Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio
Certification scope
CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-permits-mcp-2026-10-26-2.json (scoped re-bench of the card -1 PARTIAL fix round; card -1 retained append-only): the witnessed-ledger mechanism, fence/refusal battery, chain-tamper and unchanged-read behaviour all PASS at local scope. Per the card's own scope verdicts: the Accela Citizen leg is certified at FIXTURE conformance only — the §7.7 Florida dogfood exit gate (owner's own Accela account, ≥1 real chain, ≥2 reads) remains OUTSTANDING and owner-side, outside this verdict; the dual-source leg is OUT OF CERTIFIED SCOPE (no dual-route jurisdiction at P0; refusal path benches correctly). Signing posture at P0 is fixture-labelled (FIXTURE_SIGNED).
What it does
- Read permit status from the jurisdiction's own sanctioned source and seal it as a Herald-signed lineage receipt (status_as_served verbatim beside status_normalized — never merged)
- Hash-chained witnessed history under a closed change law: STATUS_TRANSITION · RETRO_EDIT · FIELD_CHANGE · RECORD_ABSENT · RECORD_RESTORED; unchanged re-reads mint nothing
- Coverage registry naming each covered jurisdiction and its sanctioned route (NYC via Socrata Open Data; Tallahassee–Leon County via Accela Citizen Access); every other jurisdiction is UNWITNESSED, never silently covered
- Offline recompute: witness_verify and the standalone recompute.py reproduce payload hash, receipt hash, chain walk and seal state from the spec alone
- Agency checklists served verbatim + cited + snapshot-sealed only; requirements synthesis refuses by name (REQUIREMENTS_SYNTHESIS_REFUSED)
Tools
session_opencoverage_listpermit_searchpermit_get_currentwitness_readwitness_historyreceipt_getwitness_verifywitness_comparechecklist_listchecklist_getwatch_registerwatch_listwatch_refresh
Problems it addresses
- I need to prove exactly what a permit office's own system said about a permit at a stated time — not re-ask it later and get a different answer
- A permit status changed after the fact and I need a hash-chained history showing every transition, retro-edit and absence
- I need a permit receipt a counterparty can verify offline, without trusting my server
Not tested
- Live Accela Citizen reads under the owner's own account — the §7.7 Florida dogfood exit gate is outstanding and owner-side; certified scope for that leg is FIXTURE conformance only
- Dual-source agreement/divergence on a real dual-route jurisdiction — out of certified scope at P0 (no dual-route jurisdiction exists)
- Production Herald signing custody — P0 seals are fixture-labelled (FIXTURE_SIGNED)
- Any jurisdiction beyond the coverage registry — UNWITNESSED by construction; no portal scraping or aggregator witness source exists
Bench scorecard: test-bench/results/eclipse-permits-mcp-2026-10-26-2.json
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →