154 evaluation-intake listings — MCP servers, connectors, and tools under screening, bench evaluation, and continuous monitoring. A listing is evidence in progress, not a product for sale; the bench is the only service sold here.
Can an SI agent actually buy from your store? Score it, see the evidence, fix the gaps.
The padlock, without the paywall — agent-native ACME issuance, challenge placement, install, and renewal watching for shared-hosting sites.
Pre-publication substantiation gate for fixture marketing claims — no sealed pointer, no publish; the published fixture artifact carries the pointer. CERTIFIED (local/fixture) — fixture claims/documents only, fixture publish pipeline only. The pointer proves substantiation was BOUND, not that it substantiates — substantiation adequacy is the publisher's/counsel's call. RSA key generation uses the random module (Mersenne Twister), not a CSPRNG — fixture keys only.
The agent wallet where responsibility follows scope — caps, allowlists, human approvals, kill switch, full audit trail.
Band-only age attestation sealer/verifier over fixture attestations; local/fixture only. PASS-CONDITIONAL (local/fixture) — band-only attestation (18+ / 21+) that reveals nothing else — no birthdate, no document — sealed to the requesting service's mandate. It is not an identity claim. Rollback fence (C1): external anchor required before live/multi-party use. Counsel gate (C2, SPEC §10) named and unbuilt: any use involving real people.
Eclipse Airtime — mandate-bound ad operations.
Sealed family budget mandates for household agents — category caps, merchant lists, and amounts are sealed by the account holder; every spend lands in a family ledger as a receipt the agent cannot edit. PASS-CONDITIONAL (local/simulator) — local stdio, fixture family mandates + fixture spends only, value_class "test"; no real money, no payment rail, counsel gate (§10) unbuilt. Ledger receipts are Herald-counter-signed; the household agent holds no ledger signing key.
Sealed model-ancestry chains + buyer policy checks over fixture chains/policies; local only. PASS-CONDITIONAL (local) — the full fine-tune/distillation ancestry chain is sealed at registration, and handshakes enforce buyer ancestry policies automatically. Ancestry is creator-declared and sealed at registration; sealing proves the declaration has not changed since registration — it does not independently prove the declared lineage. Rollback fence: an external anchor is required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt.
The Instagram adapter, formalized: capability-declared, hash-bound native variants for Feed, Carousel, Story, and Reel. The descriptor travels with the mode.
The auto-apply tool that shows its work — policy-scoped autonomy, review-first, receipts for everything, and a resume it can prove it never embellished.
Web-evidence capture witness over fixture captures — page captures seal content, headers, and the TLS certificate together as one hash-chained, Herald-signed bundle proving what was served, by whom, and when. PASS-CONDITIONAL (local, fixture captures) — local stdio, fixture captures only, value_class "test"; no live web capture exists in v0.1. This bundle proves what the capturing fetcher was served, at the witness time, under the certificate presented to it. A server may serve different content to other fetchers, at other times, or under other certificates — the bundle says nothing about what anyone else was served.
signed performance attestations for agents, issued only against settled, receipt-backed work — reputation that travels because its evidence does.
Grant-term spending evidence over fixture awards; local/simulator only. PASS-CONDITIONAL (local/simulator) — award terms sealed once; each spend sealed against a term as it happens, hash-chained per award; reports recompute from those receipts. An Awardline report is a recomputation from sealed receipts, not an audit, not an allowability determination, and not agency acceptance. Counsel gate (C1, SPEC §10 counsel/govcon gate) named and unbuilt: any real-award reliance.
Ballot evidence system for agent electorates over fixture electorates; local/simulator only. PASS-CONDITIONAL (local/simulator) — ballots sealed to mandate-eligibility proofs: only agents holding a valid governance mandate at vote time are counted, and the tally recomputes publicly. Recompute proves tally-vs-sealed-ballots, not electorate legitimacy. Counsel gate (C4, SPEC §10) named and unbuilt: any real binding election.
Agents discover TESTED tools by the problem they need solved — every listing carries its Test Bench verdict or says plainly that it has none.
The insurance watcher — signals your policies' expiries before they happen. It does not insure, bind, or advise.
Drop in a solicitation, get back the compliance matrix — Section L/M extraction, requirements checklist, deadlines, set-aside summary.
The record that survives the agent: append-only, recorder-signed, and graded by proof — never by claim.
Market data + venue access layer — not an exchange: one book, one fee truth, one ledger of record.
Governed returns for agent purchases: a return is authorized only if it binds to the original purchase receipt + mandate, with condition/serial attestation at return initiation. LOCAL/fixture scope only — authorization is a sealed local record, not a real-world returns/logistics action; nothing is shipped, received, refunded, or restocked, and no merchant or carrier is contacted.
Third-party halt authority for agent fleets: runtimes poll, a BRAKE verdict halts within the poll interval, and signed halt receipts prove the stop — or the episode closes UNPROVEN-HALT. LOCAL/simulator scope only — local policy endpoint + fixture runtime, no live fleets.
Burn-trajectory forecast over sealed fixture budget mandates — recomputes the trajectory after each record and issues a receipted THROTTLE, ESCALATE, or ABORT verdict before the breach. CERTIFIED (local/simulator) — local stdio MCP, fixture spend streams + fixture Till mandates + fixture HMAC stand-ins only, pinned model burnline-linear/1.0 only; nothing certifies live budget enforcement, real Herald/Meter/Till interop, or that a verdict stops spend.
Sealed-policy cap bound proofs over fixture policies — a range proof over a sealed internal policy: the agent proves 'this spend is within my cap' to a merchant without revealing the cap or the policy. PASS-CONDITIONAL(local) — fixture policies/spends + fixture unaudited group parameters only, value_class "test"; no live merchant, no real policy proven. verdict-oracle disclosure: each verdict reveals one bit of ordering information about the sealed cap (whether the stated spend is above or below it); repeated proofs against one commitment narrow the cap by binary search (spec 2.3(c)). stated-spend disclosure: the stated spend is public to the verifier (it is the merchant's own price) (spec 11.4).
Agent discovery & inventory of record.
Your broker watches its own account. Charter watches your rules — across all of your accounts.
Signed images, governed runtimes — the gate runs first: no verified signature and lineage, no workload.
Banking regulation as data: a citation-exact library, a deadline engine, sanctions screening, and exam-evidence packs.
Catalog of record for books: signed titles, rights, prices & royalties, checked everywhere they sell.
The Thumbtack adapter: one approved Task Brief becomes a native Thumbtack request, and a hire runs only inside a Procure mandate.
Hosted OAuth bridge that lets an agent upload owner-approved YouTube Shorts without ever holding the channel's credentials.
Your Anthropic API key, your account, your bill — the agent gets bounded authority and total evidence, never the key. API keys only. Bench-passed, hosted/staging: PASS-CONDITIONAL (hosted/staging).
Your Gemini key, your Google Cloud project, your bill — the agent gets bounded authority and total evidence, never the key. Bench-passed, hosted/staging: PASS-CONDITIONAL (hosted/staging).
The gpt-oss route on Groq, under your own key, a signed grant, and a sealed receipt for every call. Bench-passed, hosted/staging: PASS (hosted/staging).
The MCP face of the hosted OAuth bridge — agents upload to YouTube through a human-granted, revocable key, never raw OAuth.
Mandate-bound compare/merge custody bridge for agents.
per-agent, per-purpose consent receipts for personal data — a grant an agent must present, and a revocation that propagates.
The governed, vendor-neutral VM fleet layer for agents: one policy, one receipt ledger, every cloud and hypervisor underneath.
Agent identity-continuity chains: signed links across model/config changes — same principal, new model, verified offline. CERTIFIED (local/fixture) — fixture principals/models/keys only, local stdio, no live registry or identity claim.
Sealed render-proof for deployed websites — signed verdicts bound to the deployed artifact, recomputed by anyone.
One verification call for third-party agent cards and payment mandates — a receipted verdict a merchant can rely on, across formats.
Consent-bound lead work for real-estate agents — lineage on every lead, a Gate on every send, a sealed pack for the broker.
Pay-per-crawl licensing receipts for publishers: a sealed receipt binding crawler identity, license-terms hash, and content fingerprint in one recomputable record, hash-chained per publisher and revocable by terms version. LOCAL/fixture scope only — receipt mechanics only; no crawling, no fetching, no network calls, and the $0.01/call meter is recorded, never charged in v0.1.
Publish once, tracked everywhere — registry-native facets plus a mandate-bound, identity-checked listing ledger.
Pre-flight FX guard for agent cross-currency payments — rate source, rate, and spread are sealed at execution, and settlement is refused pre-flight when the spread exceeds the mandate's cap. PASS-CONDITIONAL(local/simulator, fixture FX records) — fixture FX records only; never converts, settles, or moves currency. Sole condition: cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use.
Multi-regime SI-obligation mapping — which SI laws bind your systems, what evidence satisfies each.
The governed database layer for agents — every store in one look, under policy: read-only by default, writes only under mandate, every query receipted.
Drafts once, syndicates drafts everywhere sanctioned, unifies the analytics. Never publishes without approval; never scrapes.
Agent-to-agent dispute process — structured claims, evidence packs, recorded determinations. Not a court, not a legal judgment.
Dual-control attestation for fixture agent actions — two independent agents must counter-sign, and the pair must prove model diversity (different model families). PASS-CONDITIONAL(local, attested model-family declarations) — fixture proposals, fixture agents and fixture identity records only; Duet executes, authorizes, and approves nothing. Duet's diversity/independence proofs establish attested model families/providers and bound signatures — NOT actual running models, NOT non-collusion. Sole condition: cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use.
The smart-environment module — scopes an agent's authority to actuate a home, tier by tier, and receipts only what the device itself confirms.
The signed front door for agent-to-agent business: vetted in, tier-told, drafted — never bound without the owner.
Agent end-of-life cascade expiry over fixture identities; local/simulator only. PASS-CONDITIONAL (local/simulator) — a signed death/compromise record triggers cascade expiry: every outstanding mandate, alias, and delegation issued to the dead identity expires atomically and provably. Rollback fence: full coordinated rollback is a fenced condition — external anchor required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt for all live phases.
Screening-evidence sealer over fixture lists only; local/fixture only. PASS-CONDITIONAL (local/fixture) — every verdict seals the exact list vintage it was computed against (snapshot id, vintage label, content hash) plus the sealed rule-set version, so a clearance remains provable after the lists change. A fixture CLEAR authorises no shipment, transaction, or filing. Export-control counsel gate (SPEC §10) named and unbuilt: any real list, real party, or reliance.
Subscription-creep measurement over fixture charge streams against a sealed original authorization — creep is detected against the sealed price history from the original authorization, so a merchant's gradual increases are measured against proof, not memory. PASS (local, fixture charge streams + sealed authorizations) — local stdio MCP, fixture charge streams + sealed authorizations only, value_class "test"; Faircharge measures drift — it makes no breach, overcharge, or misconduct finding.
Decision-evidence sealer + audit recompute engine over fixture decisions; local/fixture only. PASS-CONDITIONAL (local/fixture) — each decision seals its feature set, model version, and adverse-action reason codes at decision time, making later disparate-impact audits a recompute. Fairlend never decides. D-11 NAMED: §7.3 identifier fence evadable by token-split spellings — must close before any non-fixture scope. Counsel gate (SPEC §10) named and unbuilt: any use beyond fixture decisions requires fair-lending counsel clearance in writing first.
DeFi, measured honestly: signed protocol registry, dual-source risk reads, and an allowance audit that flags the unlimited grants.
Converts a merchant's messy catalog into an agent-grade product feed with per-attribute lineage: every attribute records {value, source_field, rule_id, source_value} and verify_feed recomputes each byte-for-byte from the source rows and the documented deterministic rule set. LOCAL/fixture scope only — local engine over caller-supplied rows/CSV/JSON + bundled fixtures; deterministic transforms only, no LLM calls, no network calls; attributes no rule can produce are absent, never invented, and unmapped source fields are reported.
Fee-schedule sealing + fee-verification witness over fixture transactions — every fee charged is sealed against the published fee-schedule version in force; overcharges against that version are detected automatically. CERTIFIED(local, fixture transactions) — fixture schedules + fixture transactions only; no real fee is charged, audited, refunded, or adjusted by Feeseal.
Flood evidence, sealed: NFHL determinations as signed, independently recomputable receipts over sealed snapshots — an evidence-grade witness, never a determination of record.
The Polymarket adapter: the venue's prices, with their criteria and liquidity attached.
Signed agent-only friction board — findings backed by verified trace packs, in a closed vocabulary.
Agent birth-certificate issuer — at registration the agent's creator, model, config hash, and declared purpose scope are sealed; acting outside the declared purpose is detectable by any counterparty who checks the certificate. PASS-CONDITIONAL(local/fixture) — local stdio, fixture agents/creators/keys only, value_class "test"; Genesis detects, it never blocks. Sole condition: full coordinated rollback is a fenced condition — external anchor required before live/multi-party use.
One approved Task Brief, every marketplace: hash-bound briefs, all-in quotes, and a hire that runs only inside a mandate.
Emission-time claim binder for agent output over a fixture emission stream; local/fixture only. PASS-CONDITIONAL (local/fixture) — every sustainability claim an agent emits is bound to its source-data pointer at emission time; unbound claims are flagged in the message itself. A binding proves a pointer existed and resolved at emission time — NOT that the claim is true. Rollback fence: an external anchor is required before live/multi-party use. Counsel gate (SPEC §10) named and unbuilt.
The governed Zendesk server: OAuth-first, drafts until approved, and a receipt for every touch.
Scan an MCP server or agent configuration for security posture — evidence-bound findings, decomposed score, fixes.
Simulated escrow-release witness over a fixture escrow ledger — release is triggered by a counter-signed acceptance proof generated by executing the buyer's own acceptance tests — the test-run receipt, not a human click, unlocks funds. PASS-CONDITIONAL(simulator, fixture escrow ledger) — fixture escrow ledger only; no real funds are held, moved, or owed. Condition C-1: external anchor required before live/multi-party use — coordinated rollback across artifacts is not claimed by this local build. Condition C-2: SETTLEMENT_BPS = 59 requires price-book/owner ratification before priced reliance (SPEC states no numeric figure — §9.1 shape only, §9.2 defers to price book; the 59 bps component is disclosed and NEVER collected in this scope, collected:false on every metering record).
Continuous cyber-insurance evidence assembly over fixture records; local/simulator only. PASS-CONDITIONAL (local/simulator) — a live underwriter-facing evidence API fed by bench verdicts, incident records, and control receipts — premium-relevant changes emit change receipts to the insured. Evidence assembly only; no underwriting. Amended Condition 1′: a single-pack VERIFY_PASS is not proof of completeness of earlier transitions. Counsel gate (SPEC §10) named and unbuilt: any live phase.
credential leases, never raw keys — scoped, expiring secret leases for agents; the agent gets a capability, never the key.
Continuous loadout sealing for agents over fixture loadouts — an operator-declared fixture configuration is genesis-sealed and every change streams as a hash-chained signed delta receipt; the current config is a recompute, never a stored claim. CERTIFIED(local, fixture loadouts) — fixture loadouts only; no real agent is sealed or streamed, and a seal attests presentation, sequence, and hashes — not runtime state.
Patient-buying mandate over fixture balance + fixture witnessed prices — the mandate self-executes only when two witnessed conditions coincide — goal balance reached and a witnessed price at or below the target — with progress receipts throughout. PASS-CONDITIONAL(simulator) — simulator only; execution is a mandate state transition only, NO purchase is executed and no funds move. Sole condition: cross-artifact cross-commitment is fenced — external anchor required before live/multi-party use.
Eclipse Ledger — betting records, price comparison, and responsible-gambling controls. Not a sportsbook. No bets are placed here.
Point an agent at a codebase: narrowed-scope architecture map, dependency/EOL risk list, modernization estimate inputs.
spawn trees, model/config lineage, and version ancestry for agents — who spawned whom, running what, changed when.
Governed design-to-print authority for agents — signed lineage from model to machine, safety envelopes at the bridge, evidence for every print.
Governed agent email identity — review-first sending, signed envelopes, and a fraud firewall that makes money instructions non-actionable from email alone.
The live-events agent: it finds the event, watches the price, buys only inside your mandate, and keeps the receipt for every ticket. It does not scalp, bypass, or bet.
Governed telehealth operations — jurisdiction-gated encounters, signed-note integrity, PHI access evidence. Not a healthcare provider.
Cross-provider agent spend analytics — one ledger for tokens, tools, and payments.
Watermarked synthetic-counterparty mint for commerce testing: fake merchants, agents and APIs whose every artifact carries the §4.4 synthetic watermark. CERTIFIED (LOCAL/sandbox) — local/sandbox only, no real counterparty is impersonated or connected to. Detection boundary stated on its face (Amendment A1): bare payload values with every structural field removed are NO_WATERMARK_FOUND — detection is not claimed at that level.
Payee-detail drift evidence over fixture records — before paying a known payee, Morphguard compares the bank/rail details presented against a continuous, hash-chained fingerprint history and returns CLEAR or BLOCK plus a drift receipt naming exactly which field classes changed. CERTIFIED (local, fixture payee records) — fixture payee records only; verdict to caller only, never executes payment; verification uses pinned fixture keys (HMAC fixture stand-in — not public keys); export packs carry fixture detail tokens for recompute and are not value-free.
MPP session evidence / witness: mandate-sealed sessions, counter-signed draws, and witness receipts over fixture sessions and a local mock relay — Moderato testnet shapes only; no chain interaction, no live clearing, no live Meter ingest.
The Customer Graph core: one register of the people an account serves, with lineage on every field and a receipt for every decision.
Cyan Eclipse Muzzle — PASS (local/fixture) — Verity reduced-scope bench, secrets and PII only, ruleset muzzle-rules/0.4. A PASS verdict is scan evidence, not a guarantee of safety or non-defamation.
Pre-launch identity-collision similarity screen over a fixture registry snapshot — similarity scoring over registered agent identities issues a collision verdict before an agent launches under a confusing identity. CERTIFIED(local, fixture registry snapshot) — fixture snapshot only; a screen over a stated snapshot, not a trademark opinion, not a legal clearance, not permission to launch.
Sales-tax determination witness for agent checkouts: sealed, vintage-stamped receipts (jurisdiction + rate + rule version at order time) an agent can attach to every order. LOCAL / fixture-vintage ONLY — fictional jurisdictions, DEMO rates, NOT tax advice, NOT real rates.
The HubSpot wrap: the vendor's server, under policy — classified tools, approval gates, masking, and receipts.
Independent uptime/SLA witnessing for MCP servers: hash-chained probe receipts feed a recomputable trust record, availability recomputed only from receipts — no self-report accepted — and a badge that auto-degrades on witnessed downtime. LOCAL scope only — probes run only against localhost or fixture:// endpoints; vantage points are local-simulated probe identities, NOT geographically independent; no live external monitoring.
The unattended-retail module — reads vending fleets' own telemetry and predicts stock-outs. It never touches card data.
Sealed witness of the USPTO patent record: legal-status event ledgers, claim-text divergence receipts, and recorded assignment chains — each recomputable offline from a named snapshot. Record state only; not a legal opinion, not a status service.
Pre-payment verdict binding a purchase order, a spending mandate, and a delivery receipt into one token — MATCH, MISMATCH, or PARTIAL_DELIVERY only when all three agree. CERTIFIED (LOCAL/simulator, fixture triples) — verdict only: Payseal never executes, authorizes, or guarantees a payment.
Permit status witnessed: sealed per-read lineage receipts, hash-chained history, offline recompute. The receipt warrants the read; it never warrants the status.
Phantom-charge sentinel for agent payment programs (simulator) — every charge is matched to a mandate record within seconds; unmatched charges generate an auto-assembled dispute pack and an issuer-freeze request before the statement closes. PASS-CONDITIONAL(simulator) — fixture charge stream + fixture mandate ledger only, value_class "test"; nothing is filed with or requested of any issuer. Sole condition: full coordinated rollback = fenced condition — external anchor required before live/multi-party use.
Agent-native static-site publish pipeline — R2-shelf publishing with zip-permission and timestamp forensics baked in; runs both production sites today.
Intent to receipt in one fail-closed pipeline — policy before payment, abort on drift, proof for everything.
Prompt change-control with approver receipts over fixture prompts/deployments/incidents — production system prompts are sealed and versioned; every runtime incident can be traced to the exact prompt version and its approver. PASS (local/fixture) — local stdio MCP, fixture prompts/deployments/incidents only, value_class "test"; the chain proves which version was sealed and who approved it — it does not prove the sealed prompt is what actually ran in any live process.
Governed video production — Herald-signed approval pins over exact edit states, hash-pinned templates, render evidence for every export.
Governed bench access for agents — signed mandates, pinned artifacts, evidence for every session.
Chargeback rebuttal evidence packets for agent purchases: turns a Procure/Till mandate + receipt chain into a generic reason-code packet with every element traced to a source record. LOCAL/fixture scope only — packet generation only; never files, submits, or transmits anything, no card network or issuer is contacted, and reason codes are a small generic table, not any network's proprietary codes.
Recall campaigns, witnessed: NHTSA's as-served record sealed night by night — sealed vintages, dated drift, and campaign-level check receipts that print exactly what was checked. The receipt warrants what the record said; it never warrants that a vehicle is safe.
Purchase-receipt vault with a gaslight-proof return countdown — return deadlines are computed at purchase time from the merchant's sealed terms, so the countdown can't be gaslit later; alerts fire before windows close. CERTIFIED (local, fixture sealed merchant terms + fixture purchase records) — local stdio, fixture sealed merchant terms + fixture purchase records only, value_class "test"; the deadline is arithmetic over the merchant's terms as sealed at purchase; it is not a legal determination, and Receiptvault does not warrant that any merchant will accept a return by it. Standing condition: full coordinated local snapshot restore is undetectable in the local model — fenced verbatim in README + server.json; an external anchor (witnessed/countersigned head hash outside the local store) is REQUIRED before any live or multi-party use.
Adversarial simulation for SI agents — sandboxed twins only.
Regulation-change impact receipts: fixture publications witnessed and deterministically mapped to your declared controls. CERTIFIED (LOCAL/simulator) — fixture corpus only, local stdio, no live ingestion. Not legal advice; not a compliance determination.
Receipt-bound review corpus: every review bound to a sealed purchase receipt, with a recomputable verified-share statistic. CERTIFIED (LOCAL/simulator, fixture corpus) — fixture corpus only, no live marketplace integration. An evidence pack is recomputable but not tamper-evident against its own holder (re-bench n1).
signed revocation lists for agent cards, keys, and mandates — one feed, every registry, revocation that actually propagates.
Signed deltas against the registry's own record — proof-of-filing seals only on an exact read-back match.
Freshness-windowed signed allowlist feed for agent services — feed entries expire unless re-benched inside the window; the allowlist is a live verdict stream, not a static directory. CERTIFIED (local, fixture feed entries) — local stdio, fixture services/receipts only, value_class "test". A Safelist entry carries a bench verdict exactly as its receipt states it, scope qualifier attached. ACTIVE means only: a verdict receipt of that stated scope was verified, and the entry is inside its freshness window at the stated evaluation time. It does not mean the service is safe, endorsed, compliant, or currently passing anything.
Eval-expiry clock over fixture Benchkit-format scorecards + fixture drift evidence — every eval score carries an expiry computed from measured model/tool drift rates; consumers get a 'stale eval' verdict when a score outlives its evidence. PASS-CONDITIONAL (local) — local stdio, fixture scorecards + fixture drift evidence only, value_class "test"; no live model/tool observation, no eval is run, no score is issued. Expiry is evidence-decay arithmetic, not a claim the score was wrong.
First-payment friction layer for agent-assisted payments — a first payment to any new payee triggers a witnessed risk briefing (fraud reports, payee-continuity, lookalike domains) the user must acknowledge; the acknowledgment is receipted. PASS-CONDITIONAL (local/simulator, fixture risk sources + fixture payee history) — local stdio, fixture risk sources + fixture payee history only, value_class "test"; Scamshield assembles a briefing from witnessed sources and receipts the user's acknowledgment of that briefing; it does not certify a payee safe, trustworthy, legitimate, or fraudulent, and it issues no risk score or verdict on any payee. Condition 1: RB-F7 coordinated-restore residual stays fenced verbatim on README + all named faces — full coordinated restore of all artifacts (incl. store_head.json) is undetectable in the pure local model; an external anchor is required for detection. Condition 2: scope-only certification — the live phase remains behind the §10 counsel gate + separate re-bench.
Failure attribution is a recompute over the hash-chained record set — the verdict names the causal action and ships the proof path. CERTIFIED (local) — fixture record sets only; causal evidence, NOT a legal liability determination.
Disposition-notice witness: sealed retraction/correction/concern events with lineage, open divergences, recomputable reference audits.
Sealed SEC filing figures as filed + restatement chains, recomputable offline. PASS-CONDITIONAL (bench, 2026-10-28) at FIXTURE_SIGNED P0 snapshot scope — 48 CIKs / 905 accessions; observations + EDGAR-self divergence benched at the same scope (219,953 sealed observation rows); release coverage capped (see Certification).
Three-way reconciliation — mandate ledger vs rail settlement records (x402/MPP/card) vs bank payout — with every unmatched item sealed as an exception receipt. CERTIFIED (simulator, fixture records) — fixture records on all three legs; moves no money; no live rail or bank integration.
Listing view-to-checkout drift witness over fixture listing/checkout pairs — the price + full view terms are hash-sealed at view time; checkout drift of any term produces a signed drift receipt recomputable from the buyer-held pack. CERTIFIED(local, fixture listing/checkout pairs) — fixture pairs only; no live marketplace is touched, and Shelfprice never blocks or alters a checkout.
Sponsorship-disclosure witness for agent-facing marketplaces — paid placements carry a sealed sponsorship receipt, and a paid placement with no valid receipt derives UNMARKED-PAID. PASS-CONDITIONAL (local, fixture placement records) — local single-operator file model, fixture placements only. Shelfspace issues sponsorship receipts and a surfacing-proof format and verifies proofs presented to it. It does not compel any router, marketplace, or agent to surface a disclosure. A 'required to surface' duty exists only where a router/marketplace adopts it (§12); Shelfspace evidences surfacing, it does not enforce it. Honesty fence — rollback residual: within this local file model, a rollback that restores every local artifact (store, both anchors, journal, metering) to one consistent earlier snapshot is undetectable; the journal/metering cross-checks detect partial rollbacks and single-artifact tampering, not a complete coordinated snapshot restore. No stronger claim is made.
Machine-checkable skill claims over fixture claims + fixture verdict receipts — a claim is a pointer to a bench-verdict receipt; no verifiable receipt renders UNVERIFIED in the standard format. CERTIFIED(local, fixture claims + fixture verdict receipts) — fixture claims + fixture receipts only; Skillseal benches nothing, certifies no skill, and issues no verdicts.
Schedule-integrity guard for recurring agent payments — any witnessed counterparty behavior change (price drift, endpoint change, ownership change) automatically freezes the schedule until re-attestation. PASS-CONDITIONAL(simulator, fixture schedules + witnessed-change feed) — fixture schedules + fixture witnessed-change feed only; no payments are executed, initiated, or held. Condition C-1: cross-artifact cross-commitment is the local per-schedule hash chain + export SET anchors only; full coordinated rollback not provided — external anchor required before live/multi-party use.
One canonical, hash-bound package behind every Eclipse social adapter. It publishes nothing itself — it makes sure nothing unapproved moves.
Per-fact retrieval receipts over fixture source stores — each answer ships with its primary-source pointer plus a retrieval receipt (fetcher, time, content hash), lineage at the granularity of one fact. PASS(local) — local stdio MCP, fixture stores only, value_class "test"; the receipt proves a fetch of specific bytes at a time by a named fetcher — it does not prove the source was truthful, nor that the answer faithfully represents the source.
Delegation-chain governance: spawn limits, depth caps, mandate attenuation
Pre-agreed revenue splits for multi-agent tasks: split weights are sealed into the delegation mandate at spawn time and settled against attestation-backed completion records — the split cannot be renegotiated after work is done. LOCAL/fixture scope only — allocation math and sealed records only, no money movement, no payment rails, wallets, or payouts; fixture completion records with unkeyed SHA-256 demo seals (keyed seal required before any non-fixture use). A settlement event is a per-order settlement OR an MPP session close-out — the accumulated session settles as ONE settlement event (SPEC Amendment #1).
Per-action-class sponsor acceptance receipts — a sponsor signs payments, publishing, or contracting separately, never one blanket acceptance. PASS-CONDITIONAL (local) — fixture sponsors/parties only. A Sponsorline receipt evidences that a sponsor signed stated acceptance terms for a stated action class at a stated time. It does not itself create, transfer, or enforce legal liability. Enforceability is a counsel question (§10) and is not claimed.
The console bridge — deploy and playtest SI-built games on your own Dev Mode console, with receipts.
Team-chat agent governance — the signed mandate, verified disclosure, review-first posting and receipts that govern an SI agent inside Slack, Teams and Discord. It governs the agent — it never monitors the people.
Catalog / manifest / storefront consistency auditor — the drift checker that keeps this Bazaar at drift=0, productizing as a CLI + CI tool.
The Coinbase exchange adapter: spot products and books, normalized into the suite's one book.
MCP deprecation radar: detects deprecated/removed tools and versions from witnessed, hash-chained registry snapshots and generates a migration diff for an agent's config.
The certification harness behind every verdict on this shelf — productizing as a standalone tool for MCP server builders.
Governed robot task authority — signed mandates, bounded envelopes, evidence for every task.
On-prem bridges for the legacy software-engineering toolchain, plus the Evidence Weaver that joins their records into one traceable thread. v0.1: simulator scope, honestly labeled.
Bazaar checkout for agents — quote, mandate, signed entitlement, delivery, receipt, refund.
Commitment-first track-record registry over fixture commitments — predictions and SLA commitments are sealed publicly before the outcome window and scored at maturity — a track record that cannot be backdated or cherry-picked. CERTIFIED (local/simulator, public seal registry over fixture commitments, value_class "test") — local stdio MCP, fixture commitments + fixture outcomes only, value_class "test"; no live registry, no enforceable SLAs, no reputation rating.
Pins MCP tool descriptions/schemas at session start and catches silent mid-session changes: every verified call carries the hash of the exact description the agent saw, and a swapped description is invalidated with a hash-chained proof record. LOCAL scope only — a local verification engine on caller-supplied tool lists + fixtures; it does NOT proxy live MCP traffic, connect to remote servers, or execute described tools.
Trademark screening witness: sealed corpus, recomputable search receipts. A screening witness, not a search engine and not an opinion machine — it renders no verdict.
Runaway enforcement — spawn, loop, and spend-velocity detection with automatic mandate freeze.
Quote-sealing + checkout drift witness over fixture quote/checkout pairs — quote + full terms are hash-sealed at quote time; checkout drift of any term produces a drift receipt in a Docket-grade evidence pack format. CERTIFIED(local, fixture quote/checkout pairs) — fixture pairs only; no real quote or checkout is sealed or judged, and Trueprice never blocks or alters a checkout.
The governed Twilio adapter: every call and text under consent + mandate.
One call answers whether a bench result is real, who issued it, at what scope — and whether it is anchored on-chain, where.
The closed-vocabulary witness: cross-registry lookalike and endpoint-change watch, findings as signed evidence — never accusations.
Delegation subset proofs over Till-grammar fixture mandate pairs — a cryptographic subset proof that the sub-agent's mandate is a strict attenuation of the delegator's. PASS-CONDITIONAL(local, subset proof over Till-grammar fixture mandates) — fixture mandate pairs only; issues no mandates, grants no authority, registers no agents.
Title 26 as a sealed object: per-section hashes, a recomputable signed manifest, and byte-for-byte cite-check verdicts.
Executive Orders as sealed objects: per-section hashes, a lineage-typed disposition graph, divergences kept as data.
The Consent Registry and Number Registry every Eclipse telephony adapter obeys.
Per-call voice continuity tokens over fixture call records — per-call continuity tokens seal the speaker model + voice fingerprint, so a voice agent cannot silently swap voices mid-relationship. PASS-CONDITIONAL(local, fixture call records) — fixture call records only; the claim is provable only at identifier granularity and same-model re-voicing behind unchanged identifiers is not detectable; never 'same voice verified', no biometric identity.
Payroll approval-and-evidence rail for agents — approve the exact run, or it refuses.
Guardian veto verdicts + receipts over fixture actions; local/simulator only. PASS-CONDITIONAL (local/simulator) — a designated fixture guardian holds veto rights over sealed action classes, and every veto (or veto-window lapse) is receipted into the agent's own hash-chained record, recomputable offline from the exported pack. Ward issues verdicts and receipts; it does not enforce them. Rollback fence: the pure local file store caps any verdict at PASS-CONDITIONAL — an external anchor is required before any live or multi-party reliance. Counsel gate (SPEC §10) named and unbuilt: live runtime reliance and any legally recognised ward/guardian use require counsel clearance first.
Warranty registration witness for agent purchases: binds serial, buyer mandate, and retailer receipt into one transferable claim pack. LOCAL/fixture scope only — the pack is a witness record, not a warranty contract; no adjudication, coverage, or enforceability is claimed.
The fitness module of Eclipse Procure — reads the machine, turns the dial under a safety ladder, and stops the belt when the controller goes silent.
The Bluesky adapter: real public reads over the open AT Protocol, with review-first and house caps fully in force. No posting surface exists in v0.1.
Federal + state opportunity search with fit and newcomer scoring and plain-language summaries — not a raw API wrapper.
Florida bid intelligence with honest deadlines — real competitions, real due dates, gaps stated not guessed.
Agent Card issue/verify toolkit — the Herald JWS card tooling (cards.py, jwscore.py) productizing as a CLI + library for A2A builders.
Scoped deploys, snapshots, rollback, deploy receipts — CERTIFIED(local-real): the deploy pipeline is proven against a real local filesystem docroot served by a real HTTP server. v0.1.0 has NO remote-host deploy: SFTP and cPanel UAPI transports are not built and return explicit declared-not-live errors.
WCAG + Section 508 audits that produce the deliverable federal buyers actually require: ACR/VPAT-ready evidence.
Catalog data as built 2026-10-27. Verdicts are printed with their scope on each product page, alongside the checks that were not run. CHECKED means the free intake screen ran — it is never a synonym for benched or certified.