THE ACCESS CARD · every door opened, so each can be closed
WAKES WHEN someone joins, changes role or leaves, or access is reviewed
THE LOOP
grant · person, system, level, by, review
held · what is open now
review · past their date, longest first
leaver --person · every door to close
revoke · each door, on the day
NEVER
Write a password, a key or a token
Close a door that was never opened
Leave a leaver's door open
IT MAKES grant — an access written; revoke — one closed; held — what is open now, by person; leaver — every door to close on the last day; review — grants past their review date.
THE STANDARD every door written down; never the key; every grant is reviewed; the leaver's list is complete; appends only; the card records; it does not reach.
PROOF SELFTEST 8/8 · witnessed in Claude 2026-10-10 · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.
THE PUNCH · SHA-256 OF SKILL.MD · FF82B41883DC90BF173CC859
CITE THIS CARDTHE ACCESS CARD, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=access-card. Punch FF82B41883DC90BF173CC859. Retrieved 2026-10-10.
What it is.
Keeps the record of every door opened for a colleague so each can be closed: grant writes an access — person, system, level, who granted it, the date and when to review it; revoke closes one, and refuses to close a door that is not open; held lists what is open now, by person; leaver lists every access a person still holds, to close on their last day; review names every grant past its review date, the longest overdue first. The ledger appends only and refuses anything that looks like a password, a key or a token.
It carries a machine that shows its working: grant — an access written; revoke — one closed; held — what is open now, by person; leaver — every door to close on the last day; review — grants past their review date — 8 checks in its selftest, every command on the record. It will never write a password, a key or a token; never close a door that was never opened; never leave a leaver's door open.
Six laws, written into the card.
They are in the card itself, so the AI follows them.
EVERY DOOR WRITTEN DOWNAn access that is not in the ledger cannot be closed on time; the grant is written when the door is opened.
NEVER THE KEYThe ledger records that a door is open; it refuses anything that looks like a password, a key or a token.
EVERY GRANT IS REVIEWEDNinety days by default; a grant past its review is named, the longest overdue first.
THE LEAVER'S LIST IS COMPLETEEvery access still open for a person is listed for their last day.
APPENDS ONLYA revoke is a new line; nothing is rewritten, so the history stands.
THE CARD RECORDS; IT DOES NOT REACHIt opens and closes nothing in any system; people do, and write it here.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE GUIDEreferences/THE-ONBOARDING-TEAM.md
THE MACHINEaccess.py · five commandsgrant — an access written; revoke — one closed; held — what is open now, by person; leaver — every door to close on the last day; review — grants past their review date. Every command prints its working and refuses a bad input; 8 checks in its selftest, every command on the record.
What it does once your AI has it.
grant An access written
revoke One closed
held What is open now, by person
leaver Every door to close on the last day
review Grants past their review date
On the record Three doors written as they were opened; what is open now, by person; the review named the admin grant past its date and the thirty-day one just past; the admin door closed; the leaver's list named the two doors to close on the last day.
What it will never do.
It will never write a password, a key or a token; never close a door that was never opened; never leave a leaver's door open.
The ledger knows the doors people wrote into it; an access granted and not written is not on any list. It does not connect to any system or check what is really open there — compare the leaver's list with each system's own users. The secret check refuses the common forms; it is a guard, not a vault. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.
What’s in the buy.
CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-ONBOARDING-TEAM.md — the guide in references/, in the card's own voice
scripts/access.py — the machine: grant · revoke · held · leaver · review, standard library only, selftest 8/8
WITNESS.md + SELFTEST.md — every command on the record, as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md · HOSTS.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor, Claude Code and MCP hosts (rules/, system/, mcp/)
PROOF · SELFTEST 8/8 · 5 COMMANDS ON THE RECORD · WITNESSED IN CLAUDE 2026-10-10 · EDITION 1 · PUNCH FF82B41883DC90BF173CC859
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 1100 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE WITNESSED RUN OF 2026-10-10
access.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. Every block below is pasted from the card’s own WITNESS.md, as printed.
grant
an access written
revoke
one closed
held
what is open now, by person
leaver
every door to close on the last day
review
grants past their review date
selftest
8 checks that prove the machine; it must print 8/8
grant · AN ACCESS WRITTEN
$ python3 scripts/access.py grant ledger.jsonl --person new pastry cook --system rota app --level staff --by head baker --date 2026-11-02
granted: new pastry cook · rota app · staff · by head baker on 2026-11-02 · review in 90 days
grant · AN ACCESS WRITTEN
$ python3 scripts/access.py grant ledger.jsonl --person new pastry cook --system order screen --level staff --by head baker --date 2026-11-02 --review 30
granted: new pastry cook · order screen · staff · by head baker on 2026-11-02 · review in 30 days
grant · AN ACCESS WRITTEN
$ python3 scripts/access.py grant ledger.jsonl --person shift lead --system order screen --level admin --by operations lead --date 2026-06-01
granted: shift lead · order screen · admin · by operations lead on 2026-06-01 · review in 90 days
held · WHAT IS OPEN NOW, BY PERSON
$ python3 scripts/access.py held ledger.jsonl
new pastry cook · rota app (staff) · order screen (staff)
shift lead · order screen (admin)
3 open doors · 2 people
review · GRANTS PAST THEIR REVIEW DATE
$ python3 scripts/access.py review ledger.jsonl --today 2026-12-05
REVIEW · shift lead · order screen (admin) · granted 2026-06-01 by operations lead · 97 days past review
REVIEW · new pastry cook · order screen (staff) · granted 2026-11-02 by head baker · 3 days past review
2 of 3 open doors past their review
revoke · ONE CLOSED
$ python3 scripts/access.py revoke ledger.jsonl --person shift lead --system order screen --by operations lead --date 2026-12-05
revoked: shift lead · order screen · by operations lead on 2026-12-05
leaver · EVERY DOOR TO CLOSE ON THE LAST DAY
$ python3 scripts/access.py leaver ledger.jsonl --person new pastry cook
[ ] close rota app (staff) · granted by head baker on 2026-11-02
[ ] close order screen (staff) · granted by head baker on 2026-11-02
2 doors to close for new pastry cook on the last day
THE NUMBERS, NAMES AND DATES IN THESE RUNS ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO REAL COMPANY, PERSON OR PROPERTY IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
Grant · person, system, level, by, review. It asks first for each access as it is granted — the person (or their role), the system, the level, who granted it.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The self-test (8/8) and every command run on real example inputs, pasted into WITNESS.md as they printed; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file. The ledger knows the doors people wrote into it; an access granted and not written is not on any list. It does not connect to any system or check what is really open there — compare the leaver's list with each system's own users. The secret check refuses the common forms; it is a guard, not a vault.
What will it never do?
It will never write a password, a key or a token; never close a door that was never opened; never leave a leaver's door open.
