Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio (HTTP transport on roadmap)
Certification scope
CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/countermark.py. Run 2 is the standing card; run 1 is retained append-only. N-CHECK: NOVELTY_PROVEN — one neutral verification call across card and mandate formats returns a signed finding envelope enumerating the checks actually performed, with presented-only artifacts capped at UNRESOLVED.
What it does
- One verification call for presented agent cards and payment mandates across formats, returning a signed finding in the closed vocabulary CONSISTENT / DIVERGED / EXPIRED / REVOKED_BY_ISSUER / UNRESOLVED
- Every verdict enumerates the checks actually performed and carries lineage for the artifact hash, key source, and revocation-feed epoch; presented-only artifacts cap at UNRESOLVED
- Mandate checks bind structure, signature, expiry, amount, scope, cart, and counterparty to the presented cart — a valid signature on the wrong cart still lands DIVERGED
- Instruction-like content inside artifacts is quarantined as data (hash only, never echoed) and never instructs the verifier; findings supersede, never edit
- Verification only: no approve_transaction, release_funds, trust_score, or mark_trusted surface exists. v0.1 is local over fixture issuers and a fixture revocation feed; live issuer discovery is not built
Tools
verify_cardverify_mandateverify_revocation_statusverification_receipt
Problems it addresses
- An agent card says verified, but I need the actual checks and provenance before relying on it
- A payment mandate may be signed yet bound to a different cart, amount, or counterparty
- I need a verification finding a merchant can rely on without upgrading a presented-only artifact
Not tested
- Live issuer-key discovery — NOT built (G-LIVE per format, spec ch.13). v0 verifies over fixture issuers only; an unknown domain caps at UNRESOLVED with the ceiling stated in provenance.
- Hosted per-call merchant API — NOT built (T2 + G-OWNER); pricing is Till/x402 territory, consumed not built.
- Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600), distinct from any identity key (§5.7); custody is a gated decision.
Bench scorecard: test-bench/results/eclipse-countermark-mcp-2026-10-26-2.json
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →