Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio
Certification scope
CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 10 pass, 0 na of 10 checks — scoped re-bench of run 1's failing lines (B9 class integrity, B10 time expiry, B11 envelope hostility) plus the B12 D-4 limb, all re-probed PASS with bench-own fresh shapes; D-1 (evidence-class laundering via registry config), D-2 (lease/mandate time expiry never enforced), D-3 (envelope crashes), D-4 (struck live-transport env claim) all CLOSED. The original PARTIAL card (run 1: 10 pass / 1 partial / 3 fail — test-bench/results/eclipse-proving-mcp-2026-10-25.json) is retained append-only and this -2 card is the standing verdict basis. CEILING — read exactly: CERTIFIED(simulator) and nothing broader. The adapters are simulated-PS: fixture packs are evidence class fixture, qemu/renode packs are evidence class EMULATOR (content is a deterministic simulated PS inside the adapter). NO live transport was exercised at any point in either bench run — no QEMU process, XSDB/GDB/TCF session, or Renode monitor ran — and spec §12.4 exit checks X4/X5 are still owed before any transport-level interop claim. Non-gating observation carried on the standing card: a session whose lease time-expires seals no gap pack on expiry (contrast §11.3, which lists lease_expiry among gap-record causes); whether an expired session's evidence should also seal is an open spec question, flagged by the bench, not silently passed over. N-CHECK: NOVELTY_PROVEN (run 1, carried) — bench authority only inside a Herald-signed mandate binding agent × board × op-class × exact artifact hash, enforced at the bridge, every session incl. gaps/refusals sealed into an offline-verifiable pack; incumbents (fpga-mcp / VivadoMCP / probe-rs / labgrid) have no pin to mismatch and no pack.
What it does
- Physical bench authority exists only inside a Herald-signed mandate pinning agent identity × board identity × operation classes × exact artifact hashes, enforced at the bridge that holds the JTAG/serial/power connections — the sole routed path agent→target
- One-byte rule: an artifact one byte off its Herald-pinned hash refuses ARTIFACT_PIN_MISMATCH, receipted into the evidence pack, board state untouched — no warning path, no override parameter, no load-anyway flag on any surface
- Tiered authority: T0 read / T1 volatile write (pin-gated, board attested) / T2 power (every act receipted; dead-man rule — revocation freezes new operations, never cuts power inside an active write window) / T3 persistent write (owner-armed per board per session via admin CLI only, mandatory pre-write image capture, recorded recovery path)
- Permanent refusals with no tool and no path around: security-fuse programming (PERMANENT_REFUSED_FUSE), PMIC/voltage configuration (PERMANENT_REFUSED_PMIC), boot-mode strap changes (BOOT_MODE_PHYSICAL — strap state is read-only)
- Every session — loads, refusals, gaps, drops — seals into a Blackbox-form evidence pack verifiable offline; evidence class is cross-checked against a fresh adapter instance at open, connect, and seal, so a relabeled registry cannot launder an emulator session into a bench-class pack
- 22 tools on a closed surface, plus the family's standalone artifacts: Eclipse Proving Pin (offline artifact-vs-pin verifier) and Eclipse Proving Gate (boot-evidence assertion checker over sealed packs)
Tools
bench_discoversession_opensession_statustarget_connecttarget_attestregister_readmemory_readconsole_readartifact_loadmemory_writetarget_runtarget_haltpower_settarget_resetpersistent_writesession_closepin_verifypin_showpin_statusgate_runpack_verifygate_assertions_check
Problems it addresses
- My agent needs to load firmware and debug boards, and I need its authority bounded, signed, and revocable — not a shell on the bench host
- When a bring-up session goes wrong I need a sealed evidence pack a third party can verify offline, not a vendor log
- I need proof the artifact loaded was byte-identical to the one a human approved — and that a mismatch gets a refusal, not a warning
Not tested
- Live transport of any kind — no QEMU process, XSDB/GDB/TCF session, or Renode monitor was exercised in either bench run; the qemu/renode adapters run deterministic simulated-PS session scripts in-adapter. Spec §12.4 exit checks X4/X5 (live XSDB vs AMD QEMU, Renode monitor/GDB) are still owed before any transport-level interop claim.
- Physical bench hardware — HwServerAdapter is an ADAPTER_NOT_IN_PHASE stub; zero bench-class packs exist or can be produced at P0, correctly.
- PL (FPGA fabric) behavior — not modeled by plain QEMU and not claimed; bitstream loads on emulator/fixture targets are recorded with that semantics note.
- Production Herald key custody — P0 verifies against labeled deterministic TEST keys (spec §9) behind the production verify interface; production custody is a gated owner decision, not a P0 claim.
Bench scorecard: test-bench/results/eclipse-proving-mcp-2026-10-25-2.json
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →