Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio (HTTP transport on roadmap)
Certification scope
CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 15/16 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/constellation.py.
What it does
- Declared-target registry: undeclared machines are invisible to every tool
- Policy engine transposed from Agent Wallet: per-desk and fleet quotas with refusal arithmetic, image and network allowlists, TTL + purpose discipline
- Mechanical snapshot-before-mutation precondition (stale snapshot receipt denies again)
- Tier-3 destructive operations approval-gated; in observe-only v0.1 they deny even with a snapshot
- Read-only probes over fixed command templates only — no free-form remote execution
- Append-only hash-chained ledger in which refusals are receipts too
Tools
target_listpolicy_evaluateprobe_targetfleet_snapshotreceipt_list
Problems it addresses
- My agents can reach VMs across clouds and hypervisors and I need one policy over all of them
- Destructive fleet actions should require a fresh snapshot and human approval, mechanically enforced
- The audit trail must include the refusals, not just the actions
Not tested
- SSH channel live execution — untested by design: no sshd runs on this host, v0.1 declares no ssh target, and the Eclipse Connect droplet migration is owner-gated per spec. Probes were exercised over the declared 'local' channel only.
- All execution adapters (lifecycle, exec, console) — v0.1 is observe-only by design; no mutation code paths exist. Tier-3 evaluations cannot ALLOW in v0.1 (human approval channel not wired) — verified as designed in check K5.
Bench scorecard: test-bench/results/eclipse-constellation-mcp-2026-10-25.json
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →