Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio
Certification scope
CERTIFIED(local, fixture scope) — Eclipse Bazaar Test Bench 2026-10-26, standing card eclipse-roll-mcp-2026-10-26-rebench.json (scoped re-bench; baseline card eclipse-roll-mcp-2026-10-26.json retained append-only). THE HONEST ARC, on the record: the first bench FAILED (23 pass / 11 FAIL of 34 grouped checks) on two HIGH defects — D1, revocation/expiry did not propagate past session_open (a pack sealed FILED_VERIFIED under an expired mandate), and D2, Proof's pack_verify certified a filing the read-back had refuted — plus a UPL fence that keyword-matched and a renamed-key secret-scan bypass. The fix round closed D1–D10 (25 new regression tests, 22 proven failing pre-fix); the full suite runs 63/63 on three consecutive runs (a ~3.4% flake, root-caused to the scan screening system-issued session ids, was killed). Verity's scoped re-bench then attacked the FIX code with fresh shapes — forged-consistent evidence packs, coordinated base+read-back tamper at seal, valid-window ghost artifacts, revoke-after-approval, planted foreign radar entries — 17/17 PASS, zero new defects; K1 delta-existence, the N-check (0/18 identical verb names vs the Wageward spine, inherited by reference), and grammar-drift all re-verified PASS; NOVELTY_PROVEN stands. SCOPE, read exactly: certification covers the 18-tool local stdio product at FIXTURE scope — every Gauge adapter is a labelled fixture, NO live registry read has ever been exercised, and NO submission verb exists on any surface (prep-and-seal only; the human submits via the registry's own channel). The counsel gate (spec §10.3) stands before any P1 / live phase regardless of this verdict. Two standing items remain on the card for ruling: a seal attempted under a revoked mandate surfaces APPROVAL_SCOPE_MISMATCH (inherited Wageward spine shape) where sibling verbs surface MANDATE_REVOKED — harmonization is an owner/Verity call; and seeded Radar entries are born claiming REGISTRY_READ with observed_at empty (observation D10d). NAME CONDITIONAL (spec D2, owner-side trademark screen still open): certification covers the local product under its working name; no public surface ships under any name before the screen closes.
What it does
- Novel mechanism — the signed delta: a filing is prepared, approved, and evidenced as a Herald-signed DELTA between the registry-of-record's own current state — read back through its sanctioned public surface at prep time — and the exact artifact to be submitted; after the HUMAN submits via the registry's own channel, Roll Proof re-reads the registry and seals proof-of-filing ONLY if the public record changed exactly as approved (a mismatch seals an evidence pack as FILED_UNVERIFIED, opens a Radar discrepancy, and refuses the proof claim by name — never a partial seal)
- Prep-and-seal only — NO submission verb exists on any surface, in any name: form-only registries (Sunbiz, SAM, TEAS, state SOS portals) stay human-submitted in every phase; Roll prepares, fingerprints, and evidences — it never files
- FIXTURE scope, stated plainly: every registry read at P0 runs through a labelled FIXTURE Gauge adapter (SAM Entity API / Sunbiz public search / USPTO TSDR / EDGAR data shapes) and every artifact carries evidence_class FIXTURE — NO live registry read has been exercised yet; the live adapter exists only as an unregistered interface that refuses
- Wageward spine consumed by reference, never forked: canonical fingerprint over the spec allowlist (artifact + delta + base-snapshot hash + jurisdiction parameter set + the not-a-law-firm statement rendered INSIDE the canonical pack object — missing = invalid pack), ECDSA verified approvals (params-bound, nonce + tombstone, single-use), FILING_CHANGED_SINCE_APPROVAL + REGISTRY_STATE_DRIFT refusals, Blackbox-form sealed packs, 12-month receipt standing (revocation kills standing instantly; integrity never expires)
- UPL fence at the tool layer: advice / entity-selection / interpretation / clearance requests refuse by name (ADVICE_CLASS_REFUSED; drafting-with-judgment = DRAFTING_CLASS_REFUSED) and Roll never signs as principal (SIGNATURE_PRINCIPAL_ONLY) — mechanics, deadlines, checklists, and registry facts only
- Renewal Radar + CETech dogfood fixtures: deadline/renewal tracking with discrepancy entries; the built P0 dogfood subjects are CETech's own Florida (Sunbiz) annual report (Jan 1–May 1 window), the SAM.gov renewal watch (submitted 2026-10-24, activation pending), and a VetCert radar entry (MANUAL class, expiry Jul 2028) — all as labelled fixtures
Tools
session_openregistry_record_getfiling_preparefiling_diffpack_getmandate_issueapproval_issuesubmission_recordpack_sealgauge_check_packgauge_check_deltagauge_params_listpack_verifypack_renderpack_compareradar_entries_listradar_entry_getradar_refresh
Problems it addresses
- I file with registries that have no submission API — I need the filing prepared against the registry's own current record, and proof afterward that the public record changed exactly as approved
- A renewal or annual report slipped because nobody owned the deadline — I need a radar that tracks registry state, not a calendar guess
- My agent must never drift into legal advice while helping with filings — the fence has to be at the tool layer, refusing by name
Not tested
- Any live registry read — no Gauge adapter has ever run against a live registry; all adapters exercised are labelled FIXTURE adapters, and the live adapter is unregistered and refuses
- Any submission to any registry — no submission verb exists at P0 in any name; nothing was or could be filed by this product
- Counsel review (spec §10.3) — a hard gate before P1 / any live phase; not performed and not part of this certification
- The trademark screen for the name 'Eclipse Roll' (spec D2, owner-side) — still open; it gates any public surface, not this local certification
- Customer-facing / multi-entity operation (P3, not proposed) and the EDGAR Next submission adapter (P2, specced only)
- Template-fill drafting — gated on a counsel-approved template set (spec §10.1); the drafting class refuses until then
Bench scorecard: test-bench/results/eclipse-roll-mcp-2026-10-26-rebench.json
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →