Cyan Eclipse Cluster MCP — Cyan Eclipse Bazaar

Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio

Certification scope

CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Simulator scope: local stub registry, openssl-signed fixtures. Run by W-003 (Verity), suites/cluster.py.

What it does

Resolve an image's digest from its registry with a read-only OCI client (digest computed over served bytes)
Verify cosign-style signatures (ECDSA P-256, Ed25519, RSA) with a pure-stdlib gate
Verify DSSE / in-toto lineage against a written policy and local trust bundle
Per-check PASS/FAIL verdict (10 gate checks), fail-closed on every error
Wrong-signer failures distinguished: forgery fails the signature, an unauthorized signer fails policy

Tools

verify_imagepolicy_showreceipt_list

Problems it addresses

I need to prove a container image was signed by the signer my policy names before it runs anywhere
A signature gate must fail closed when a registry or key cannot be reached, and say why

Not tested

Runtime/orchestration phases K1-K3 not built — v0.1 is the K0 verification gate only
Keyless/Fulcio certificate signatures not accepted by design in v0.1 (key-based trust bundles only)

Bench scorecard: test-bench/results/eclipse-cluster-mcp-2026-10-25.json

Evaluation-intake listing

This listing records the tool's place in the Bazaar's evaluation and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope, and not-tested items included. It is not sold on this site, and its presence in the catalog is not a claim beyond that evidence. The service behind every verdict is the bench: what a bench run buys →