THE FORD CARD · one book under a till and a web store
WAKES WHEN someone sells at a till and on a web store, and keeps two counts, or oversold the last one
THE LOOP
match · both catalogues, one book
ring · every sale, refund and count
set each side to what the book says
close · each payout, entry by entry
verify, journal, export: the book leaves
NEVER
Move money or push stock itself
Take a sale the book cannot cover
Overwrite a count without a line
IT MAKES match — items paired, the book opened; ring — every sale, refund and count written; what each side should show; close — a payout matched entry by entry, closed or left open with the reasons; verify — the chain re-read and the stock recounted; journal — balanced entries per side and day, and per payout; export — the whole book, every line with its hash.
THE STANDARD one book; the fee on the line; never below zero; the last unit has one door; witnessed; closed means found.
PROOF SELFTEST 8/8 · witnessed in Claude 2026-10-11 · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 3BB6DCB980C329A52D3A7AA9
CITE THIS CARDTHE FORD CARD, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=ford-card. Punch 3BB6DCB980C329A52D3A7AA9. Retrieved 2026-10-11.
What it is.
One book for a shop that sells at a counter till (Square, say) and on a web store (Shopify, say). match reads both catalogue exports, pairs items by SKU and then barcode, names what is on one side only, and opens the book; ring writes every sale, refund and count from either side as a hash-chained line with the fee the platform reported (or a list rate, marked so), keeps one stock number, refuses a sale the book cannot cover, and keeps the last unit on one side so it cannot sell twice; close matches a payout entry by entry and closes only when every entry finds its line; verify proves the chain and recounts the stock; journal writes balanced daily entries; export hands the whole book back.
It carries a machine that shows its working: match — items paired, the book opened; ring — every sale, refund and count written; what each side should show; close — a payout matched entry by entry, closed or left open with the reasons; verify — the chain re-read and the stock recounted; journal — balanced entries per side and day, and per payout; export — the whole book, every line with its hash — 8 checks in its selftest, every command on the record. It will never move money or push stock itself; never take a sale the book cannot cover; never overwrite a count without a line.
Six laws, written into the card.
They are in the card itself, so the AI follows them.
ONE BOOKBoth sides write to one ledger; stock is one number, and each side is told what to show.
THE FEE ON THE LINEEach line carries the fee the platform reported; a list rate is used only when it says nothing, and marked so.
NEVER BELOW ZEROA sale the book cannot cover is refused and written down with its money; no stock moves.
THE LAST UNIT HAS ONE DOORAt one unit the keeper side holds it and the other shows 0 until the stock moves.
WITNESSEDEvery line carries the hash of the one before; a changed cent breaks the chain at that line.
CLOSED MEANS FOUNDA payout closes only when every entry finds its line to the cent, and no event is paid out twice.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE GUIDEreferences/THE-FORD.md
THE MACHINEford.py · six commandsmatch — items paired, the book opened; ring — every sale, refund and count written; what each side should show; close — a payout matched entry by entry, closed or left open with the reasons; verify — the chain re-read and the stock recounted; journal — balanced entries per side and day, and per payout; export — the whole book, every line with its hash. Every command prints its working and refuses a bad input; 8 checks in its selftest, every command on the record.
What it does once your AI has it.
match Items paired, the book opened
ring Every sale, refund and count written; what each side should show
close A payout matched entry by entry, closed or left open with the reasons
verify The chain re-read and the stock recounted
journal Balanced entries per side and day, and per payout
export The whole book, every line with its hash
On the record Two items matched (the mug by SKU, the cap by barcode, opened at the lower count 5); a mug sold on the site left one, kept at the till, so a second site sale was refused with its 1.00 list-rate fee marked; a count of 6 at the till became a +2 line; payouts of 49.84 and 20.46 closed, one paying s-101 again stayed open; one cent changed on line 3 broke the chain at line 3.
What it will never do.
It will never move money or push stock itself; never take a sale the book cannot cover; never overwrite a count without a line.
A rebuild, on the standard library, of the bridge recorded on 9 and 10 Sept 2026, which was an app built for a web store and never connected to a live account; this edition works on files you export and proves itself with its own eight checks. It never connects to a till, a store or a bank, never moves money and never pushes stock: it says what each side should show, and you set it. One location per side; the app's grace window before a count, its signed daily heads and its history backfill are not rebuilt. The journal is for a bookkeeper to review, not accounting or tax advice. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.
What’s in the buy.
CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-FORD.md — the guide in references/, in the card's own voice
scripts/ford.py — the machine: match · ring · close · verify · journal · export, standard library only, selftest 8/8
WITNESS.md + SELFTEST.md — every command on the record, as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md · HOSTS.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor, Claude Code and MCP hosts (rules/, system/, mcp/)
PROOF · SELFTEST 8/8 · 6 COMMANDS ON THE RECORD · WITNESSED IN CLAUDE 2026-10-11 · EDITION 1 · PUNCH 3BB6DCB980C329A52D3A7AA9
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 251 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE WITNESSED RUN OF 2026-10-11
ford.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. Every block below is pasted from the card’s own WITNESS.md, as printed.
match
items paired, the book opened
ring
every sale, refund and count written; what each side should show
close
a payout matched entry by entry, closed or left open with the reasons
verify
the chain re-read and the stock recounted
journal
balanced entries per side and day, and per payout
export
the whole book, every line with its hash
selftest
8 checks that prove the machine; it must print 8/8
match · ITEMS PAIRED, THE BOOK OPENED
$ python3 scripts/ford.py match till.csv site.csv --book book.json
match · 2 items on both banks · opening count: lower
MUG-1 Stoneware mug by sku till 2 · site 2 → the book opens at 2
CAP-2 Run cap by barcode till 5 · site 6 → the book opens at 5 (the counts differ)
on the till only: PIN-3 Enamel pin
on the site only: TEE-9 Logo tee
wrote book.json · 2 lines · the last-unit law is on, keeper the till
ring · EVERY SALE, REFUND AND COUNT WRITTEN; WHAT EACH SIDE SHOULD SHOW
$ python3 scripts/ford.py ring book.json events.csv --list site=2.9+30
SALE s-101 MUG-1 ×1 on the site · gross USD 24.00 tax USD 1.92 fee USD 1.00 (reported) · net USD 24.92 · stock 1
HOLD MUG-1: the last unit is kept at the till; the site shows 0
REFUSED s-102 MUG-1 ×1 on the site: the last unit is kept at the till; the money is written (fee USD 1.00, list rate), no stock moved
SALE t-201 CAP-2 ×2 on the till · gross USD 40.00 tax USD 3.20 fee USD 1.14 (reported) · net USD 42.06 · stock 3
REFUND t-202 CAP-2 on the till · USD 21.60 back to the buyer · 1 unit restocked · stock 4
COUNT t-203 CAP-2: the till showed 6 where the book said 4; +2 written as a count line, stock 6
SKIP s-101 already in the book: an event is rung once
what each bank should show now (the machine pushes nothing; set these by hand or through your connector):
CAP-2 book 6 · till 6 · site 6
MUG-1 book 1 · till 1 · site 0 · last unit kept at the till
8 lines in the book · head b810913443f7f484
close · A PAYOUT MATCHED ENTRY BY ENTRY, CLOSED OR LEFT OPEN WITH THE REASONS
$ python3 scripts/ford.py close book.json payout.csv
payout po-77 on the site · USD 49.84 · CLOSED: every entry found its line
payout po-78 on the till · USD 20.46 · CLOSED: every entry found its line
close · A PAYOUT MATCHED ENTRY BY ENTRY, CLOSED OR LEFT OPEN WITH THE REASONS
$ python3 scripts/ford.py close book.json payout-79.csv
payout po-79 on the site · USD 29.90 · OPEN: nothing written until every entry finds its line
s-101 was paid out already, in po-77
s-999 finds no line on the site
verify · THE CHAIN RE-READ AND THE STOCK RECOUNTED
$ python3 scripts/ford.py verify book.json
PASS · 10 lines, the chain whole from the first line to the head 8bada4ca7e07fa05; the recount agrees on 2 items
journal · BALANCED ENTRIES PER SIDE AND DAY, AND PER PAYOUT
$ python3 scripts/ford.py journal book.json --out journal.csv
2026-10-01 · site · sales of the day · debits USD 51.84 = credits USD 51.84
clearing · site USD 49.84
fees · site USD 2.00
sales · site USD 48.00
tax collected · site USD 3.84
2026-10-01 · till · sales of the day · debits USD 21.60 = credits USD 21.60
clearing · till USD 20.46
fees · till USD 1.14
sales · till USD 20.00
tax collected · till USD 1.60
2026-10-03 · site · payout po-77 · debits USD 49.84 = credits USD 49.84
bank account USD 49.84
clearing · site USD 49.84
2026-10-03 · till · payout po-78 · debits USD 20.46 = credits USD 20.46
bank account USD 20.46
clearing · till USD 20.46
wrote journal.csv · 4 entries, for the bookkeeper to review and import
export · THE WHOLE BOOK, EVERY LINE WITH ITS HASH
$ python3 scripts/ford.py export book.json --out book.csv
wrote book.csv · 10 lines, every one with its hash and the one before it · chain whole
verify · THE CHAIN RE-READ AND THE STOCK RECOUNTED
$ python3 scripts/ford.py verify tampered.json
FAIL · the chain breaks at line 3 (sale s-101): it was changed after it was written
THE NUMBERS, NAMES AND DATES IN THESE RUNS ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO REAL COMPANY, PERSON OR PROPERTY IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
Match · both catalogues, one book. It asks first for the till's and the web store's catalogue exports (sku, barcode, name, stock), their sales, refunds and counts as CSV, and each payout's entries.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The self-test (8/8) and every command run on real example inputs, pasted into WITNESS.md as they printed; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file. A rebuild, on the standard library, of the bridge recorded on 9 and 10 Sept 2026, which was an app built for a web store and never connected to a live account; this edition works on files you export and proves itself with its own eight checks. It never connects to a till, a store or a bank, never moves money and never pushes stock: it says what each side should show, and you set it. One location per side; the app's grace window before a count, its signed daily heads and its history backfill are not rebuilt. The journal is for a bookkeeper to review, not accounting or tax advice.
What will it never do?
It will never move money or push stock itself; never take a sale the book cannot cover; never overwrite a count without a line.
