THE INSTRUMENTS · Nº 912 · EDITION 1 · LAUNCHING SOON

LUND CARDS · THE INSTRUMENTSNº 912 PROPOSED

THE CARD AS TEXT · FOR EYES AND FOR MACHINES

THE HUMAN GATE · the acts that stop for a person, and the gap

WAKES WHEN someone asks what an agent must never do alone, or reviews a script for ungated actions

THE LOOP

humangate.py policy · the page, carried
scan · every gated action in the scripts
UNGATED → a gate, or the action goes
the gate names the specifics, this time
dry run by default; the real run on a yes

NEVER

Perform a gated action on a standing "yes"
Hide an action inside a shell string
Call "proceed?" a gate

IT MAKES list — the gated actions and the patterns that find them; scan — every gated action, with the line and whether a gate stands before it; policy — the gate policy as a page a skill can carry.

THE STANDARD six gates, by name; the yes is specific and this time; dry run is the default; found by pattern, judged by a person; a script's own outputs are not the question; documented under LIMITS.

IN THE BOX SKILL.md · CARD.md · TIN.md · START-HERE.md · LICENSE-NOTE.md · THE-CLAUSES.md · MY-LEDGER.md · WITNESS.md · SELFTEST.md · AUDIT.md · MANIFEST.md · HOSTS.md · scripts/humangate.py · references/THE-SIX-GATES.md · rules/ (4 doors) · system/ (2 prompts) · mcp/mcp_card.py · card.json · card.svg · card-machine.svg · card.html.

PROOF SELFTEST 10/10 · witnessed in Claude 2026-10-09 · Edition 1.

THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5

IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.

THE PUNCH · SHA-256 OF SKILL.MD · 573B931FB9E95D2A21BDDA1A

THE FACE, FULL SIZE → · THE MACHINE FACE → · card.json →

THE HUMAN GATE

the acts that stop for a person, and the gap

LIST · SCAN · POLICY

LEGENDARYWITNESSEDIN CLAUDE IN LUNDR IN CHATGPT

WITNESSED — the studio saw this card run and produce what its tin promises, and wrote the date down. What the marks mean →

THE SPEC SHEET · READ BEFORE YOU BUY · THE STANDARD EVERY CARD MEETS →

SEAL: 98 of 100 · LEGENDARY · WITNESSED
EDITION: E1 · witnessed 2026-10-09
MACHINE: scripts/humangate.py · 3 commands · selftest 10/10
RUNS: On your own computer. Standard library only, offline; no account, no key, no telemetry.
HOSTS: Claude · Claude Code · ChatGPT · Gemini · any AI that reads a file (HOSTS.md names each door)
LICENCE: One person, any number of their own AIs and computers · editions replace files · nothing renews · freeze, not loss
PUNCH: 573B931FB9E95D2A21BDDA1A · sha-256 of SKILL.md · check any file against it →

CITE THIS CARDTHE HUMAN GATE, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=human-gate-card. Punch 573B931FB9E95D2A21BDDA1A. Retrieved 2026-10-10.

What it is.

Keeps the standard list of actions an agent prepares but never performs without a person's yes — pay, delete, send, publish, sign, spend — as a policy page a skill can carry, and scans a skill's scripts for any such action (rmtree, DELETE FROM, smtplib, requests.post, stripe, git push, deploy, sign) with no gate within reach: no confirmation, no --yes flag, no dry run.

It carries a machine that shows its working: list — the gated actions and the patterns that find them; scan — every gated action, with the line and whether a gate stands before it; policy — the gate policy as a page a skill can carry — 10 checks in its selftest, every command on the record. It will never perform a gated action on a standing "yes"; never hide an action inside a shell string; never call "proceed?" a gate.

Six laws, written into the card.

They are in the card itself, so the AI follows them.

SIX GATES, BY NAMEPay, delete, send, publish, sign, spend. An agent prepares; a person performs, by saying yes.

THE YES IS SPECIFIC AND THIS TIME"Delete these 14 files?" with the list; a standing yes is not a gate.

DRY RUN IS THE DEFAULTThe real run is the exception that needed a yes.

FOUND BY PATTERN, JUDGED BY A PERSONThe scanner names the action and whether a gate stands near; the person decides if the gate is real.

A SCRIPT'S OWN OUTPUTS ARE NOT THE QUESTIONIts overwrites are listed, never counted.

DOCUMENTED UNDER LIMITSA skill that carries a gated action says so on its card and shows the gate in its scripts.

What rides in the card.

In the card’s own voice, with a machine that shows its working.

THE GUIDEreferences/THE-SIX-GATES.md

THE MACHINEhumangate.py · three commandslist — the gated actions and the patterns that find them; scan — every gated action, with the line and whether a gate stands before it; policy — the gate policy as a page a skill can carry. Every command prints its working and refuses a bad input; 10 checks in its selftest, every command on the record.

What it does once your AI has it.

list The gated actions and the patterns that find them
scan Every gated action, with the line and whether a gate stands before it
policy The gate policy as a page a skill can carry
On the record The six gates listed with their patterns; a skill scanned: an ungated rmtree and an ungated send named by line in one script, a gated rmtree seen as gated in the other and its own report write listed, never counted; the policy page written into the skill.

What it will never do.

It will never perform a gated action on a standing "yes"; never hide an action inside a shell string; never call "proceed?" a gate.

Pattern matching finds the common forms and misses an action hidden behind a wrapper of its own name; a gate twelve lines away is seen, one in another file is not. Prose inside triple-quoted strings is skipped; prose on a single line with an odd quote may be read as code. A person judges every UNGATED line. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.

What’s in the buy.

CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-SIX-GATES.md — the guide in references/, in the card's own voice
scripts/humangate.py — the machine: list · scan · policy, standard library only, selftest 10/10
WITNESS.md + SELFTEST.md — every command on the record, as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md · HOSTS.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor, Claude Code and MCP hosts (rules/, system/, mcp/)

PROOF · SELFTEST 10/10 · 3 COMMANDS ON THE RECORD · WITNESSED IN CLAUDE 2026-10-09 · EDITION 1 · PUNCH 573B931FB9E95D2A21BDDA1A

ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER

In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →

Take it.

Nº 912 PROPOSED — LAUNCHING SOON

Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →

ONE PAYMENT · NOTHING RENEWS ITSELF

OFFLINE · ONE LICENCE · PUNCH-CHECKABLE · THE STANDARD

One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.

A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.

THE MACHINE · IN THE OPEN · FROM THE WITNESSED RUN OF 2026-10-09

humangate.py, every command showing its working.

A small Python program, standard library only. Your AI runs it; you can too. Every block below is pasted from the card’s own WITNESS.md, as printed.

`list`	the gated actions and the patterns that find them
`scan`	every gated action, with the line and whether a gate stands before it
`policy`	the gate policy as a page a skill can carry
`selftest`	10 checks that prove the machine; it must print 10/10

list · THE GATED ACTIONS AND THE PATTERNS THAT FIND THEM

$ python3 scripts/humangate.py list
delete     \b(os\.remove|os\.unlink|os\.rmdir|shutil\.rmtree|rm\s+-rf?|rmdir|unlink\(|DELETE\s+FROM|DROP\s+TABLE|\.delete
send       \b(smtplib|sendmail|\.send_message\(|send_mail\(|requests\.post|urllib\.request\.urlopen|httpx\.post|fetch\(|s
pay        \b(stripe|paypal|charge\(|payment|checkout|invoice\.pay|transfer\(|wire|refund\()\b
publish    \b(publish|deploy|release|git\s+push|npm\s+publish|twine\s+upload|gh\s+release|shopify\s+theme\s+push|aws\s+s3
sign       \b(sign\(|signature|docusign|e-?sign|agree\(|accept_terms)\b
overwrite  \bopen\([^)]*,\s*['\"]w['\"]\)|shutil\.copy(?:2|file)?\(|os\.replace\(|os\.rename\(
gates: (?:\binput\(|\bconfirm\w*|--yes\b|--force-yes\b|\s-y\b|\bdry[_-]?run\b|--dry\b|\bask(?:_user|_first)?\(|\bapprov(?:ed?|al)\b|\bconsent\b|\bopt[_-]?in\b|if\s+not

scan · EVERY GATED ACTION, WITH THE LINE AND WHETHER A GATE STANDS BEFORE IT

$ python3 scripts/humangate.py scan skill --report gates.md
UNGATED  send       skill/scripts/clean.py:1 · import shutil, smtplib
UNGATED  delete     skill/scripts/clean.py:4 · shutil.rmtree(folder)
UNGATED  send       skill/scripts/clean.py:7 · s = smtplib.SMTP("mail.example")
UNGATED  send       skill/scripts/clean.py:8 · s.send_message(msg)
gated    delete     skill/scripts/safe.py:6 · shutil.rmtree(folder) (gate within reach)
2 scripts · 5 actions · 4 ungated · UNGATED
wrote gates.md

policy · THE GATE POLICY AS A PAGE A SKILL CAN CARRY

$ python3 scripts/humangate.py policy --out skill/GATES.md
wrote skill/GATES.md

THE NUMBERS, NAMES AND DATES IN THESE RUNS ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO REAL COMPANY, PERSON OR PROPERTY IS NAMED.

QUESTIONS AT THE TABLE

Asked before the wire.

What does it need from me?

Humangate.py policy · the page, carried. It asks first for the scripts, and the person who will say yes to each gated act with the specifics in front of them.

Does it send anything anywhere?

No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.

What is on the record?

The self-test (10/10) and every command run on real example inputs, pasted into WITNESS.md as they printed; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.

Can it be wrong?

Yes — it is an AI reading a text file. Pattern matching finds the common forms and misses an action hidden behind a wrapper of its own name; a gate twelve lines away is seen, one in another file is not. Prose inside triple-quoted strings is skipped; prose on a single line with an odd quote may be read as code. A person judges every UNGATED line.

What will it never do?

It will never perform a gated action on a standing "yes"; never hide an action inside a shell string; never call "proceed?" a gate.

← THE INSTRUMENTS · THE FLOOR →