keys are pinned out-of-band in code and are never accepted from the record under verification; no key in this product can move money. The suite's key-custody test expects the local fixture key file (house pattern) — a fresh clone supplies its own fixture keys, never a committed one", "Hosted or live operation / charge path — metering points only per SPEC §9 (forecast_computed per spend record appended, intervention_issued per verdict, pack_exported per pack, at the $0.01/task price shape — a task being one spend_append forecast computation), no charge, checkout, or collection path is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.5", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-burnline-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-shelfspace-mcp", "name": "Eclipse Shelfspace", "product_url": "https://eclipsebazaar.com/products/eclipse-shelfspace-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench2-shelfspace.md (Verity delta re-bench 2, builder suite re-run twice 52/52, ~200 independent serialized probes incl. partial-rollback matrix, journal tampering, anchor/journal disagreement, duplicate-revocation and null-sig batteries; subject tree unmodified by the bench). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local, fixture placement records)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local, fixture placement records) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-shelfspace.md): all six re-bench conditions F1'–F6' CLOSED; F2' snapshot-rollback residual adjudicated acceptable-at-scope under condition 1; closed round-1 items (cond.2/3/4, F-H14) spot-checked, none reopened; builder suite 52/52 re-run by the bencher plus ~200 independent serialized probes. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local, fixture placement records, under the local single-operator file model; local stdio MCP, fixture placements only, value_class \"test\" on all artifacts, fixture HMAC stand-in for the Herald pattern, no counsel-gate (§10) surface built or claimed. CONDITION 1 (the sole condition, carried verbatim): Scope/fence condition (from F2' residual): certification holds only at scope local, fixture placement records under the local single-operator file model. The README rollback-residual honesty fence and scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside the data-dir trust model + fresh bench (the existing counsel gate for live use stands separately). Decisive fixture F-H14 stands from the bench record: plc-paid-1 SURFACED with proof buying_agent_ref/disclosure_marker bound, plc-paid-2 derives UNMARKED-PAID / UNMARKED_PAID_NO_RECEIPT, fresh verify PASS with eval bound to the signed statement.", "not_tested": [ "Live, multi-party, shared-filesystem, or adversarial-operator use — CONDITION 1 (bench, verbatim): Scope/fence condition (from F2' residual): certification holds only at scope local, fixture placement records under the local single-operator file model. The README rollback-residual honesty fence and scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside the data-dir trust model + fresh bench (the existing counsel gate for live use stands separately).", "Complete coordinated snapshot rollback — Honesty fence — rollback residual: within this local file model, a rollback that restores every local artifact (store, both anchors, journal, metering) to one consistent earlier snapshot is undetectable; the journal/metering cross-checks detect partial rollbacks and single-artifact tampering, not a complete coordinated snapshot restore. No stronger claim is made.", "Live marketplaces, ranking systems, advertisers, routers, ad networks, or buying agents — fixture placement records only; no live system is contacted, integrated, or compelled, and Shelfspace does not rank, sell, render, or endorse any placement", "Legal effect / disclosure-duty compliance (SPEC §10 counsel gate, named, unbuilt) — any claim that a Shelfspace receipt/proof satisfies a legal sponsorship-disclosure duty, advertising law, or anti-deception / unfair-practice rule, or that surfacing is legally required of any party, is out of v0.1.2, hard; the gate packet (disclosure law for agent-facing surfaces; defamation/false-statement review of a public UNMARKED-PAID derivation about a real party; contract terms by which a marketplace/router could require surfacing; real advertiser-terms retention) is unbuilt by design and no dormant live path exists to flip", "Live Herald RS256 signing — v0.1.2 signing is a fixture HMAC stand-in for the Herald pattern, disclosed on every record's face; verification uses pinned fixture keys only, never keys presented inside a record or pack", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9.1 (sponsorship_receipt_issued, surfacing_proof_verified, shelfspace_pack_exported, active_placement_month), no charge path, subscription, or invoice is built and no live Meter ingest is claimed ($99/mo is a book reference)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-shelfspace-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-safelist-mcp", "name": "Eclipse Safelist", "product_url": "https://eclipsebazaar.com/products/eclipse-safelist-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench3-safelist.md (Verity spot re-bench 3, builder suite re-run twice 50/50, serialized independent probes 23/23 + 93/93 behavioral + 11/11; subject tree unmodified by the bench). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local, fixture feed entries)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture feed entries) — Verity spot re-bench 3 of v0.1.3, 2026-10-27 (argus101-program-20261027/wave2/rebench3-safelist.md): R4-D2 CLOSED, conditions NONE; builder suite 50/50 re-run twice by the bencher, independent probes 23/23 + 93/93 behavioral (14-field transcript sweep) + 11/11 (verdict/transcript mismatch edges + regression spot). Scope is exactly: local, fixture feed entries — local stdio, fixture services/receipts only, value_class \"test\" throughout, no live listing/routing/reliance/bench-sale path; counsel gate (§10) unbuilt by design. Decisive fixture F-L13 stands from the bench record: pack alone ACTIVE@T0+3599, EXPIRED@T0+3600, EXPIRED@T0+7200; backdated receipt (bench_ts=T0+3500, presented now=T0+7200) → REBENCH_LATE.", "not_tested": [ "Live listing, routing, or reliance (SPEC §10 counsel gate, named, unbuilt) — listing a real service on a feed real routers/enterprises rely on, any claim that an ACTIVE entry means a service is safe, vetted, compliant, or fit for a purpose, and any claim about the legal effect of listing, expiry, or removal are out of v0.1.3, hard; the gate packet (liability for a listing decision a subscriber relies on and for an expiry/removal a listed service disputes — defamation / trade-libel review; the reliance and disclaimers a live feed's terms must carry; sector rules where an allowlist functions as a compliance control; data-handling for real service descriptors; the terms on which verdict receipts from the internal bench may be republished at live scope) is unbuilt by design and no dormant live path exists to flip", "Live services, routers, or enterprises — fixture feed entries only; no live service is listed, benched, routed to, or endorsed by this product, and Safelist enforces nothing in any router and defines no consequence for an EXPIRED status", "Live Herald RS256 signing — v0.1.3 signing is a fixture HMAC stand-in for the Herald pattern, disclosed on every record's face; verification uses pinned fixture keys only, never keys presented inside a record or pack", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9.1 (feed_month_active, entry_active_at_boundary, feed_pack_exported), no charge path, subscription, or invoice is built and no live Meter ingest is claimed ($149/mo is a book reference)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-safelist-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-muzzle-mcp", "name": "Eclipse Muzzle", "product_url": "https://eclipsebazaar.com/products/eclipse-muzzle-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/ruling-muzzle-reduced-scope.md (Verity reduced-scope bench, 2026-10-27). Prior history: bench-muzzle.md + rebench-muzzle.md + rebench-muzzle-012.md + rebench-muzzle-013.md — the defamation limb FAILed the v0.1.3 re-bench (4th unseen corpus, recall 40.0% vs ≥80% bar) and is NOT certified by this ruling; owner decision 2026-10-27 parked it to a v0.2 redesign and split the ship to secrets + PII only. Builder suite 53/53, and 53/53 with sockets denied, at bench. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/scorecard_url null)." }, "verdict": "PASS-CONDITIONAL (local/fixture)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local/fixture) — Verity reduced-scope bench of v0.1.3, ruleset muzzle-rules/0.4, 2026-10-27 (argus101-program-20261027/ruling-muzzle-reduced-scope.md), secrets and PII limbs ONLY: fresh bench-authored corpus (36 items, disjoint in values/shapes/phrasing from all repo fixtures and both prior Verity corpora), all rates computed from signed receipts after every receipt was independently re-verified — secrets 100% recall / 100% precision (13/13, 0 FP), PII 100% recall / 100% precision (13/13, 0 FP; spec thresholds ≥95% / ≥90%), benign controls 10/10 unflagged, verdict agreement 36/36; tamper battery, redaction invariant (zero raw-value escapes over corpus + canary sweeps), downgrade law, fail-closed fence (7/7), and exact 6-tool surface all PASS. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Sole condition: the ruling §9 authorised claim block ships verbatim on every claim surface (README, this listing, server.legacy.json full manifest); the registry server.json description is the ≤100-char registry short form carrying the §11.1 sentence verbatim and claiming only secrets + PII. This release does not scan for defamation-risk: defamation-risk detection is excluded from the certified scope of this version, and a PASS verdict is not evidence about defamation. Defamation detection is not included in v0.1 — parked for a v0.2 redesign.", "not_tested": [ "Defamation-risk detection — not included in v0.1: Defamation detection is not included in v0.1 — parked for a v0.2 redesign; a PASS verdict is not evidence about defamation", "Any class outside PII and secrets — not scanned by this release, and a PASS is not evidence about them", "Live, publisher, or production scope — local/fixture only: no live publisher integration, hosted endpoint, network egress, or production content is certified by this ruling", "Detection rates beyond the seeded-fixture rates stated in the authorised claim block — measured on seeded shapes in a fresh fixture corpus only", "Production signing custody — fixture Herald/scanner RS256 keys are local-only in keys/ (gitignored, private keys mode 600, never committed); the v0.1.0 shipped fixture keys were burned and receipts signed under them fail verification at step 2" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-muzzle-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-sandclock-mcp", "name": "Eclipse Sandclock", "product_url": "https://eclipsebazaar.com/products/eclipse-sandclock-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench2-sandclock.md (Verity delta re-bench 2, suite 50/50 re-run by the bencher, 55 independent serialized probes; F-S13 decisive recompute with bench-side independent estimator matched). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-sandclock.md): F1–F4 closed (store set-anchor / key-binding / mint-signing / envelope findings), F1 whole-file residual adjudicated acceptable-at-scope under condition 1; builder suite 50/50, independent probes 55/55; closed F1–F6 first-pass items spot-checked — none reopened. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local (fixture scorecards + fixture drift evidence only, value_class \"test\") under the local single-file / single-operator store model — local stdio MCP (SPEC §0.1); no live model/tool observation, no eval run, no score issued; the counsel-gated live phase (SPEC §10.2) remains unbuilt and separately gated. Condition 1 (verbatim): certification holds only at scope local (fixture scorecards + fixture drift evidence only, value_class:\"test\") under the local single-file / single-operator store model. The README whole-file-rollback residual fence + scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside store.json (e.g. receipt-held head hash / external append-only log) + fresh bench; the counsel-gated live phase (spec §10.2) remains unbuilt and separately gated.", "not_tested": [ "Live, multi-party, shared-filesystem, or adversarial-operator use — CONDITION 1 (bench, verbatim): certification holds only at scope local (fixture scorecards + fixture drift evidence only, value_class:\"test\") under the local single-file / single-operator store model. The README whole-file-rollback residual fence + scope label must remain on the product face. Any live, multi-party, shared-filesystem, or adversarial-operator use requires an anchor outside store.json (e.g. receipt-held head hash / external append-only log) + fresh bench; the counsel-gated live phase (spec §10.2) remains unbuilt and separately gated.", "Complete coordinated whole-file rollback — Honesty fence (README, verbatim): a rollback of the entire store.json file to an earlier self-consistent snapshot (entries, all anchors, and metering together) is undetectable in this local single-file model, because no artifact outside the file survives to contradict it; every partial rollback, deletion, or transplant is detected by the set / tail / metering cross-checks. No stronger claim is made.", "Live phase (SPEC §10.2 counsel gate, named, unbuilt) — consuming live Doppel/Replay drift feeds, clocking real third-party eval scores, publishing staleness verdicts, or a verdict a marketplace/registry acts on are out of v0.1.2, hard; the gate packet (defamation / disparagement exposure of a public STALE_EVAL verdict over another party's score; the §11 evidence-decay wording as the claim submission; reliance posture of consumers who act on a verdict; estimator/budget disclosure duties) is unbuilt by design and no dormant live path exists to flip — live mode is a post-gate, re-benched code change, not a config flip", "Live subjects and real eval scores — fixture scorecards in Benchkit format + fixture drift evidence only; no live model/tool is observed, no eval is run, no score is issued, no drift is measured by this product, and a STALE_EVAL verdict is evidence-decay arithmetic only — never a claim a score was or is wrong (SPEC §11.3: never \"expired certification\", \"invalid score\", or \"failed eval\")", "Live Herald signing — v0.1.2 signing is a fixture HMAC stand-in consumed through Herald's signing interface (Sandclock defines no signature scheme of its own), disclosed on the product's face; verification uses pinned fixture keys only, never keys presented inside a record", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering point only per SPEC §9.1 (stale_check_completed at the $0.01/check price shape, per stale_check record and per expiry_verify receipt), no charge path, payment call, or entitlement check is built and no live Meter ingest is claimed; a check is never refused for non-payment" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-sandclock-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-archivist-mcp", "name": "Eclipse Archivist", "product_url": "https://eclipsebazaar.com/products/eclipse-archivist-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench2-archivist.md (Verity delta re-bench 2, suite 36/36 re-run by the bencher plain + socket-denied, 135 independent serialized assertions; F-A8 decisive fresh-process recompute verified). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local, fixture captures)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local, fixture captures) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-archivist.md): R1–R8 all closed (cross-artifact store head / signed bundle-set anchor / sealed metering / record_id binding / exact pack face / structured whole-store garbage / missing-key zero-write / sealed-snapshot defect findings), no closed F1–F6 item reopened; builder suite 36/36 plain + socket-denied, independent probes 135 serialized assertions; the one residual (full coordinated snapshot restore) adjudicated a documented condition, fence present and accurate on README + every pack + server.json. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local, fixture captures only (fixture page content, fixture headers, fixture TLS material, value_class \"test\") under the local single-file / single-operator store model — local stdio MCP (SPEC §0.1); no live web capture exists in v0.1: no fetcher, no network client, no real page, certificate, or server is touched. Condition 1 (verbatim): Rollback residual (R1c): a full coordinated restore of all local artifacts to one consistent earlier snapshot is undetectable in the local file model — fenced verbatim on README + every pack (rollback_fence) + server.json. External anchor required before any live or multi-party use/claim. Condition 2 (verbatim): §10 counsel-gated phases remain unbuilt and unclaimed; any claim at those scopes requires counsel clearance + scope edit + re-bench (§10.2).", "not_tested": [ "Live or multi-party use — CONDITION 1 (bench, verbatim): Rollback residual (R1c): a full coordinated restore of all local artifacts to one consistent earlier snapshot is undetectable in the local file model — fenced verbatim on README + every pack (rollback_fence) + server.json. External anchor required before any live or multi-party use/claim.", "Full coordinated restore of all artifacts to a consistent earlier snapshot — Honesty fence — rollback residual: within this local file model, a rollback that restores every local artifact (bundle records, verification chains and their anchors, the signed bundle-set anchor, the anomaly queue and its anchor, sealed metering and its anchor, and the signed store head) to one consistent earlier snapshot is undetectable; the cross-artifact anchors detect partial rollbacks and single-artifact tampering, not a complete coordinated snapshot restore. An external anchor — a head hash held outside this store — is required for live or multi-party use. No stronger claim is made.", "Counsel-gated phases (SPEC §10, named, unbuilt/unclaimed) — CONDITION 2 (bench, verbatim): §10 counsel-gated phases remain unbuilt and unclaimed; any claim at those scopes requires counsel clearance + scope edit + re-bench (§10.2). The gated phases are: (a) live web capture; (b) evidentiary use in proceedings (no admissibility or notarization-equivalence claim is made anywhere); (c) retention/handling of real captured content; (d) capture of authenticated or paywalled content. No dormant live path exists in v0.1.2 — the startup fence refuses fetch/endpoint configuration.", "Live captures and real servers — fixture captures only: fixture page content, fixture headers, and locally generated fixture TLS material; no real page, certificate, or server is touched, and the bundle identity on the face is the presented certificate's identity, not a verified identity of any operator (SPEC §11.3)", "Live Herald signing — v0.1.2 signing is a fixture HMAC stand-in for the Herald RS256 pattern, disclosed on the product's face; verification uses pinned fixture keys only, never keys presented inside a record or pack", "Production key custody — fixture keys are local-only in keys/ (gitignored, mode 600, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering point only per SPEC §9.1 (one Meter record per completed bundle_seal at the $0.10/capture price shape; verifications, gets, status, and exports emit no metering record), no charge path, payment call, or entitlement check is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-archivist-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-allowance-mcp", "name": "Eclipse Allowance", "product_url": "https://eclipsebazaar.com/products/eclipse-allowance-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench2-allowance.md (Verity delta re-bench 2, suite 44/44 re-run by the bencher x2 clean runs, ~110 independent probe checks; F-A13 decisive fresh-process recompute verified in the regression spot). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local/simulator) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-allowance.md): R1–R7 all CLOSED on fresh repros (per-mandate chains + Tier-M/Tier-G isolation; sealed metering; fail-closed holder-signature verify; exact seal field sets; monotonic amendments; structured store-defect faces with zero raw exceptions; subset restores detected), R7 full-restore residual adjudicated as fenced (condition, not fail), regression spot PASS (F-A13 decisive fresh-process recompute; F8 §7.4 split key custody re-verified); builder suite 44/44 PASS x2 clean runs, independent probes ~110 checks. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local/simulator only, fixture family mandates only (fixture holders, members, agents, merchants, categories and spends, value_class \"test\"), local stdio MCP (SPEC §0.1); no real money, no payment rail, no merchant, bank, or household account is connected in v0.1.2, and Allowance moves no money even in simulation — it checks and records fixture spends. Condition 1 (verbatim): R8 — cross-mandate transplant id↔hash pairing is detected only indirectly (transplanted record never served/counted/exported); Tier-G structural check or README fence stands as the condition. Bench condition text (verbatim): R8: add the id↔hash pairing to the structural/Tier-G check (an entry whose `mandate_id` and `mandate_hash` name different mandates defects the store on every path, incl. target-mandate spend), or fence the pairing class in the README integrity section. Condition 2 (verbatim): O1 — ledger_get VERIFIED slice-export vs downgraded faces on a Tier-G-defected store (documented slice semantics; no false data). Bench condition text (verbatim): O1: make `ledger_get` downgrade when Tier-G defect exists outside the served slice, or document the slice-only semantics on the export face.", "not_tested": [ "Cross-mandate record transplant, id↔hash pairing — CONDITION 1 (bench, verbatim): R8 — cross-mandate transplant id↔hash pairing is detected only indirectly (transplanted record never served/counted/exported); Tier-G structural check or README fence stands as the condition. Bench condition text (verbatim): R8: add the id↔hash pairing to the structural/Tier-G check (an entry whose `mandate_id` and `mandate_hash` name different mandates defects the store on every path, incl. target-mandate spend), or fence the pairing class in the README integrity section. The README fence stands in v0.1.2: the transplanted record is never served, counted, or exported as the target mandate's; the source mandate goes SEAL_DEFECT and the target mandate's history downgrades; the hash-also-switched variant is fully detected (SEAL_DEFECT, verify FAIL step 2).", "ledger_get slice semantics on a Tier-G-defected store — CONDITION 2 (bench, verbatim): O1 — ledger_get VERIFIED slice-export vs downgraded faces on a Tier-G-defected store (documented slice semantics; no false data). Bench condition text (verbatim): O1: make `ledger_get` downgrade when Tier-G defect exists outside the served slice, or document the slice-only semantics on the export face. The slice-only semantics are documented on the export face and in the README: the export attests only the clean per-mandate slice it serves, no false data is served, and status/history/refusal faces downgrade on the same store.", "Full coordinated restore of all local artifacts to a consistent earlier snapshot — Honesty fence — rollback residual: within this local file model, a rollback that restores *every* local artifact (mandates, ledger, refusals, revocations, all anchors, and metering) to one consistent earlier snapshot is undetectable; the per-mandate anchors and the sealed-metering cross-checks detect partial rollbacks, subset restores, and single-artifact tampering, not a complete coordinated snapshot restore. Detecting a full coordinated restore requires an external anchor outside the local store; an external anchor is required for any live or multi-party use and is not built in this local/simulator scope. No stronger claim is made.", "Counsel-gated phase (SPEC §10, named, unbuilt/unclaimed): any live household spend — real payment rails, real merchant presentment, mandates governing minors' actual purchases, custodial or stored-value anything, platform contracts making refusals financially effective — is out of v0.1, hard. The live phase is a separate post-gate, re-benched build: counsel review of consumer-finance / payments exposure, minors'-finance and consent questions (who may seal for whom), and the §11 label set first. No dormant rail path and no real-money shape exists in v0.1.2 — the startup fence refuses payment-rail / bank / card configuration, non-local endpoints, and agent-side ledger signer keys.", "Real money and real households — fixture mandates only: fixture holders, members, agents, merchants, categories, and spends under a deterministic seed + fixture clock; merchant/category refs name no real merchant or family, and every artifact carries value_class \"test\"", "Live Herald signing — v0.1.2 signing is a fixture HMAC stand-in for the Herald RS256 pattern, disclosed on the product's face; verification keys are pinned out-of-band in code — a presented record can never select its own verification key", "Production key custody — fixture keys live split per role in keys/ (keys/holder-key.json, keys/recorder-key.json, keys/herald-key.json, keys/holder-token.json; chmod 600, gitignored, never committed); an agent-surface process loads only the recorder and Herald role files and never loads holder key material or the holder token; a fresh clone must create its own per-role fixture key files to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9.1 (mandate_active — one per ACTIVE mandate per fixture period; premium_mandate_active; spend_recorded / spend_refused counts, informational), no charge path is built, no payment is taken, and no live Meter ingest is claimed; downgraded exports and refused spends are not premium metering points" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-allowance-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-receiptvault-mcp", "name": "Eclipse Receiptvault", "product_url": "https://eclipsebazaar.com/products/eclipse-receiptvault-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench3-receiptvault.md (Verity delta re-probe of v0.1.3, RB-F9 only + regression spot: suite 66/66 re-run by the bencher plus socket-denied 66/66, bencher battery 130/130 PASS, supplementary S23/F-RV9 probes PASS). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "CERTIFIED (local, fixture sealed merchant terms + fixture purchase records)", "record_status": "current", "certified": true, "scope": "CERTIFIED (local, fixture sealed merchant terms + fixture purchase records) — Verity delta re-probe (re-bench 3) of v0.1.3, 2026-10-27 (argus101-program-20261027/wave2/rebench3-receiptvault.md): RB-F9 CLOSED on fresh repros (dangling/repointed purchase index and deleted-field entries defect as SEAL_DEFECT on every surface, no raw KeyError anywhere, stdio process survives, zero writes on defect paths), RB-F1–RB-F8 closed at re-bench 2 and not reopened, regression spot PASS (F-RV9 decisive fresh-process recompute holds; full-export head-anchor/record-count drops fail verification); builder suite 66/66 PASS plus socket-denied 66/66, bencher battery 130/130 PASS. Scope is exactly: local, fixture sealed merchant terms + fixture purchase records — local stdio MCP (SPEC §0.1), fixture purchases, merchants, terms, seals, holiday calendars, clock and alert sink only, every artifact value_class \"test\"; no live merchant, storefront, receipt inbox, terms page, or notification channel is touched in v0.1.3 and no real purchase or terms are vaulted. Standing condition (verbatim): full coordinated local snapshot restore is undetectable in the local model — fenced verbatim in README + server.json; an external anchor (witnessed/countersigned head hash outside the local store) is REQUIRED before any live or multi-party use.", "not_tested": [ "Full coordinated local snapshot restore — STANDING CONDITION (bench, verbatim): full coordinated local snapshot restore is undetectable in the local model — fenced verbatim in README + server.json; an external anchor (witnessed/countersigned head hash outside the local store) is REQUIRED before any live or multi-party use. Honesty fence — rollback residual: within this local file model, a rollback that restores *every* local artifact (the whole store file, every anchor, and the fixture clock) to one earlier, internally consistent snapshot is undetectable; the cross-commitments detect partial rollbacks and single-artifact tampering, not a complete coordinated snapshot restore. Closing that residual requires an external anchor — a head hash witnessed or countersigned outside this local store — which is required before any live or multi-party use. No stronger claim is made.", "Counsel-gated phase (SPEC §10, named, unbuilt/unclaimed): (a) presenting a computed deadline to consumers as a legal return right or as binding on a merchant; (b) ingesting live merchant terms / live purchase records and relying on live Trueprice/Shelfprice seals; (c) sending alerts over real channels on the basis of computed deadlines (a missed/wrong alert becoming a lapsed-right claim) — all out of v0.1, hard. A live phase is a separate, re-benched build after counsel clearance; v0.1.3 builds nothing around, against, or in anticipation of this gate and there is no dormant live path to activate — the startup fence refuses live-key strings, non-local endpoints, external notification/send modules, and terms-fetch/refresh modules by name.", "Live merchants and live purchases — fixtures only: fixture purchase records plus merchant terms sealed at purchase time under a deterministic seed; merchant refs name no real merchant, and every artifact carries value_class \"test\"", "Live Herald signing — v0.1.3 signing is a fixture HMAC stand-in for the Herald pattern, disclosed on the product's face; verification keys are pinned out-of-band in code (PINNED_KEY_REFS) — a record under verification can never select its own verification key, and key references inside a presented record are ignored", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9.1 (one vault-month Meter-shaped event per distinct vault, by user ref, with at least one entry in COMPUTED/WINDOW_CLOSED/RETURNED_MARKED state during a fixture month window, at the $5/mo shape; the free shape emits no per-call metering point, and NO_SEALED_TERMS/UNCOMPUTABLE verdicts and idempotent re-opens emit none), no charge path is built, no payment is taken, and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.3", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-receiptvault-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect-gemini-mcp", "name": "Eclipse Connect for Gemini", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-gemini-mcp/", "listing_class": "connector", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio + HTTP/JSON (hosted relay, staging)" ], "live_state_note": "Bench evidence is the Verity bench record in llm-connectors-20261027/ (bench-*.md), not a Test Bench scorecard JSON — no scorecard is claimed for this listing (scorecard_ref/scorecard_url null). Core: Eclipse Connect (core 0.1.2) — PASS (hosted/staging), bench-core.md; the core is infrastructure and is not itself a listing." }, "verdict": "PASS-CONDITIONAL (hosted/staging)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (hosted/staging) — Verity delta re-bench, 2026-10-27 (llm-connectors-20261027/bench-gemini.md): adapter 0.1.1 on core 0.1.2; staging conditions C1/C2/C4 CLEARED. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Sole surviving condition (LIVE-GATE): hosted enrolment must implement a real restriction/tier probe before any live enrolment.", "not_tested": [ "Any live Gemini call — bench ran against recorded fixtures/mocks only; no live provider smoke at this scope", "Public-live hosted enrolment — the LIVE-GATE condition (real hosted restriction/tier probe) is unimplemented until live enrolment opens" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect-gemini-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect-anthropic-mcp", "name": "Eclipse Connect for Anthropic", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-anthropic-mcp/", "listing_class": "connector", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio + HTTP/JSON (hosted relay, staging)" ], "live_state_note": "Bench evidence is the Verity bench record in llm-connectors-20261027/ (bench-*.md), not a Test Bench scorecard JSON — no scorecard is claimed for this listing (scorecard_ref/scorecard_url null). Core: Eclipse Connect (core 0.1.2) — PASS (hosted/staging), bench-core.md; the core is infrastructure and is not itself a listing." }, "verdict": "PASS-CONDITIONAL (hosted/staging)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (hosted/staging) — Verity delta re-bench 2, 2026-10-27 (llm-connectors-20261027/bench-anthropic.md): adapter 0.1.2 on core 0.1.2; ANTH-D1–D4 all CLEARED. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Surviving conditions are LIVE-GATE items only: (1) per-model cache-read multiplier refresh from Anthropic's published pricing before live enrolment; (2) unbroken-cache confirmation against a recorded real response shape at the live gate.", "not_tested": [ "Any live Anthropic call — bench ran against recorded fixtures/mocks only; no live provider smoke at this scope", "Public-live hosted enrolment — the LIVE-GATE items (per-model cache-read multiplier refresh; unbroken-cache confirmation) are outstanding until live enrolment opens" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect-anthropic-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-connect-groq-mcp", "name": "Eclipse Connect for Groq", "product_url": "https://eclipsebazaar.com/products/eclipse-connect-groq-mcp/", "listing_class": "connector", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio + HTTP/JSON (hosted relay, staging)" ], "live_state_note": "Bench evidence is the Verity bench record in llm-connectors-20261027/ (bench-*.md), not a Test Bench scorecard JSON — no scorecard is claimed for this listing (scorecard_ref/scorecard_url null). Core: Eclipse Connect (core 0.1.2) — PASS (hosted/staging), bench-core.md; the core is infrastructure and is not itself a listing." }, "verdict": "PASS (hosted/staging)", "record_status": "current", "certified": false, "scope": "PASS (hosted/staging) — Verity delta re-bench, 2026-10-27 (llm-connectors-20261027/bench-groq.md): adapter 0.1.1 on core 0.1.2 (regression on core 0.1.2 PASS in bench-anthropic.md delta re-bench 2); conditions C1–C4 all CLEARED, no surviving conditions. PASS is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Catalogue is exactly openai/gpt-oss-120b, openai/gpt-oss-20b and qwen/qwen3.8-27b (PREVIEW) — the gpt-oss route, never 'all open weights'. Groq is a trademark of Groq LLC and/or its affiliates. Eclipse Connect for Groq is not affiliated with or endorsed by Groq LLC.", "not_tested": [ "Any live Groq call — bench ran against recorded fixtures/mocks only; no live provider smoke at this scope", "Public-live hosted deployment — bench scope is hosted/staging only" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": null, "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-connect-groq-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-scamshield-mcp", "name": "Eclipse Scamshield", "product_url": "https://eclipsebazaar.com/products/eclipse-scamshield-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave2/rebench2-scamshield.md (Verity delta re-bench 2, suite 53/53 re-run by the bencher x3, ~120 independent probe checks; F-SS9 decisive fresh-process recompute verified in the regression spot). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator, fixture risk sources + fixture payee history)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL (local/simulator, fixture risk sources + fixture payee history) — Verity delta re-bench 2 of v0.1.2, 2026-10-27 (argus101-program-20261027/wave2/rebench2-scamshield.md): RB-F1–RB-F8 all CLOSED on fresh repros (genuine-export anchor/count binding; key preflight with byte-identical disk on KEY_MISSING; structured stdio envelope; exact nested field sets with no raw exceptions; source-intent-history injection downgrades at the exact named verify step; temporal-order gates; subset restores detected via the retained store_head.json cross-artifact commitment; duplicate sources refused), RB-F7 coordinated-restore residual adjudicated as a fenced CONDITION (not a fail), regression spot PASS (F-SS9 decisive fresh-process recompute; ack same-briefing binding; closed originals not reopened); builder suite 53/53 PASS x3 by the bencher, ~120 independent probe checks. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local/simulator, fixture risk sources + fixture payee history — local stdio MCP (SPEC §0.1), fixture payment intents, payees, histories, fraud reports, continuity chains, lookalike findings, users and keys only, every artifact value_class \"test\"; no live payment, payee, fraud database, domain registry, or user is touched in v0.1.2, and Scamshield scores, blocks, releases, or executes no payment and certifies no payee. Condition 1 (verbatim): RB-F7 residual (fenced): a full coordinated restore of every local artifact (store.json, store_head.json, and any backups) is undetectable in the pure local model and is NOT claimed detected; detection requires an external anchor outside this local store. The fence must remain verbatim on README + status/list/anomaly/verify/briefing_get/check faces in any future version claiming this certification. Condition 2 (verbatim): Certification extends only to the scope above; any live phase remains behind the §10 counsel gate and requires a separate re-benched build.", "not_tested": [ "Full coordinated restore of every local artifact — CONDITION 1 (bench, verbatim): RB-F7 residual (fenced): a full coordinated restore of every local artifact (store.json, store_head.json, and any backups) is undetectable in the pure local model and is NOT claimed detected; detection requires an external anchor outside this local store. The fence must remain verbatim on README + status/list/anomaly/verify/briefing_get/check faces in any future version claiming this certification. The fence stands verbatim in the README and on the status/list/anomaly/verify/briefing_get/check faces in v0.1.2: ROLLBACK FENCE: a full coordinated restore of every local artifact (store.json, store_head.json, and any backups) to an earlier snapshot is undetectable in the pure local model and is NOT claimed to be detected; detecting it requires an external anchor outside this local store. Restoring or deleting only some artifacts contradicts the retained cross-artifact head commitment and surfaces as SEAL_DEFECT.", "Live phase — CONDITION 2 (bench, verbatim): Certification extends only to the scope above; any live phase remains behind the §10 counsel gate and requires a separate re-benched build.", "Counsel-gated phase (SPEC §10, named, unbuilt/unclaimed): (a) presenting briefings to real consumers as fraud-risk information, incl. the NO_ADVERSE_RECORDS_FOUND rendering's consumer meaning; (b) relying on live fraud-report sources, live Morphguard chains, or live lookalike-domain data (accuracy/defamation exposure for named payees is counsel's question); (c) any composition in which a Till flow requires an ack receipt before proceeding (the acknowledgment becoming a payment condition) — all out of v0.1, hard. A live phase is a separate, re-benched build after §10 clearance; v0.1.2 builds nothing around, against, or in anticipation of this gate and there is no dormant live path to activate — the startup fence refuses live-key strings, non-local endpoints, value_class other than \"test\", payment-execution/blocking modules, scoring/rating modules, and live-source clients.", "Live payments and live payees — fixtures only: fixture payment intents against a fixture payee history and fixture risk sources under a deterministic seed; payee refs name no real payee, and every artifact carries value_class \"test\"", "Live Herald signing — v0.1.2 signing is a fixture HMAC stand-in for the Herald pattern, disclosed on the product's face; verification keys are pinned out-of-band per role/class in code — a record under verification can never select its own verification key, and key material inside a presented record is refused/downgraded", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9.1 (one metered check event per check that completes the trigger evaluation with a sealed briefing, at the $0.05/check shape; NOT_FIRST_PAYMENT verdicts, refusals, verifications, duplicate re-presentations, and ack/decline acts emit no additional metering point), no charge path is built, no payment is taken, and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-scamshield-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-holdfast-mcp", "name": "Eclipse Holdfast", "product_url": "https://eclipsebazaar.com/products/eclipse-holdfast-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-holdfast.md (Verity bench of v0.1.0, 2026-10-27; builder suite 34/34 re-run clean by bencher, decisive F-H9 reproduced independently in both runs, bencher adversarial battery 60/60, scope audit confirming the §10 counsel gate genuinely unbuilt; defects none; conditions C-1/C-2 binding, advisories F-2–F-4 non-blocking). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(simulator, fixture escrow ledger)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(simulator, fixture escrow ledger) — Verity bench of v0.1.0, 2026-10-27 (argus101-program-20261027/wave3/bench-holdfast.md): builder suite 34/34 re-run clean by bencher; decisive fixture F-H9 independently re-derived in both runs from bencher corpus + bencher keys; bencher adversarial battery 60/60 (recompute-in-verify, signed head + SET anchors, signed-records-only derived state, exact face/field sets, whole-store validation pre-write, consume-or-refuse partition with byte-identical store on every refusal, counter-signatures on every path, fail-closed verify on missing key, temporal monotonicity, crash-proof envelopes, F-H2/F-H5/F-H6 state battery, F-H3 expiry return, amount discipline, no-click law with 13 forbidden verbs absent, dispute handoff, labels on 100% of artifacts). Defects: none. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture escrow ledger only, value_class \"test\" on every artifact and simulated: true on every ledger artifact; no real funds are held, moved, released, or owed, and no custody in any form exists in v0.1.0. Condition C-1: external anchor required before live/multi-party use — coordinated rollback across artifacts is not claimed by this local build. Condition C-2: SETTLEMENT_BPS = 50 requires price-book/owner ratification before priced reliance (SPEC states no numeric figure — §9.1 shape only, §9.2 defers to price book; the 50 bps component is disclosed and NEVER collected in this scope, collected:false on every metering record).", "not_tested": [ "Live custody / escrow licensing — SPEC §10 counsel gate (named, unbuilt): real fund custody or movement in an escrow form — holding buyer funds, acting as escrow agent, releasing real funds, or marketing a live escrow offering — is counsel-gated under the FinTech Law packet, additionally implicating escrow-agent / money-transmission licensing analysis counsel must scope before any live design exists; no custody, rail, wallet, bank, or processor code exists in this tree, there is no dormant live mode to activate, and a live phase is a separate, counsel-cleared, re-benched build, not a configuration change", "Condition C-1: external anchor required before live/multi-party use — coordinated rollback across artifacts is not claimed by this local build.", "Condition C-2: SETTLEMENT_BPS = 50 requires price-book/owner ratification before priced reliance (SPEC states no numeric figure — §9.1 shape only, §9.2 defers to price book; the 50 bps component is disclosed and NEVER collected in this scope, collected:false on every metering record).", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256, disclosed on the product's face and on the signer face of receipts/evaluations; keys are pinned out-of-band in a local chmod-600 gitignored key file — a record-supplied key field is an unknown field, refused by name with its value never echoed, and a missing pinned key verifies nothing (fail-closed); a live phase requires real Herald RS256 signing and a re-bench", "Proof honesty (SPEC §11.4) — a release receipt proves a counter-signed run of the sealed bundle met the sealed criterion over the presented run record; it does not prove the delivered goods are good in any broader sense, that the tests were well-chosen, or that the runner's environment was honest; under NO_CRITICAL_FAIL, per-test criticality is taken from the counter-signed proof's outcomes (the bundle itself is never presented, only its sealed hash — bench advisory F-2)", "Multi-deliverable or staged escrows and a mutual-cancel verb — out of v0.1 (one deliverable, one amount, all-or-nothing release; §5 defines no cancel verb; the v0.1 return path is expiry-only); an ACCEPTANCE_PENDING escrow read past expiry does not auto-return (bench advisory F-3) and a post-expiry proof is refused ESCROW_EXPIRED", "Production key custody / fresh clone — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed); a fresh clone generates its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly one Meter-grammar record per escrow reaching a terminal settlement state, RELEASED_SIM or RETURNED_SIM, at the $1/settlement + bps shape; refusals, failed runs, and idempotent re-presentations emit 0; the bps component is disclosed and never collected — collected: false on every metering record), no charge, checkout, invoice, or payment-collection path is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-holdfast-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-voiceprint-mcp", "name": "Eclipse Voiceprint", "product_url": "https://eclipsebazaar.com/products/eclipse-voiceprint-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-voiceprint.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean-state 32/32, decisive F-V14 reproduced independently on all three branches, bencher battery 82/82 after probe-artifact corrections, scope audit confirming the §10 counsel gate genuinely unbuilt; PASS-CONDITIONAL on sole condition C1, F-2/F-3/F-4 advisory only). PASS-CONDITIONAL is not CERTIFIED — certified: false. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(local, fixture call records)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local, fixture call records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-voiceprint.md): builder suite 32/32 re-run clean by bencher; decisive fixture F-V14 independently reproduced on all three branches from the exported pack + pinned keys alone in a fresh process; bencher battery 82/82 after 3 probe-artifact corrections (F-1) — swap/drift exactness (drift never returned as SWAP_DETECTED; binary-exact 0.25 at threshold CONTINUOUS, 0.375 SUSPECT), claim-surface audit (narrowed claim verbatim on README/server.json/statements/verify results; forbidden §11.4 strings zero hits outside SPEC's own enumeration), 14-point delta law, refusal/gap battery, tamper battery (downgrade-never-upgrade on every path), metering exactness, disjoint surfaces, §7.3 fence, privacy fence (no audio capture/playback, telephony, speech, or biometric code path in the tree). Sole condition C1 (verbatim): external anchor required before live/multi-party use (cross-artifact coordinated rollback fenced; local SET anchor binds head + record_count within one pack only). Advisories F-2/F-3/F-4 (non-blocking, disclosed): fixture feature vectors are retained in attestation objects carried in the pack (token artifacts store the hash only; accepted at fixture scope, re-bench required for any real feature data); the §11.2 legend's '(§3.5)' parenthetical appears in README only; token_verify accepts a sealed token's SUSPECT_FEATURE_DRIFT on its identifier aspect only (full drift recompute lives in chain_verify). Scope is exactly: local stdio MCP, fixture call-record metadata only, value_class 'test' on all artifacts; no real audio is captured, processed, or stored, no human speaker is identified, and no live call platform is touched. Novel mechanism (SPEC §2.1, verbatim): per-call continuity tokens seal the speaker model + voice fingerprint, so a voice agent cannot silently swap voices mid-relationship.. Narrowed claim (verbatim): The 'cannot silently swap' claim is provable only at identifier granularity: a swap is proven only by a change in the attested model_id/voice_id (or a chain break); same-model re-voicing behind unchanged identifiers is not detectable.", "not_tested": [ "Live call-platform integration (real audio / live attestations / human-voice feature data) — counsel gate (SPEC §10, named, unbuilt/unclaimed): processing real call audio, real provider attestations from live calls, or any feature data derived from a real human's voice requires counsel clearance (biometric-identifier law exposure, call-recording/wiretap consent regimes, provider terms on attestation reuse, counterparty disclosure duties, retention limits) before any build toward it; fixture audio metadata only in v0.1.0, no real voice biometrics stored, and there is no dormant live path to flip — live mode is a post-gate, re-benched code change", "Same-model re-voicing behind unchanged identifiers — NOT detectable by this product, by design (SPEC §11.2): The 'cannot silently swap' claim is provable only at identifier granularity: a swap is proven only by a change in the attested model_id/voice_id (or a chain break); same-model re-voicing behind unchanged identifiers is not detectable. A CONTINUOUS result proves only that no attested identifier changed; it is never stated as 'same voice verified' and no biometric-identity claim is made — the fingerprint is the attested model/voice identifier set plus an audio-feature hash where available, and the product does not identify human speakers. Never claimed for v0.1.0 are 'voice authentication', 'speaker verification', 'fraud prevention', 'fraud-proof', 'deepfake detection', 'the same voice, guaranteed', or 'voice verified' (SPEC §11.4 strings named here only as never claimed)", "Cross-artifact coordinated rollback — CONDITION C1 (bench, verbatim): external anchor required before live/multi-party use (cross-artifact coordinated rollback fenced; local SET anchor binds head + record_count within one pack only). Within one pack the signed SET anchor binds head + record_count and the §6.4 recompute detects tampering; a coordinated rollback across artifacts is fenced, not claimed detected, in the local model", "Intra-call voice changes and unattested calls — any voice change inside a single call is outside v0.1 detection (per-call granularity, SPEC §3.5; segment identifier sets are refused as malformed), and any change on a call for which no attestation exists is recorded as a chained gap, not a detection", "Production signing — v0.1.0 signing is a fixture HMAC stand-in for the Herald RS256 pattern (disclosed on every face; fixture keys in keys/fixture-keys.json, chmod 600, gitignored, never committed); a live phase requires real Herald signing and a re-bench; a fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9: exactly three Meter-grammar points — call_sealed, chain_verify, continuity_pack_exported — at the $0.03/call price shape attaching to call_sealed; the chain_verify metering point is emitted in the verifier result, not persisted (verifier surface is stateless/pure; counts remain recomputable from the stream + emitted records); no charge path is built, no payment is taken, and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-voiceprint-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-understudy-mcp", "name": "Eclipse Understudy", "product_url": "https://eclipsebazaar.com/products/eclipse-understudy-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-understudy.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean-state 34/34, decisive F-U9 reproduced independently incl. fresh-process re-derivation, bencher battery 99 checks, scope + claim-surface audit confirming the §10 counsel gate genuinely unbuilt; single condition as stated, F-2/F-3 advisory only). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(local, subset proof over Till-grammar fixture mandates)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local, subset proof over Till-grammar fixture mandates) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-understudy.md): builder suite 34/34 re-run clean by bencher; decisive fixture F-U9 independently reproduced (bencher corpus, bencher keys, black-box stdio) — STRICT_ATTENUATION with face vector and subset_proof equal to bencher recomputation, full chain recomputed from the §6.2 export alone, and fresh-process empty-data-dir verify → VERIFIED_EXPORT / STRICT_ATTENUATION re-derived; all 8 F-U5 single-dimension widenings NOT_SUBSET with named codes and fresh-process recompute; 9-field absence totality, §5.3 refusal partition, verify/tamper/downgrade battery, metering exactness, and malformed battery all pass (bencher battery 99 checks). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture mandate pairs only, value_class 'test'; Understudy issues no mandates, grants no authority, registers no agents, and executes no delegated action. Sole condition (verbatim): Cross-artifact cross-commitment note: full coordinated rollback across separately held artifacts is a fenced condition — external anchor required before live/multi-party use. Advisory F-2/F-3 (non-blocking, v0.2 hardening notes): chain-hop hash continuity (chain_verify binds hops by mandate_id, not hash/citation) and offline verify temporal re-check (verify step 2 does not re-run write-time predates/expiry-at-issuance checks; prove, the sole mint path, refuses both).", "not_tested": [ "Live delegated-authority reliance — SPEC §10 counsel gate (named, unbuilt): a production platform admitting, limiting, or acting on sub-agents in reliance on Understudy proofs over live mandates, or any marketing of the proof as establishing legal agency, authority, or liability allocation — is out of v0.1, hard, gated on counsel clearance; no issuance, registration, or enforcement code exists, and a subset proof establishes a mathematical relation between two mandates only — whether that relation creates, evidences, or limits legal authority is a counsel question this product never answers on its own face", "Condition (bench, verbatim): Cross-artifact cross-commitment note: full coordinated rollback across separately held artifacts is a fenced condition — external anchor required before live/multi-party use. v0.1 anchors are local to the evaluation (binding prev_hash = pair-hash anchor); no coordinated rollback across separately held artifacts is possible or claimed until an external anchor exists", "Advisory F-2 (bench, v0.2 hardening note, non-blocking): chain_verify binds hops by mandate_id equality and does not check that hop i+1's delegator mandate is hash-identical to hop i's delegate mandate, nor that hop i+1's proof cites hop i's subset_proof in prior_hop_proof — the direct root-vs-final recompute still prevents any chain-verified final delegate from exceeding the root mandate, and each hop proof is individually genuine; hash + citation continuity in chain_verify is recorded for v0.2 hardening", "Advisory F-3 (bench, v0.2 hardening note, non-blocking): offline understudy_verify re-runs structure, pinned-key signatures, binding, and delegability at SPEC §6.4 step 2, but does not re-run the write-time temporal checks (DELEGATE_PREDATES_DELEGATOR, delegator expiry at evaluation) — reachable only by the Herald-key holder, since prove, the sole mint path, refuses both", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 (signer face: herald-fixture (fixture HMAC stand-in for Herald RS256)), disclosed on every signed face; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never key material from the record under verification; a live phase requires real Herald signing and a re-bench", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed); a fresh clone generates its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly 1 point per sealed proof, any verdict; 0 for refusals, verifies, chain reads, and idempotent resubmissions), no charge path is built, no payment is taken, and no live Meter ingest is claimed", "Grammar pin — mandate fields, canonical form, hash construction, and verification order are Till §5's, consumed verbatim (GRAMMAR_PIN: Till section 5 mandate grammar (eclipse-till-mcp README section 5 + MPP Session Witness spec 4.1), dimension set per Understudy spec 2.3, pinned 2026-10-27); the B0 checkout-profile spellings are the purchase profile of the same grammar, mapped semantically and disclosed per SPEC §14 Q-U1 — if a future Till grammar revision renames fields, a spec amendment (not builder discretion) is required" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-understudy-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-genesis-mcp", "name": "Eclipse Genesis", "product_url": "https://eclipsebazaar.com/products/eclipse-genesis-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-genesis.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean-state 43/43, F-G13 independently re-derived with bencher corpus/keys, detects-never-blocks dispatch enumeration, metering partition probed). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null). Repository PUBLIC (free-tier policy, Benchkit precedent): https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-genesis-mcp @ v0.1.0. Official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-genesis-mcp v0.1.0, status active, isLatest true." }, "verdict": "PASS-CONDITIONAL(local/fixture)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-genesis.md): builder suite 43/43 re-run clean by the bencher; decisive fixture F-G13 independently re-derived from the bencher's own corpus and bencher-generated keys — registration agent_ref matched the bencher-predicted mint, exported certificate / seed prev_hash / creator + witness signatures / export head anchor all recompute under bencher code, fresh-process verify from export + pinned keys alone returned SEAL_VALID, and detection over the bencher's 5 actions reproduced exactly [IN_PURPOSE, IN_PURPOSE, IN_PURPOSE, OUT_OF_PURPOSE, INDETERMINATE] with the out-of-purpose record naming clause action_types and the indeterminate record naming reason unmapped, never coerced. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this scope is claimed. Scope is exactly: local stdio, fixture agents/creators/keys, fixture Docket/Meter-grammar action records, value_class \"test\"; no live registry, no third-party reliance, no enforcement use. Sole condition (verbatim): cross-artifact cross-commitment — full coordinated rollback = fenced condition — external anchor required before live/multi-party use. Genesis detects, it never blocks: no blocking/enforcement verb exists on either surface (dispatch enumeration by the bencher).", "not_tested": [ "Live registry reliance — SPEC §10 counsel gate (named, unbuilt): a real registry accepting real registrations, certificates presented to third parties for reliance, detection records used in disputes, enforcement, or platform decisions, or any \"registered agent\" claim towards regulated buyers requires counsel review before build (claim language, declaration-warranty/liability, creator-identity data posture, retention/takedown). v0.1.0 contains no dormant live path, no dormant enforcement/blocking verb, and no config flip that turns this build live; the startup fence refuses live-registry / non-local config (CONFIG_FENCE_REFUSED). Genesis DETECTS, NEVER BLOCKS — this listing does not imply any blocking or enforcement capability.", "Sole condition (verbatim from the bench record): full coordinated rollback is a fenced condition — external anchor required before live/multi-party use. The local stream seed anchor + witness-signed export head anchor are implemented and verified, but no external/cross-artifact anchor exists.", "Live Herald signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256, disclosed on the product's face; a live phase (counsel-gated, SPEC §10) would need real Herald signing and a re-bench. Verification keys are pinned out-of-band by fixed ref from the local key file only; a record-supplied key is never read (UNKNOWN_FIELD refusal).", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed; GitHub contents/keys verified 404); a fresh clone must supply its own fixture key file to run the full suite.", "Hosted or live operation / charge path — local stdio only; metering records only per SPEC §9 (registration = exactly 1 zero-value FREE record; verify/detect receipts carry the $0.05/verification-shape meter record inside the signed receipt; a BROKEN verify still meters because the issuance happened; tool refusals never meter); no charge path, payment call, entitlement check, or live Meter ingest is built or claimed." ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-genesis-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-slowpay-mcp", "name": "Eclipse Slowpay", "product_url": "https://eclipsebazaar.com/products/eclipse-slowpay-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-slowpay.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean-state 42/42, bencher black-box suite 82/82, decisive F-S9 reproduced independently in both runs, 14-point delta law and claim-surface audit confirming the §10 counsel gate genuinely unbuilt; no defects, sole condition C-1, advisories A-1/A-2 non-blocking). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(simulator, fixture schedules + witnessed-change feed)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(simulator, fixture schedules + witnessed-change feed) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-slowpay.md): builder suite 42/42 re-run clean by bencher; bencher black-box suite 82/82; decisive fixture F-S9 independently reproduced in both runs (genuine witnessed price drift 4321→4400 freezes in the presenting evaluation, held due event never back-processed, fresh-process verify from export + pinned keys alone returns verified: true / ACTIVE after buyer re-attestation; the one-character altered copy 4400→4409 returns RECEIPT_HASH_MISMATCH, no freeze record, schedule remains ACTIVE). No defects found. Sole condition C-1: cross-artifact cross-commitment is the local per-schedule hash chain + export SET anchors only; full coordinated rollback not provided — external anchor required before live/multi-party use (bench text: cross-artifact cross-commitment in v0.1 is the local per-schedule hash chain plus the export's SET anchors only; full coordinated rollback across artifacts is not provided — external anchor required before live/multi-party use). No live or multi-party use is licensed until that anchor exists and the build is re-benched. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond the conditional verdict at its exact scope is claimed. Scope is exactly: local stdio MCP, fixture schedules + fixture witnessed-change feed only, value_class 'test' on all artifacts, due records simulated notes (simulated: true); no payment is executed, initiated, or held, and no live feed, mandate issuance, or witness product is touched. Novel mechanism (SPEC §2.1, verbatim): any witnessed counterparty behavior change (price drift, endpoint change, ownership change) automatically freezes the schedule until re-attestation. Advisories A-1/A-2 (non-blocking bench notes, do not limit the verdict at the stated scope): A-1 — status/list EXPIRED overlay also applies to a DRAFT schedule past mandate expiry (display-only; no transition or write; sealing against an expired mandate is refused); A-2 — in a store already containing Herald-signed freeze records, removing the Herald key surfaces as CHAIN_BROKEN (whole-store validation) rather than the mint-specific error, with the isolated clean-store probe confirming the mint gate itself (structured error, zero writes, schedule stays ACTIVE). Signing is an HMAC fixture stand-in for Herald RS256 (disclosed on every signed face as 'herald-fixture (fixture HMAC stand-in)'); a live phase would need real Herald signing and a re-bench.", "not_tested": [ "Live payment execution or live use of any kind — the SPEC §10 counsel gate is named, unbuilt, with no dormant live mode: live payment execution behind Till's FinTech Law counsel gate; live witness/Till connections unbuilt (any live mandate issuance Slowpay would guard also stays behind Till's existing FinTech Law counsel gate / Till/x402 packet). Any live-feed or live-execution phase is a separate, counsel-cleared, re-benched build — not a configuration change to v0.1.0", "Condition C-1 (sole condition, verbatim): cross-artifact cross-commitment is the local per-schedule hash chain + export SET anchors only; full coordinated rollback not provided — external anchor required before live/multi-party use. Full coordinated rollback across artifacts is not provided in v0.1; no live or multi-party use is licensed until an external anchor exists and the build is re-benched", "Live witness products, feeds, or Till instances — fixture stand-ins only, consumed by grammar/reference: the recognized witness set is a local fixture config of exactly two source refs (trueprice-fixture, morphguard-fixture; pin Q-S1), not a registry design; Slowpay originates no price/endpoint/ownership observations of its own, and Docket adjudication is Docket's (Slowpay's export is Docket-consumable evidence only)", "Any real payment executed, initiated, or held — a freeze in v0.1 states exactly one thing: a verified witness receipt reported a deviation from the sealed baseline; it does not state the counterparty acted wrongly, that the change is unauthorized, or that the new value is incorrect. Never claimed for v0.1.0 are 'fraud detection', 'stops bad payments', 'payment protection', 'we monitor your vendors', or any implication of live execution, live feeds, or live mandate issuance (SPEC §11.4 strings are named here only as never claimed)", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 with local fixture keys (keys/ gitignored, mode 600, never committed); a live phase requires real Herald signing and a re-bench; a fresh clone generates its own fixture keys to run the full suite", "Hosted or live operation — local stdio only; metering point only per SPEC §9: exactly 1 metering point per mandate first reaching ACTIVE with a sealed baseline ($0.25/mandate shape); freezes, re-attestations, due events, and additional schedules under an already-metered mandate emit no further metering point; no charge, checkout, invoice, or payment-collection path is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-slowpay-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-layaway-mcp", "name": "Eclipse Layaway", "product_url": "https://eclipsebazaar.com/products/eclipse-layaway-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-layaway.md (Verity bench of v0.1.0, 2026-10-27; builder suite re-run clean 33/33, decisive F-L13 re-derived incl. fresh-process recompute two ways, bencher battery 90/90, 14-point delta law, metering exactness, fuzz 60 ops, scope + claim-surface audit confirming the §10 counsel gate genuinely unbuilt and no purchase path exists; sole condition as stated, A-1/A-2 advisory only). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(simulator)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-layaway.md): builder suite 33/33 re-run clean by bencher; decisive fixture F-L13 re-derived from the bencher's own corpus (bencher battery 90/90) — execution at exactly the coincidence tick and no other, both witnesses recomputed fresh-process two ways. PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture goal-balance ledger + fixture witnessed prices, value_class 'test'; execution = a mandate state transition only — nothing was bought, ordered, or paid. Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Cross-artifact cross-commitment (mandate chain + balance segment + price observation bound by hash citations in one execution record) is a fenced condition — external anchor required before live/multi-party use Advisory A-1/A-2 (non-blocking): the config fence scans all environment values fail-closed, and signing is an HMAC fixture stand-in for Herald RS256 (disclosed; live phase would need real Herald signing + re-bench).", "not_tested": [ "Real purchase execution — SPEC §10 counsel gate (named, unbuilt): real purchase execution (plus Till's own gates), real funds custody/direction, real price feed as witness — counsel gate, unbuilt; no merchant stub exists. Any execution that places a real order, instructs a merchant, or triggers a real payment (which must additionally pass Till's own gates), holding/directing real goal funds in any form, consuming a real price feed as a witnessed source, and any consumer-facing claim that funds are saved, held, protected, or guaranteed available are counsel-gated and unbuilt; there is no dormant live path, no merchant integration stub, and no funds verb waiting to be enabled", "Sole condition (verbatim from the bench record): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Cross-artifact cross-commitment (mandate chain + balance segment + price observation bound by hash citations in one execution record) is a fenced condition — external anchor required before live/multi-party use", "Real balances, prices, merchants, products, or purchases — simulator/fixture only: fixture goal-balance ledger + fixture witnessed prices only, value_class \"test\"; the 'execution' is a simulator state transition — NO purchase is executed, no funds move, and nothing is instructed to any merchant", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256, disclosed on the product's face; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never keys supplied by a record; a live phase requires real Herald signing and a re-bench", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed; GitHub contents/keys verified 404); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly 1x layaway_execution point per simulated execution + 1x free-funnel active-period accounting event per mandate; 0 for refusals/non-executions; no charge path built, no payment taken, no live Meter ingest claimed)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-layaway-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-duet-mcp", "name": "Eclipse Duet", "product_url": "https://eclipsebazaar.com/products/eclipse-duet-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-duet.md + wave3/rebench-duet.md (Verity bench + D1 spot re-bench of v0.1.0, 2026-10-27; builder suite re-run clean 31/31 at bench and 32/32 after the D1 fix, decisive F-D9 reproduced independently incl. fresh-process empty-data-dir verify and the same-family control, bencher battery 72 checks with sole failure D1 — closed on re-bench with the verbatim §11.3 sentence byte-exact on the attestation face and the verify-success result; sole condition C1 as stated, O1/O2 advisory only). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(local, attested model-family declarations)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local, attested model-family declarations) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-duet.md) + D1 spot re-bench (wave3/rebench-duet.md, D1 CLOSED): builder suite 31/31 re-run clean by bencher at bench, 32/32 after the D1 fix (the +1 is the D1 regression test); decisive fixture F-D9 independently re-derived (bencher corpus, bencher keys, black-box stdio) — seal via stdio → SEALED with face families [orion, vega], fresh process with empty data dir from export + pinned keys alone → verified: true / SEALED, and the same-family control (signer B's identity record family edited to orion, attestation hash recomputed, record re-sealed under the bencher issuer key, refs re-derived) fails at DUET_VERIFY_FAIL:step2_check4_distinctness, UNVERIFIED_EXPORT, attestation_claim: null — the diversity leg is load-bearing; bencher battery 72 checks, 71 PASS at bench (sole failure = D1, closed on re-bench). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture proposals, fixture agents and fixture identity records only, value_class 'test'; attestations only — Duet executes, authorizes, and approves nothing. Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Duet's diversity/independence proofs establish attested model families/providers and bound signatures — NOT actual running models, NOT non-collusion. Advisory O1/O2 (non-blocking): pairs carrying different family taxonomies seal (face surfaces each ref's own taxonomy; §2.4 includes no taxonomy-equality check — recorded for the live-identity phase), and signing is an HMAC fixture stand-in for Herald RS256 (disclosed).", "not_tested": [ "Actual running models / non-collusion — proofs cover attested declarations + bound signatures only: Duet's diversity/independence proofs establish attested model families/providers and bound signatures — NOT actual running models, NOT non-collusion. Duet never probes, fingerprints, or infers a signer's actual model; it does not establish that either agent actually runs the attested model, that the two agents share no operator, owner, prompt, tooling, training data, or incentive, that a diverse pair cannot collude through channels outside the signing act, or that the attested action is correct, safe, or compliant (SPEC §11.3). Never claimed for v0.1.0 are 'collusion-proof', 'fraud-proof', 'guaranteed independence', 'dual control compliant' (unqualified), or 'verified different models' (SPEC §11.4 strings named here only as never claimed)", "Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. The export's anchor is the self-contained signed chain head; a superseded export still verifies offline after the store has advanced, so freshness / coordinated full rollback is undetectable without an external anchor — no live or multi-party use is licensed until that anchor exists and the build is re-benched", "Q-D3 ruling (bench, adopted, gates scope): a sealed attestation does NOT lapse when a signer's family attestation later lapses — currency (§2.4 check 2) is judged at signing time, so a sealed attestation proves the pair/diversity as at signing, within the proposal's face expiry, not continuing family attestation; later compromise is handled by revocation marking (F-D3), the only post-seal marking path — a sealed attestation's face changes to REVOCATION_MARKED while its sealed record_hash is unchanged, and a forged revocation is refused (REVOCATION_UNVERIFIED) and fails verify at step5_revocation", "Live reliance — SPEC §10 reliance gate (named, unbuilt): any use of a Duet attestation as a reliance/authorization control for regulated payments, fund movement, or other high-value/regulated actions sits behind the existing gates of the system that would rely on it (for payments, Till's existing FinTech Law counsel gate); no execution, authorization, approval, or reliance code exists, no dormant live path exists, and any live-identity or regulated-reliance phase is a separate, counsel-cleared, re-benched build — not a configuration change to v0.1", "Live identity — real Genesis/Continuity records, real agents, and real model families are not tested or claimed: fixture agents and fixture identity records only; Genesis/Continuity-style records are consumed by reference only, Duet issues, alters, and classifies nothing about them and defines no family taxonomy or equivalence mapping; startup fence refuses live keys, non-local endpoints, value_class other than 'test', and any model-probing or action-execution module (CONFIG_FENCE_REFUSED:)", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in disclosure), disclosed on the product's face; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never key material from the record under verification; a live phase requires real Herald signing and a re-bench", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed; GitHub contents/keys verified 404); a fresh clone generates its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly 1 point per distinct signer pair per fixture month window with at least one sealed attestation, event duet_active_pair_month at the $99/mo price shape; 0 for all refusals and for verifies; idempotent second-signature re-presentation meters no second point); no charge, checkout, invoice, subscription, or payment-collection path is built and no live Meter ingest is claimed" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-duet-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-crosspay-mcp", "name": "Eclipse Crosspay", "product_url": "https://eclipsebazaar.com/products/eclipse-crosspay-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-crosspay.md + rebench-crosspay.md (Verity bench + delta re-bench of v0.1.0, 2026-10-27; builder suite re-run clean 39/39 on re-bench, decisive F-X9 re-derived incl. fresh-process verify from export + pinned keys alone, bencher battery 144 probes at bench and 33 probes at re-bench, D1/D2/D3 closed and C2/C3/C4 discharged, sole remaining condition C1 as stated). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(local/simulator, fixture FX records)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local/simulator, fixture FX records) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-crosspay.md) + delta re-bench (argus101-program-20261027/wave3/rebench-crosspay.md, D1/D2/D3 CLOSED, C2/C3/C4 discharged): builder suite 39/39 re-run clean by bencher (34 baseline + 5 fix regressions); decisive fixture F-X9 independently re-derived from the bencher's own corpus (GBP/USD pair the builder never used) — under-cap CLEAR at spread 40 bps vs cap 100 with fx_seal == bencher-recomputed seal, over-cap twin REFUSED / SPREAD_CAP_EXCEEDED at 101 bps, both exports fresh-verify in a fresh process from export + pinned keys alone. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this scope is claimed. Scope is exactly: local stdio, fixture FX records only, pre-flight verdicts only, value_class 'test'; Crosspay never converts, settles, or moves currency and fetches no live rates. Sole remaining condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Novel mechanism (SPEC §2.1, verbatim): rate source, rate, and spread are sealed at execution, and settlement is refused pre-flight when the spread exceeds the mandate's cap — enforcement before money moves, not evidence after.", "not_tested": [ "Live FX — SPEC §10 counsel gate (named, unbuilt): live FX — fetching live rates for real payments, quoting or executing conversion, or any cross-border settlement — is counsel-gated (joined to the existing FinTech Law packet (Till/x402)) and unbuilt; no live FX source/rails exist in v0.1.0 (fixture records only), no live rate is fetched, no currency is converted or settled, and any live phase is a separate, counsel-cleared, re-benched build, not a configuration change", "Sole condition (verbatim): cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use. Cross-artifact cross-commitment (seal ↔ verdict ↔ export) provides full coordinated rollback only as a fenced condition: external anchor required before live/multi-party use. No live or multi-party use is licensed until that anchor exists and the build is re-benched", "D2 lineage exports — CHECK_REPLAY sealed verdicts are offline-verifiable from export + pinned keys alone via lineage: prior_export is carried in verdict_get bundles, and replay verdicts verify from export + pinned keys alone (re-bench D2 CLOSED, condition C3 discharged); a replay bundle is never served unlabelled/unverifiable", "Non-blocking observation (re-bench): with ≥2 priors a second replay's prior_export may point to the earliest prior rather than the immediate predecessor (spec predicate unaffected) — §5.3's replay predicate requires only the existence of a prior distinct-triple same-intent sealed check, which the shipped prior satisfies and the verifier re-derives; soundness is unaffected", "Real FX rates, quotes, mandates, payments, or settlement — local/simulator, fixture FX records only, value_class \"test\": no live FX source/rails (fixture records only); Crosspay never converts, settles, or moves currency, fetches no live rates, and holds no funds; a CLEAR speaks only to the sealed fixture quote against the presented mandate's cap", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in), disclosed on the product's face; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never keys supplied by a record; a live phase requires real Herald signing and a re-bench", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed; GitHub contents/keys verified 404); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly +1 per sealed verdict, CLEAR or REFUSED alike; 0 for no-seal refusals, verifies, verdict-gets, handoff marks, and idempotent re-presentations; no charge path built, no payment taken, no live Meter ingest claimed)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-crosspay-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-phantom-mcp", "name": "Eclipse Phantom", "product_url": "https://eclipsebazaar.com/products/eclipse-phantom-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-phantom.md (Verity bench of v0.1.0, 2026-10-27; initial FAIL(simulator) on sole defect D1 — a mandate with a non-native field set was refused at ingest instead of downgrading) + argus101-program-20261027/wave3/rebench-phantom.md (delta re-bench, probe 73/73: D1 CLOSED on both variants — extra field and missing cap_minor each downgrade to UNMATCHED/RECORD_UNVERIFIABLE with a pack evidencing unverifiability; no-weakening controls hold incl. fully re-signed fabricated MATCHED still failing at step4_match; the §6.5 downgrade-pack caveat — verify_pack naming step3_ledger on such packs — ruled spec-conformant, not a defect and not a condition; builder suite re-run clean 35/35; F-P13 spot check unchanged; metering sequence unchanged). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(simulator)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-phantom.md) + delta re-bench (argus101-program-20261027/wave3/rebench-phantom.md, D1 CLOSED): builder suite 35/35 re-run clean by bencher; decisive fixture F-P13 re-derived from the bencher's own corpus (24 charges, 21 matched, 3 phantom classes, freeze assembled before period close). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture charge stream + fixture mandate ledger, value_class 'test'; no real charge is reconciled and nothing is filed with or requested of any issuer. Sole condition (verbatim): full coordinated rollback = fenced condition — external anchor required before live/multi-party use. Advisories F-1/F-2 (non-blocking, spec-conformant): existence precedes verifiability in the fixed §4.3 order, and no MCP verb exists for MATCHED-receipt verify (spec §5 as written). Signing is an HMAC fixture stand-in for Herald RS256 (disclosed).", "not_tested": [ "Live charge feeds — SPEC §10 counsel gate (named, unbuilt): live charge feeds from payment networks/banks are genuinely unbuilt. Ingesting any real charge stream or mandate ledger, transmitting a dispute pack or freeze request artifact to any issuer, network, bank, or processor, acting as dispute agent or authorised representative for a program, and any claim about dispute rights, chargeback windows, or freeze entitlements under card-network rules or Regulation E/Z are counsel-gated and unbuilt; there is no dormant live path, no issuer/network/bank code, stub, or endpoint in the tree (production imports are stdlib-only, bench-checked), and the startup config fence refuses issuer/bank/network configuration (CONFIG_FENCE_REFUSED:)", "Sole condition (verbatim from the bench record): full coordinated rollback = fenced condition — external anchor required before live/multi-party use. No live or multi-party use until an external anchor exists", "A §6.5 downgrade pack evidences unverifiability (verify_pack names step3_ledger on such packs by design — spec-conformant, per re-bench ruling): a charge whose mandate field set is non-native downgrades to UNMATCHED/RECORD_UNVERIFIABLE with a pack evidencing unverifiability (excerpt carries the offending mandate exactly as presented, pack_hash recomputes, transcript states ledger_verified: false); fresh-process §6.4 verify of that pack's export returns PHANTOM_VERIFY_FAIL:step3_ledger — the correct named failure, not a verified verdict — while ordinary phantom packs over a native, recomputing ledger still verify verified: true", "Advisories F-1/F-2 (non-blocking, spec-conformant, from the bench record): F-1 — existence precedes verifiability in the fixed §4.3 order, so an unverifiable charge with no mandate candidate classifies NO_MANDATE, not RECORD_UNVERIFIABLE (a known reading of the spec's stated order, recorded so the behaviour is a known reading, not an accident); F-2 — no MCP verb exists for MATCHED-receipt verify: §6.4 receipt verification for a MATCHED charge is not reachable from either MCP surface (the reviewer surface exposes only pack_verify, per spec §5 as written); matched classifications were recomputed independently by the bencher instead", "Production signing — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in), disclosed on the product's face; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never keys supplied by a record; a live phase requires real Herald signing and a re-bench", "Production key custody — fixture keys live in keys/fixture-keys.json (chmod 600, gitignored, never committed; GitHub contents/keys verified 404); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly 1x program_period_active per program per fixture period opened + 1x pack_assembled per dispute pack; 0 for ingestion, matching, receipts, verifications, request artifacts, reads, refusals, idempotent re-ingests, and the CHARGE_CONFLICT path; no charge path built, no payment taken, no live Meter ingest claimed)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-phantom-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-capline-mcp", "name": "Eclipse Capline", "product_url": "https://eclipsebazaar.com/products/eclipse-capline-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave3/bench-capline.md (Verity bench of v0.1.0, 2026-10-27; builder suite 27/27 re-run by bencher, bencher harness 125 checks / 121 pass with the 4 non-passes resolving to D2/D3 + two probe artifacts; F-C14 decisive PASS; forgery battery all failing at named verify steps) + argus101-program-20261027/wave3/rebench-capline.md (delta re-bench, harness 45/45 PASS: D1 CLOSED — signed store head binding record_count/per-class counts/SET anchors, deletion+insertion probes 12/12 fail with STORE_INTEGRITY_FAIL:store_head_record_count; D2 CLOSED — both §11.4 disclosures byte-present in the manifest and identical to the issued-certificate face strings; D3 CLOSED — both disclosures verbatim on the UNVERIFIED_PROOF_EXPORT face on both paths; D4 accepted as documented deviation; builder suite re-run 31/31; F-C14 + negative-wrap spot checks PASS; metering exactly 1 per issuance). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL(local)", "record_status": "current", "certified": false, "scope": "PASS-CONDITIONAL(local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave3/bench-capline.md) + delta re-bench (argus101-program-20261027/wave3/rebench-capline.md, 45/45 checks PASS: D1 CLOSED, D2 CLOSED, D3 CLOSED, D4 accepted as documented deviation (not a defect), C4 DISCHARGED): builder suite 31/31 re-run clean by bencher at re-bench (27 original + 4 D1/D2/D3 regressions); decisive fixture F-C14 independently re-derived at bench and re-bench (see capabilities). PASS-CONDITIONAL is not CERTIFIED — certified is false. Scope is exactly: local stdio, fixture policies/spends, fixture unaudited group parameters, no live merchant, no real policy proven, value_class 'test'. Conditions (verbatim-listable): C1 §10 two-key gate — counsel clearance via FinTech Law packet AND independent crypto audit, both required, no dormant live path: live phases (real enterprise policy/cap, merchant-facing reliance, production parameters/audited cryptosystem, privacy/compliance marketing claims) require BOTH (i) counsel clearance through the existing FinTech Law packet AND (ii) an independent cryptographic audit of the §2.2 construction and this implementation; neither substitutes for the other. C2 cross-artifact cross-commitment fenced — external anchor required before live/multi-party use: full coordinated cross-artifact rollback requires an external anchor before live/multi-party use; v0.1 state is single-process local, anchored only by its signed store head + hash chains (re-bench §1 demonstrated a whole-store rollback to an earlier self-consistent snapshot is accepted locally — exactly this fenced condition). C3 deterministic fixture-seed prover randomness must be replaced/audited before any live phase: deterministic fixture-seed-derived prover randomness must be replaced by a CSPRNG (or an audited deterministic derivation under production key custody) before any live phase — seed compromise recomputes every nonce and blinding factor, including the cap. C5 \"Capline\" trademark screen still pending: trademark screen on the name \"Capline\" is still pending; the name remains a placeholder. Both §11.4 disclosures, verbatim: verdict-oracle disclosure: each verdict reveals one bit of ordering information about the sealed cap (whether the stated spend is above or below it); repeated proofs against one commitment narrow the cap by binary search (spec 2.3(c)). stated-spend disclosure: the stated spend is public to the verifier (it is the merchant's own price) (spec 11.4). Novel mechanism (SPEC §2.1, verbatim): a range proof over a sealed internal policy — the agent proves 'this spend is within my cap' to a merchant without revealing the cap or the policy. Signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in, disclosed on every artifact face as signature_scheme); a live phase would need real Herald signing and a re-bench.", "not_tested": [ "C1 — §10 two-key gate (verbatim): live phases (real enterprise policy/cap, merchant-facing reliance, production parameters/audited cryptosystem, privacy/compliance marketing claims) require BOTH (i) counsel clearance through the existing FinTech Law packet AND (ii) an independent cryptographic audit of the §2.2 construction and this implementation. Neither substitutes for the other. No dormant live path exists in v0.1 (fence-verified): no real policy, real cap, real merchant, network call, or live key exists in the tree, and the startup fence refuses such configuration by name (CONFIG_FENCE_REFUSED:)", "C2 — cross-artifact cross-commitment fenced (verbatim): external anchor required before live/multi-party use. Full coordinated cross-artifact rollback requires an external anchor before live/multi-party use; v0.1 state is single-process local, anchored only by its signed store head + hash chains. Re-bench demonstrated the one undetected mutation class: replacing the whole store with an earlier self-consistent snapshot is accepted locally — a rolled-back head is indistinguishable from a current one without an external reference", "C3 — deterministic fixture-seed prover randomness (verbatim): deterministic fixture-seed-derived prover randomness must be replaced by a CSPRNG (or an audited deterministic derivation under production key custody) before any live phase. At fixture scope the bencher rated this LOW (168/168 nonce commitments distinct across 6 proofs, zero reusable pairs / zero extractions); whoever obtains the prover seed can recompute all nonces and blindings, including cap recovery, and determinism makes repeat spends linkable by transcript_hash equality", "C5 — \"Capline\" trademark screen still pending (verbatim): trademark screen on the name \"Capline\" is still pending; the name remains a placeholder", "D4 deviation (documented, bench-accepted, not a defect): F-C9 step attribution — failures name step 1/step 3 where the checks actually fire (seal-only commitment swap fails at step 1 proof_seal_consistency; both-fields swap fails at step 3 challenge_mismatch), while SPEC §8 F-C9 names step 5; the commitment is an input to the step-1 consistency check and the Fiat–Shamir transcript recomputed at step 3, so a swapped commitment necessarily fails those earlier, normatively-ordered checks first. Outcome is identical (named refusal, no certificate, no state). Spec-owner amendment recommended (re-bench ruling): amend F-C9 to read step 1 (proof_seal_consistency, seal-only swap) / step 3 (challenge_mismatch, both-fields swap); no code change required or wanted", "D5 ruling (bench-accepted): over-cap proof_build → PROOF_MALFORMED — §5.4 contains no build-side over-cap code; the amount is well-formed (so AMOUNT_INVALID would be wrong), the refusal is named, its detail is accurate, and it changes no state and stores no proof. Least-wrong reading, ruled acceptable in the bench; a spec amendment to §5.4 (annotate the build-side use) is recommended rather than a code change", "HMAC Herald stand-in: production signing is not tested — v0.1.0 signing is an HMAC fixture stand-in for Herald RS256 (HMAC Herald stand-in), disclosed on every artifact face as signature_scheme; verification uses keys pinned out-of-band in a local chmod-600 gitignored key file, never keys supplied by a record; a live phase requires real Herald signing and a re-bench", "proof_id/merchant_class/built_at not transcript-bound (bench observation O1, §10 audit note): proof_id, merchant_class, and built_at are not transcript-bound — proof_id is a label; transcript_hash is the cryptographic binding and is enforced at §6.4 step 6 (certificate_binding). A relabelled valid proof can therefore take a foreign proof_id onto a fresh store; all value-bearing fields are bound. Noted for the §10 audit", "Verdict-oracle + stated-spend honesty (§11.4, verbatim): verdict-oracle disclosure: each verdict reveals one bit of ordering information about the sealed cap (whether the stated spend is above or below it); repeated proofs against one commitment narrow the cap by binary search (spec 2.3(c)). stated-spend disclosure: the stated spend is public to the verifier (it is the merchant's own price) (spec 11.4). A certificate attests one proposition only — this stated spend is ≤ the cap committed in this sealed policy, as of proof time; it attests nothing about policy category rules, merchant legitimacy, funds availability, mandate validity, or whether the spend should occur. Never claimed for v0.1.0 are unqualified 'zero-knowledge', 'proves policy compliance', 'production-grade cryptography', 'private by design', or any 'audited' claim (SPEC §11.3 strings named here only as never claimed; only 'unaudited' / 'not an audited cryptosystem' appear)", "Production key + prover-private custody — fixture keys live in keys/fixture-keys.json and fixture caps/blinding factors live only in the gitignored fixtures/prover-private.json (both chmod 600, never committed; GitHub contents/keys verified 404); a fresh clone must create its own fixture key file to run the full suite", "Hosted or live operation / charge path — local stdio only; metering points only per SPEC §9 (exactly 1 point per certificate issuance, unit certificate; 0 for refusals, verifications, exports, and idempotent re-presentations; no charge path built, no payment taken, no live Meter ingest claimed)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-capline-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-ward-mcp", "name": "Eclipse Ward", "product_url": "https://eclipsebazaar.com/products/eclipse-ward-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-ward.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator) with guardian-change carve-out C1, builder suite 24/24) + argus101-program-20261027/wave4/rebench-ward.md (Verity delta re-bench of v0.1.1: D1–D10 all CLOSED, carve-out LIFTED, 57/57 checks, builder suite 37/37 re-run by the bencher). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "Eclipse Ward — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ward.md) PASS-CONDITIONAL with the guardian-change subsystem carved out under condition C1, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ward.md): defects D1–D10 all CLOSED, guardian-change carve-out LIFTED, bencher delta harness 57/57, builder suite 37/37 re-run by the bencher at commit 35b00eb. PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture action stream + fixture guardian only, value_class \"test\"; no real agent action is proposed, vetoed, executed, or stopped, and no production runtime is connected. Ward issues verdicts and receipts; it does not enforce them — enforcement is the consuming runtime's mandate layer. Rollback fence: the v0.1 store is a pure local file store, so any verdict is capped at PASS-CONDITIONAL — an external anchor is required before any live or multi-party reliance. Counsel gate (SPEC §10) named and unbuilt: live runtime reliance and any legally recognised ward/guardian use require counsel clearance first; no dormant live path exists.", "not_tested": [ "Live runtime reliance — connecting Ward verdicts to a real agent runtime such that real actions are barred or cleared in reliance on them is SPEC §10 counsel-gated and UNBUILT; there is no dormant live path in v0.1.1 and the startup fence refuses non-local endpoints, live keys, runtime credentials, and production agent sources by name", "Legally recognised ward/guardian use — requires counsel clearance first (guardian authority and liability, lapse-based auto-proceed defensibility per class, the legal meaning of \"guardian\"/\"ward\" in naming and copy); pre-counsel language is \"guardian veto verdicts + receipts (local/simulator)\" only — never \"guardian protection\", \"human oversight guaranteed\", or \"actions are stopped\"", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL(local/simulator); an external anchor is required before any live or multi-party reliance", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-ward-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-epitaph-mcp", "name": "Eclipse Epitaph", "product_url": "https://eclipsebazaar.com/products/eclipse-epitaph-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-epitaph.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator), conditions C1–C4 from defects D-EPI-1..4, builder suite 30/30, decisive F-E14 fresh-process verify PASS) + argus101-program-20261027/wave4/rebench-epitaph.md (Verity delta re-bench of v0.1.1: D-EPI-1..4 all CLOSED, 24 bencher scenario logs, builder suite 38/38 re-run by the bencher). Prior observations O-1..O-5 were out of delta scope and stand as recorded in the first bench. No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "Eclipse Epitaph — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-epitaph.md) PASS-CONDITIONAL with conditions C1–C4, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-epitaph.md): defects D-EPI-1..4 all CLOSED, conditions C1–C4 satisfied by the closures, builder suite 38/38 re-run by the bencher at commit 0c0b027, no new defect found. PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture identities and fixture registries only; no real identity, mandate, alias, or delegation is expired, revoked, or contacted, and no external registry is written to. A cascade receipt proves these fixture instruments expired under this signed record — never that a real agent \"is dead\", that a real compromise occurred, or that any real-world instrument is unenforceable. Rollback fence: cross-artifact cross-commitment (full coordinated rollback) is a fenced condition — external anchor required before live/multi-party use; the pure local file store caps any verdict at PASS-CONDITIONAL. Counsel gate (SPEC §10) named and unbuilt for all live phases.", "not_tested": [ "Legal effect against third parties — any claim that a cascade has legal effect (estoppel, notice, liability cut-off) is SPEC §10 counsel-gated and UNBUILT; no legal-effect claim is made at this scope", "Compromise declarations against an owner's objection, legal consequences of a false-death adjudication, and death records for identities bound to regulated/financial mandates — SPEC §10 counsel-gated, UNBUILT", "Real-registry integration — no external registry is written to in v0.1.1; there is no dormant live path (no network call, no live key) and the startup fence refuses such configuration by name", "External anchoring / multi-party reliance — full coordinated rollback is a fenced condition; the pure local file store caps any verdict at PASS-CONDITIONAL (local/simulator) until an external anchor exists", "Production key custody — signing is an HMAC-SHA256 fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-epitaph-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-ancestor-mcp", "name": "Eclipse Ancestor", "product_url": "https://eclipsebazaar.com/products/eclipse-ancestor-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-ancestor.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local)) + argus101-program-20261027/wave4/rebench-ancestor.md (Verity delta re-bench of v0.1.1: D1/D2 CLOSED, new D3 (Low), 114 delta probes) + argus101-program-20261027/wave4/spot-ancestor-012.md (Verity spot re-bench of v0.1.2: D3 CLOSED, 22/22 hard probes PASS, builder suite 39/39 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local)", "record_status": "current", "certified": false, "scope": "Eclipse Ancestor — PASS-CONDITIONAL (local) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ancestor.md), + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ancestor.md: D1 + D2 CLOSED, new defect D3), + spot re-bench of v0.1.2 (argus101-program-20261027/wave4/spot-ancestor-012.md: D3 CLOSED, 22/22 binding probes, builder suite 39/39 reproduced). PASS-CONDITIONAL (local) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture chains + fixture policies only, value_class \"test\"; no real model, registry, or counterparty is contacted and no live handshake is mediated. Declaration label: ancestry is creator-declared and sealed at registration; sealing proves the declaration has not changed since registration — it does not independently prove the declared lineage. Gap-verdict condition: a verified gap verdict binds to the chain + seal + sealed head + gap kind only; it does NOT identify which link is missing or unverifiable, and must not be presented as evidence about the exact presented link set or as proof two presentations are the same copy. Rollback fence: the pure local file store caps any verdict at PASS-CONDITIONAL — an external anchor is required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt.", "not_tested": [ "Representations to regulated buyers as compliance evidence, licence-contamination opinions derived from teacher lineage, and ancestry declarations incorporated into contracts/warranties — SPEC §10 counsel-gated and UNBUILT", "Live registry/handshake integration with third-party platforms — no network call, model fetch, weight access, or external registry call exists in v0.1.2; the startup fence refuses such configuration by name", "Lineage truth — sealing proves the declaration has not changed since registration; it does not independently prove the declared lineage (declaration label, verbatim, on every face)", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local); an external anchor is required before live or multi-party reliance", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-ancestor-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-trust-mcp", "name": "Eclipse Trust MCP", "product_url": "https://eclipsebazaar.com/products/eclipse-trust-mcp/", "listing_class": "tool", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "live", "platforms": [ "MCP over stdio", "Hosted HTTPS (streamable HTTP MCP + GET twin)" ], "live_state_note": "Hosted twin live at https://cetech.ai/trust/mcp (+ GET twin under https://cetech.ai/trust/); official MCP Registry: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/trust v0.1.0 (remote entry)." }, "verdict": "PASS(local)", "record_status": "current", "certified": false, "scope": "PASS(local) — Verity independent bench of v0.1.0 (2026-10-27, trust-discovery-20261027/BENCH-REPORT.md): first bench PASS-CONDITIONAL(local) with all fail-gates PASS (real Anchor batch b18e97a2 end-to-end, forged-pointer fixture, verdict fidelity, malformed battery); condition F1 (validation verify_recipe canonicalization wording) + F2/F3 closed by delta bench — final verdict PASS. Scope: stdio + HTTP twin over the bundled join index; index recomputed from sources (Bazaar verdict feed, Herald ledger, Anchor batches/proofs, ERC-8004 publisher ledger) by a fail-closed builder. Hosted PHP twin: static parity PASS at bench; execution verified by live smoke at deploy 2026-10-27.", "not_tested": [ "Ed25519 batch-manifest signature verification — NOT_RUN at bench (no Ed25519 verifier in the bench environment); the bundle's hash / Merkle / calldata / block-hash chain fully recomputes, and the signature is a named verify_recipe step (Anchor anchor_verify)", "Mainnet ERC-8004 validation records — none exist yet; lookups answer typed NOT_PUBLISHED_MAINNET until the publisher's separately-benched mainnet verdict-publishing activation. Testnet records resolve labelled TESTNET", "Hosted PHP twin under the local bench — no PHP runtime on the bench VM (execution NOT_RUN); static parity PASS at bench + delta, execution verified by live-endpoint smoke at deploy 2026-10-27" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.0", "probe_status": "OK" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-trust-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-greenwash-mcp", "name": "Eclipse Greenwash", "product_url": "https://eclipsebazaar.com/products/eclipse-greenwash-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-greenwash.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), conditions C1–C4, decisive F-G14 fresh-subprocess verification) + argus101-program-20261027/wave4/rebench-greenwash.md (Verity delta re-bench of v0.1.1: D-GW-1..4 all CLOSED, C1–C4 satisfied, builder suite 34/34 re-run by the bencher). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/fixture)", "record_status": "current", "certified": false, "scope": "Eclipse Greenwash — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-greenwash.md) PASS-CONDITIONAL with conditions C1–C4, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-greenwash.md): defects D-GW-1..4 all CLOSED, conditions C1–C4 satisfied (C2 via the labelling branch), builder suite 34/34 re-run by the bencher at commit ba07801, no new defect found. PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture emission stream with structured claim objects only, value_class \"test\"; no real agent, channel, publication, or marketing surface is touched, and no free-text claim detection in arbitrary prose is claimed or implied. Pointer limit: a binding proves a source-data pointer existed and resolved at emission time — NOT that the claim is true, not that the source data supports the claim, and not that the source data is accurate, current, or complete. Rollback fence: pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture) — external anchor required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt for any real-world claim publication. Trademark screen on the working name pending.", "not_tested": [ "Real published content — binding, flagging, or certifying claims in real marketing, product pages, regulatory filings, or ESG reports is SPEC §10 counsel-gated and UNBUILT (FTC Green Guides, SEC climate/ESG rules, EU green-claims regime; flag defamation/disparagement exposure); no real publication is touched in v0.1.1", "Claim truth — a binding proves a pointer existed and resolved at emission time, NOT that the claim is true, supported, accurate, current, or complete; source-data stores are consumed as pointer targets, never assessed", "Free-text claim detection in arbitrary prose — v0.1.1 handles structured claim objects in a fixture emission stream only; no prose detection is claimed or implied", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture); an external anchor is required before live or multi-party use", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-greenwash-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-agesure-mcp", "name": "Eclipse Agesure", "product_url": "https://eclipsebazaar.com/products/eclipse-agesure-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-agesure.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), 150 bencher checks, defects D1–D8, conditions C1–C7) + argus101-program-20261027/wave4/rebench-agesure.md (Verity delta re-bench of v0.1.1: D1–D8 all CLOSED, new D9 + C8) + argus101-program-20261027/wave4/spot-agesure-012.md (Verity spot re-bench of v0.1.2: D9 CLOSED, C8 DISCHARGED, builder suite 35/35 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/fixture)", "record_status": "current", "certified": false, "scope": "Eclipse Agesure — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-agesure.md) PASS-CONDITIONAL with conditions C1–C7, + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-agesure.md: D1–D8 all CLOSED, new defect D9 + condition C8), + spot re-bench of v0.1.2 (argus101-program-20261027/wave4/spot-agesure-012.md: D9 CLOSED, C8 DISCHARGED, builder suite 35/35 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture attestations only, value_class \"test\"; no real person is checked and no real age-verification capability is claimed. A proof states that an issuer attested a band for a pseudonymous subject ref, sealed to one mandate; it is not an identity claim and does not prove the issuer's underlying band determination was correct. Standing conditions: C1 rollback fence (pure local file store caps the verdict at PASS-CONDITIONAL — external anchor required before live/multi-party use), C2 §10 counsel gate (named, unbuilt — any use involving real people), C5 issuer key separation, C7 name screen still bind.", "not_tested": [ "Any use involving real people — issuing proofs a real service relies on to gate access, processing real subjects' attestations, or any handling of data relating to minors (including the below-band verdict path) is SPEC §10 counsel-gated and UNBUILT; there is no dormant live path in v0.1.2", "Age verification itself — Agesure never determines age; the band is the issuer's attestation, consumed as an input, and a proof does not prove the issuer's underlying band determination was correct, who the subject is, or that the presenter is the subject", "Issuer independence at this scope — the issuer counter-signature is applied by the service process from a co-located fixture key file (condition C5); it is not evidence of an independent issuer act in v0.1.2", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture) (condition C1); an external anchor is required before live or multi-party reliance", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.2", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-agesure-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-fairlend-mcp", "name": "Eclipse Fairlend", "product_url": "https://eclipsebazaar.com/products/eclipse-fairlend-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-fairlend.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), defects D-1..D-10) + argus101-program-20261027/wave4/rebench-fairlend.md (Verity delta re-bench of v0.1.1 fix commit 01cceda: D-1..D-6, D-8, D-9, D-10 CLOSED, D-7 partially closed with residual D-11 named, builder suite 36/36 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/fixture)", "record_status": "current", "certified": false, "scope": "Eclipse Fairlend — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-fairlend.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-fairlend.md: D-1..D-6, D-8, D-9, D-10 CLOSED; D-7 closed for its probed class with residual Low defect D-11 NAMED; builder suite 36/36 reproduced). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture decisions only, synthetic cohorts; no real applicant, no real credit data, no real model, and no lender system is touched, and Fairlend makes no credit decision and influences none. A Fairlend seal proves what was recorded at decision time — the presented feature set, model version, and reason codes, counter-signed then; it does not prove the decision was fair, lawful, unbiased, or correct. Standing condition D-11 (NAMED): the SPEC §7.3 identifier fence is still evadable by token-split spellings (tax_id, ein, gov_id, surname, home_street etc. seal today when they should refuse); D-11 must close before any non-fixture scope. Rollback fence and the SPEC §10 fair-lending counsel gate (named, unbuilt) also bind.", "not_tested": [ "Any use beyond fixture decisions — real applicants, a real model, a real lender's decision stream, real adverse-action reason codes, audit figures relied on by any party, or any applicant-facing artifact is SPEC §10 fair-lending-counsel-gated and UNBUILT; v0.1.1 contains no dormant live path", "Credit-decision correctness or fairness — Fairlend never decides: it has no scoring, approval, denial, pricing, override, or recommendation function, and a seal does not prove the decision was fair, lawful, unbiased, or correct", "Token-split identifier spellings (D-11, NAMED standing condition): tax_id, tax_id_number, taxIdNumber, taxpayer_id, ein, ein_number, gov_id, govt_id, govtId, social_sec_no, surname, home_street seal today when they should refuse — a known residual Low in the SPEC §7.3 fence that must close before any non-fixture scope", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/fixture); an external anchor is required before live or multi-party reliance", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-fairlend-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-awardline-mcp", "name": "Eclipse Awardline", "product_url": "https://eclipsebazaar.com/products/eclipse-awardline-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-awardline.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator), defects D1–D5, conditions C1–C5) + argus101-program-20261027/wave4/rebench-awardline.md (Verity delta re-bench of v0.1.1 fix commit 80f49b7: D1–D5 all CLOSED, C4 SATISFIED, builder suite 26/26 reproduced, no new defect). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "Eclipse Awardline — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-awardline.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-awardline.md: D1–D5 all CLOSED, condition C4 SATISFIED, builder suite 26/26 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture award terms + fixture spend records only, value_class \"test\"; no real award, real grantee, real funds, real accounting system, or government system is touched. Load-bearing label: an Awardline report is a recomputation from sealed receipts, not an audit, not an allowability determination, and not agency acceptance. Standing conditions: C1 §10 counsel/govcon gate (unbuilt, binds any real-award reliance), C2 external anchor (caps the verdict at PASS-CONDITIONAL), C3 real Herald RS256 (required with re-bench before any live phase), C5 name screen still bind.", "not_tested": [ "Any reliance on a real award — real award terms, real grantees, real funds, real drawdowns, agency reporting, or any government system is SPEC §10 counsel/govcon-gated (condition C1) and UNBUILT; v0.1.1 contains no dormant live path", "Audit, allowability, or agency acceptance — an Awardline report is a recomputation from sealed receipts, not an audit, not an allowability determination, and not agency acceptance; Awardline does not approve spending or decide allowability under an award", "Term-registration correctness — Awardline seals spend against term versions as registered by the grantee; a mis-registered term produces faithfully sealed evidence against the wrong terms, and detecting that is the grantee's review, not a recomputation result", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/simulator) (condition C2); an external anchor is required before live or multi-party reliance", "Production signing — v0.1.1 signing is an HMAC fixture stand-in for Herald RS256 (condition C3: real Herald RS256 required with re-bench before any live phase; fixture keys in keys/, gitignored, mode 600)" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-awardline-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-insurepack-mcp", "name": "Eclipse Insurepack", "product_url": "https://eclipsebazaar.com/products/eclipse-insurepack-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-insurepack.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator), DEFECT-1..3) + argus101-program-20261027/wave4/rebench-insurepack.md (Verity delta re-bench of v0.1.1 fix commit 440c3cc: DEFECT-1..3 all CLOSED, Condition 1 amended to Condition 1′, builder suite 28/28 reproduced, no new defect). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "Eclipse Insurepack — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-insurepack.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-insurepack.md: DEFECT-1..3 all CLOSED, Condition 1 amended to Condition 1′ by the bench, builder suite 28/28 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, evidence assembly over fixture verdict/incident/control records only, value_class \"test\"; no live API is built, no underwriter is served, no insurer system is touched, and no real insured, real incident, or real policy enters a pack. Load-bearing disclosure (SPEC §11.1): the evidence pack is insured-side disclosure tooling; underwriting reliance is the insurer's process, not Insurepack's claim. Amended Condition 1′ binds verbatim: a single-pack VERIFY_PASS attests the pack, its own transition, and the internal integrity of the presented stream; it must NOT be relied on as proof of completeness of transitions earlier than the pack's immediate predecessor (a fully re-signed, re-linked rewritten stream is indistinguishable there); full-history reliance requires per-pack chain verification (which the export transcript now performs) or an external anchor. Rollback fence and the SPEC §10 counsel gate (named, unbuilt) also bind.", "not_tested": [ "Underwriting, pricing, binding, claims, or any insurer-side reliance — Insurepack is evidence assembly only (evidence assembly only; no underwriting): it does not underwrite, is not an insurer, broker, MGA, or underwriting tool, does not price or bind coverage, does not adjust or pay claims, and does not act for any carrier; underwriting reliance is the insurer's process, not Insurepack's claim (SPEC §11.1)", "Any live phase — serving real insureds, real incident records, real policies, a live underwriter-facing API, or any insurer/carrier/regulator integration is SPEC §10 counsel-gated and UNBUILT; there is no dormant live path in v0.1.1", "Full-history completeness from a single pack — per amended Condition 1′, a single-pack VERIFY_PASS must NOT be relied on as proof of completeness of transitions earlier than the pack's immediate predecessor; full-history reliance requires per-pack chain verification (which the export transcript performs) or an external anchor", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/simulator); an external anchor is required before live or multi-party reliance", "Production key custody — signing is an HMAC fixture stand-in for Herald RS256 (fixture keys in keys/, gitignored, mode 600); a live phase would need real Herald signing and a re-bench" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-insurepack-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-ballotbox-mcp", "name": "Eclipse Ballotbox", "product_url": "https://eclipsebazaar.com/products/eclipse-ballotbox-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-ballotbox.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/simulator), defects D1–D6, conditions C1–C6) + argus101-program-20261027/wave4/rebench-ballotbox.md (Verity delta re-bench of v0.1.1 fix commit 3475d7f: D1–D6 all CLOSED, C2 + C3 SATISFIED, builder suite 34/34 reproduced). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/simulator)", "record_status": "current", "certified": false, "scope": "Eclipse Ballotbox — PASS-CONDITIONAL (local/simulator) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-ballotbox.md) + delta re-bench of v0.1.1 (argus101-program-20261027/wave4/rebench-ballotbox.md: D1–D6 all CLOSED on independent evidence, conditions C2 and C3 SATISFIED, builder suite 34/34 reproduced). PASS-CONDITIONAL (local/simulator) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture electorate + fixture governance mandates only, value_class \"test\"; no real person, company, union, public body, or live agent fleet votes in v0.1.1, no result binds anyone, and no real decision is taken here. The legitimacy limit binds verbatim: recompute proves tally-vs-sealed-ballots — that the published totals are exactly the function of the sealed ballots and their vote-time eligibility proofs; it does not prove electorate legitimacy (who chose the electorate, whether the mandate issuer was itself authorised, whether voters were coerced, or whether the question was fair), and Ballotbox claims none of them. Standing conditions: C1 (HMAC cap — no public/RS256/JWS claim until real Herald signing), C4 (§10 counsel gate, named and unbuilt — any real binding election), C5 (metering-only pricing), C6 (rollback fence) still bind.", "not_tested": [ "Any real binding election — corporate (shareholder / board / member votes), union (certification, contract ratification, officer elections), or public (any government-administered or government-recognised vote) use, and any result relied on to bind, seat, pay, or exclude any real person or organisation, is SPEC §10 counsel-gated (condition C4) and UNBUILT; ballot-secrecy or coercion-resistance representations for real elections are also gated", "Electorate legitimacy — recompute proves tally-vs-sealed-ballots only; who chose the electorate, whether the mandate issuer was itself authorised, whether voters were coerced, or whether the question was fair are outside what this evidence shows, and Ballotbox claims none of them", "Public/third-party recompute under production signatures — v0.1.1 signing is an HMAC fixture stand-in (condition C1: no public/RS256/JWS claim until real Herald signing + re-bench; fixture keys in keys/, gitignored, mode 600)", "External anchoring / multi-party reliance — the pure local file store caps any verdict at PASS-CONDITIONAL (local/simulator) (condition C6); an external anchor is required before live or multi-party reliance", "Live agent-fleet governance — fixture electorate + fixture governance mandates only; no live fleet votes in v0.1.1 and no result binds anyone" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.1", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-ballotbox-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." }, { "product": "eclipse-exportcheck-mcp", "name": "Eclipse Exportcheck", "product_url": "https://eclipsebazaar.com/products/eclipse-exportcheck-mcp/", "listing_class": "mcp", "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "availability": { "catalog_status": "in-development", "platforms": [ "MCP over stdio" ], "live_state_note": "Bench evidence: argus101-program-20261027/wave4/bench-exportcheck.md (Verity bench of v0.1.0, PASS-CONDITIONAL (local/fixture), defects D1/D2, conditions C1-C3) + fix records wave4/fix-exportcheck-011..021 + spot re-benches wave4/spot-exportcheck-012..022 closing at spot-exportcheck-022.md (Verity spot re-bench round 6 of v0.1.7 @5b0ab96: D3 CLOSED, survivors-in-claim 0, determinism 55/55, C4 discharged, final product verdict PASS-CONDITIONAL (local/fixture) (spot-022 verdict: PASS, scoped to the D3/C4 condition only; the C3 rollback fence is undischarged and caps the product verdict at PASS-CONDITIONAL (local/fixture) until an external anchor exists)). No test-bench scorecard was issued for this verdict and none is claimed (scorecard_ref/card_url null)." }, "verdict": "PASS-CONDITIONAL (local/fixture)", "record_status": "current", "certified": false, "scope": "Eclipse Exportcheck — PASS-CONDITIONAL (local/fixture) — Verity bench of v0.1.0 (2026-10-27, argus101-program-20261027/wave4/bench-exportcheck.md: PASS-CONDITIONAL (local/fixture), defects D1/D2, conditions C1-C3) + collision-screen fix rounds and spot re-benches rounds 1-6 closing at wave4/spot-exportcheck-022.md (v0.1.7 @5b0ab96: D3 CLOSED, survivors-in-claim 0 forms / 0 glyphs over an exhaustive 2,749-glyph / 9,836-form sweep, determinism 55/55 processes one digest, invariance byte-identical vs v0.1.2, C4 DISCHARGED) — final product verdict PASS-CONDITIONAL (local/fixture) (spot-022 verdict: PASS, scoped to the D3/C4 condition only; the C3 rollback fence is undischarged and caps the product verdict at PASS-CONDITIONAL (local/fixture) until an external anchor exists). PASS-CONDITIONAL (local/fixture) is not CERTIFIED — certified is false, and nothing beyond that verdict at its exact scope is claimed. Scope is exactly: local stdio, fixture parties against invented fixture snapshots only, value_class \"test\"; no real list is loaded, fetched, or reproduced, no real party is screened, and no verdict is relied on for anything. Collision screening (local/fixture scope): fixture sets loaded into Eclipse Exportcheck are collision-screened against symbol-, format- and homoglyph-decorated forms of listed names under SPEC Q-E3 as amended at v0.1.7 — assignment, identity and transmitted readings as there defined (bench: spot-exportcheck-022, survivors-in-claim 0). Standing disclosure: fixture sets are invented test data; a fixture CLEAR states only that this invented party record did not match this invented snapshot under this sealed rule-set version, as recomputed by spec 6.3 — it authorises no shipment, transaction, or filing. No live claim is made; no certification is claimed beyond the stated local/fixture bench scope. Standing conditions: C2 (from bench deviation 2): party_screen never links (prior_verdict_id: null) — a repeat party_screen under a newer snapshot produces an unlinked but immutable, vintage-sealed verdict; chain claims rest on verdict_rescreen + pack chain receipts only, and no listing or doc may imply party_screen chains. C3 (rollback fence, builder-stated, bencher-confirmed): verdict caps at PASS-CONDITIONAL(local/fixture) until an external anchor exists; pure local file store + signed head/SET anchors only. No test-bench scorecard was issued for this verdict and none is claimed (card_url null).", "not_tested": [ "Any real list, real party, reliance, or redistribution — loading any real sanctions/export list (licensed or public), screening any real party, relying on a verdict for any transaction, shipment, onboarding, or filing, or redistributing list-derived data is SPEC §10 counsel-gated (export-control counsel + live list-licensing clearance) and UNBUILT; no dormant live path exists (no fetcher/connector/ingest code, grep-verified at bench)", "Live or production screening of any kind — v0.1.7 screens fixture parties against invented fixture snapshots only (value_class \"test\" on every artifact); no real list is loaded, fetched, or reproduced and no verdict is relied on for anything", "Production signatures — v0.1.7 signing is an HMAC fixture stand-in for Herald RS256 (operator + witness counter-signatures, fixture keys in keys/, gitignored, mode 600), disclosed on every artifact face as signature_scheme; no RS256/JWS production claim is made", "External anchoring / live use — the pure local file store + signed head/SET anchors are the only anchors in v0.1.7 (standing condition C3, rollback fence); an external anchor is required before any live use", "Trademark clearance of the name \"Exportcheck\" — the house trademark screen on the name is still pending per spec; the name is a working name" ], "bench_date": null, "bench_version": null, "bench_score": null, "card_url": null, "scorecard_digest": null, "receipt_hash": null, "anchor": { "state": "NOT_ANCHORED", "reason": "No receipt hash is linked to this record in the published records; verdict anchoring ships with Phase-1 D2 of the Eclipse Anchor program." }, "ops": { "monitored": true, "trust_state": "UNVERIFIED", "drift_status": "UNKNOWN", "last_verified": null, "verdict_age_days": null, "covered_version": null, "latest_seen_version": "0.1.7", "probe_status": "NOT_PROBEABLE" }, "verify_url": null, "verify_page": "https://eclipsebazaar.com/verify/eclipse-exportcheck-mcp.html", "verify_recipe": [ "Cross-check the verdict and scope against this product's record in the append-only verdict feed (/verdicts.json) — corrections arrive only as superseding records.", "On-chain: not yet available for this verdict — no receipt is linked to it in the published records (per-verdict anchoring arrives with Phase-1 D2). The scorecard and the verdict feed are the complete published record until then." ], "integrity_result": "No on-chain commitment exists for this verdict yet. The scorecard is the published record, and its digest below lets any copy be checked byte-for-byte against the file served here — a same-host check until per-verdict anchoring ships with Phase-1 D2." } ], "issuer": "Verity (Cyan Eclipse Technologies)", "issuer_relationship": "first_party", "issuer_disclosure": "Issued by Verity (Cyan Eclipse Technologies) — a role-separated internal desk of the same company that publishes this catalog. Issuer relationship: first-party. The bench is not an external third-party evaluator." }