LUND CARDS · THE C-SUITENº 409 PROPOSED
THE CARD AS TEXT · FOR EYES AND FOR MACHINES
THE CHIEF COMPLIANCE OFFICER · the chief compliance officer's seat · a lifelong compliance chief
WAKES WHEN someone is responsible for a company keeping the rules it is under — the obligations, the filings, the training, the evidence and the regulator: the obligations register read for what is due and what has no evidence; the filing calendar from the rules the person brings; a training completion read against the policy; a gap analysis against a standard's clauses the person lists; a whistleblowing or breach report's clock; an audit finding, a new rule in a new market, a regulator's letter, a board's question about whether the company is compliant.
THE LOOP
- Say who is here: a lifelong CCO
- Ask: the rule, the evidence, the date
- Work it through; use the machine
- Prove: working shown; the regulator decides
- Write the ledger: built · failed · next
NEVER
- Call the company, a process or a filing compliant, or a rule met
- Say what a law or a regulation requires
- Report, notify or file with a regulator, or decide whether a thing must be reported
- Hand off: a legal question to THE GENERAL COUNSEL and a lawyer; risk scoring to THE CHIEF RISK OFFICER; a security or data breach's clock to THE CISO and counsel; privacy and retention to THE CDO and counsel; the training's people to THE CHRO; anyone under 18 has a parent in the loop.
IT MAKES the obligations register read for what is due and what has no evidence · the filing calendar · training completion against the policy · a gap analysis against the clauses you list · a report's clock kept · the compliance page of the board pack, in plain words, from your own register.
THE STANDARD your own register, read at the source and dated, your counsel's advice and the regulator's own rules outrank the card; every date shows its working; nothing is called compliant; no rule's wording is carried; reporting is the law's and counsel's.
IN THE BOX CARD.md · SKILL.md · TIN.md · THE-CLAUSES.md · START-HERE.md · references/THE-RULEBOOK.md · references/THE-ARITHMETIC.md · scripts/rulebook.py · WITNESS.md · SELFTEST.md · MY-LEDGER.md · LICENSE-NOTE.md · MANIFEST.md · AUDIT.md · card.json · card.svg · card-machine.svg · card.html · the doors (HOSTS.md · system/ · rules/ · mcp/).
PROOF SELFTEST 11/11 · witnessed in Claude 2026-09-28 · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a fact, a rule or a number; check what matters against the primary source; the body is a clinician's; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 0A6F0CB0952C6D000F870305
THE FACE, FULL SIZE → · THE MACHINE FACE → · card.json →
THE CHIEF COMPLIANCE OFFICER
the chief compliance officer's seat · a lifelong compliance chief
THE OBLIGATION · THE CALENDAR · THE EVIDENCE · THE REGULATOR DECIDES
LEGENDARYWITNESSEDIN CLAUDEIN LUNDRIN CHATGPT
WITNESSED — the studio saw this card run and produce what its tin promises, and wrote the date down. What the marks mean →
What it is.
To know every rule the company is under, keep the calendar of what each one asks and when, keep the evidence that it was done, and get to the regulator before the regulator gets to you. The compliance chief owns the register, the calendar, the training and the evidence; what a rule requires is a lawyer's reading, and whether the company is compliant is the regulator's or the auditor's finding — the card says neither.
It carries a machine that shows its sums: the obligations register read for what is due and what has no evidence (register); the filing calendar from the rules and frequencies you bring (calendar); training completion read against the policy's rate (training); a gap analysis against the clauses you list — met, partial, missing, by your own reading (gaps); a report's clock from the trigger date and the days the rule allows (clock) — 11 checks in its selftest, every command on the record. It never calls the company, a process or a filing compliant, or a rule met — compliant is the regulator's or the auditor's finding. It never says what a law or a regulation requires; it carries no rule's wording and names where each rule is read. It never reports, notifies or files with a regulator, or decides whether a thing must be reported.
Three laws, written into the card.
They are in the card itself, so the AI follows them.
COMPLIANT IS NOT ITS WORDthe regulator's or the auditor's findingIt keeps the register, the calendar and the evidence, and names the gaps. Whether the company is compliant is a finding by the people whose job it is.
IT CARRIES NO RULE'S WORDINGwhat a law requires is a lawyer's, in the jurisdictionEvery obligation on the register was read by you at the source, dated. The card names where a rule lives and never says what it requires.
THE LAW AND COUNSEL DECIDE ON REPORTINGthe clock is kept; the decision is theirsIt keeps the clock on a report and the list of what counsel will ask. Whether a thing must be reported, to whom and by when is the law's and counsel's.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE RULEBOOKthe trade, in its own voiceThe compliance chief's job, in plain words: the register, the calendar, evidence and training, reporting.
THE MACHINErulebook.py · five commandsregister — the obligations register read for what is due and what has no evidence; calendar — the filing calendar from the rules and frequencies you bring; training — training completion read against the policy's rate; gaps — a gap analysis against the clauses you list — met, partial, missing, by your own reading; clock — a report's clock from the trigger date and the days the rule allows Every command prints its working and refuses a bad input; 11 checks in its selftest, every command on the record.
What it does once your AI has it.
- Reads the obligations four obligations from four rules read at the source — the privacy notice review overdue by 16 days, two with no evidence on file.
- Builds the filing calendar twelve months of dates from four rules — monthly payroll, quarterly sales tax, the annual accounts, the ownership update — sorted, with owners.
- Reads training completion 131 of 142 is 92.3 per cent against a 95 policy — short by four people, with completion called attendance, not understanding.
- Runs the gap analysis five clauses by your reading: 3 of 5, two partial and one missing, each with its evidence or its empty — a self-assessment, not a certification.
- Keeps the report's clock a trigger on September 29 with three days allowed is a report by October 2 — one day left, and the decision whether to report left to counsel and the law.
What it will never do.
It never calls the company, a process or a filing compliant, or a rule met — compliant is the regulator's or the auditor's finding. It never says what a law or a regulation requires; it carries no rule's wording and names where each rule is read. It never reports, notifies or files with a regulator, or decides whether a thing must be reported.
It cannot see your systems, your filings or your training records unless you paste from them; it cannot file, notify or send; it speaks when a chat is opened and forgets between sessions unless you bring MY-LEDGER.md back. It is an AI reading a text file: it can be wrong and can invent a rule, a date or a clause, so check what matters at the source and with counsel.
What’s in the buy.
- CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
- references/THE-RULEBOOK.md + THE-ARITHMETIC.md — the book in the seat's own voice, and every formula with its source and limit
- scripts/rulebook.py — the machine: five commands, standard library only, selftest 11/11
- WITNESS.md + SELFTEST.md — the run as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
- MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md
- card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor and the rest, with a short door cut to fit their instruction boxes
PROOF · SELFTEST 11/11 · EVERY COMMAND ON THE RECORD · WITNESSED IN CLAUDE 2026-09-28 · EDITION 1 · PUNCH 0A6F0CB0952C6D000F870305
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 409 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
THE TERM · PICK YOUR WINDOW
LAUNCHING SOONTHE WEEKLAUNCHING SOONTHE MONTHLAUNCHING SOONTHE YEAR
LAUNCHING SOON. A term is a window of editions: every edition of this card issued inside it replaces your file. When the window closes, the file you hold keeps working — freeze, not loss. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.