Eclipse Covenant MCP

Powered by Cyan Eclipse Technologies — https://cetech.ai

Eclipse Covenant — consent-bound lead work for real-estate agents: every lead carries its provenance, every outreach is checked at send time, and every session seals into the brokerage's defense file. It does not sell leads, hold MLS data, or perform licensed acts.

Status: built-uncertified / bench-pending (P0, v0.1.0). Verity benches separately; no certification is claimed here.

Honesty statement (normative, spec §10)

CETech holds no real-estate license, no MLS membership, and no book of leads. NO real lead book exists. All P0 evidence is synthetic by construction and labeled so. Fixture phone numbers are in the reserved fictional 555-01XX range. Path to real evidence = design partner (D4) at P1 + counsel (D3).

Counsel HARD GATE: TCPA + fair-housing counsel review sets the P1 RuleParameterSet + Screen vocabularies + pilot-state overlays before any P1 live outreach. P0 is synthetic only: no live sends, no live API keys, no real leads, no real CRM data, no real DNC registry access.

Related MCP server: Scout MCP

What it does

• Covenant Record — Herald-signed (simulator-mode HMAC) consent record per lead per mandate, hash-chained, with provenance class CERTIFIED_CAPTURE / SELF_CAPTURED / VENDOR_ASSERTED / LEGACY_UNVERIFIED — never blended; class degrades monotonically on failed evidence, rises only via a fresh verified certificate. VENDOR_ASSERTED defaults to mandate posture NARROW_FIRST_CONTACT_ONLY. LEGACY_UNVERIFIED permits no automated outreach.

• Covenant Gate — inside the contact tools themselves, at send time, in order: record exists under this mandate → per-channel scope (voice consent ≠ text consent → CONSENT_SCOPE_MISMATCH) → named-seller coverage → no open revocation (unresolved scope blocks all channels) → fresh DNC scrub at send (fixture lists loaded from disk per send) → fair-housing guards. First failure stops the pipeline; the transcript records NOT_RUN_UPSTREAM_REFUSAL for later steps.

• Covenant Pack — Blackbox-form evidence pack addressed to the broker of record: every send and every refusal sealed as a hash-chained, Herald-signed entry with its full check transcript.

• Covenant Screen — Copy Screen + Criteria Screen over a closed, versioned vocabulary: findings with spans, text returned unmodified, never silent rewrites. Canonical case: "young families near good schools" → PROTECTED_CRITERIA_REFUSED + PROXY_CRITERIA_REFUSED (proxy named).

• Consent Record Verifier (consent_record_verify) — offline RECORD/PACK verification on a separate code path: class-vs-evidence consistency, chain/signature checks, honor-deadline arithmetic re-checked under the rule version pinned at send time.

Design law (spec §3)

Consent/revocation rules are versioned data parameters, never code constants. All rule values live in data/rule_packs/SYNTHETIC_DEFAULT-v1.json (labeled SYNTHETIC_DEFAULT — NOT COUNSEL-SET): PEWC scope semantics, revocation keywords + plain-language set, 10-business-day honor window, single template-pinned clarification, revoke-all tail status (DELAYED_UNTIL_2027_01_31), vendor posture default, retention horizon. A rule change = a new pack version, never a code patch. Missing pack → RULE_PACK_UNAVAILABLE; pack past its data-carried stale_after → RULE_PACK_STALE (both fail closed). Certificates are evidence, never authorization.

Structural law (spec §9)

Never holds or redistributes MLS data; no scraping routes at any phase; no lead resale/transfer/pooling (LEAD_EXPORT_REFUSED, incl. deep-key-scanned argument shapes); no licensed acts (LICENSED_ACT_REFUSED); no consent manufacture; no bulk-send bypass, no skip_checks (GATE_BYPASS_REFUSED).

Follow Up Boss anchor — read the labels

FUB is the P0 CRM adapter shape (fub_adapter.py, local fixture stub over FUB surface nouns: people/events/calls/textMessages/tasks). Correction C1: the Follow Up Boss API does not place calls. outreach_call_place is a simulator dialer STUB at P0; live voice = P1 provider route. lead_context_read is fixture-only at P0 (correction C2). The live CRM Connector is P1, under a partner brokerage's own grant.

Tools (14, closed by enumeration)

Intake/record: lead_intake, consent_attach_certificate, consent_record_read, consent_history, revocation_record, lead_context_read · Outreach (the only send path): outreach_text, outreach_call_place, outreach_email, followup_sequence_plan, showing_schedule · Screens + verifier: copy_screen, criteria_screen, consent_record_verify.

Operator surface (disjoint, $ECLIPSE_COVENANT_SURFACE=operator): mandate_create, pack_retrieve, consent_record_verify — no operator tool touches a single send.

Run

python3 generate_fixtures.py          # 64 synthetic fixtures + cert registry
python3 -m unittest discover -s tests # test suite
python3 smoke.py                      # stdio surface smoke
ECLIPSE_COVENANT_STATE=/tmp/state.json python3 server.py

Stdlib only. No network code paths anywhere in the tree (test-enforced).