THE NEURAL DATA CARD · brain data: read, kept, shared, never sold
WAKES WHEN someone asks what may be done with data read from a brain or nerves
THE LOOP
template · the six parts of a policy
write the device's own policy into it
check · each part PASS or FAIL
flow · one flow, allowed or not, and why
a consent per recipient, before it moves
NEVER
Let neural data be sold, consented or not
Pass sharing with "partners" or "affiliates"
Call a check legal or medical advice
IT MAKES check — the six parts, each PASS or FAIL with its reason; flow — allowed or not, with the rule that decides; template — a policy to start from.
THE STANDARD named purposes; raw stays home; kept for a time; one consent per recipient; never sold; deleted on request.
PROOF SELFTEST 8/8 · witnessed in Claude 2026-10-11 · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 7701D64E1A1694C38FD3E17E
CITE THIS CARDTHE NEURAL DATA CARD, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=neural-data-card. Punch 7701D64E1A1694C38FD3E17E. Retrieved 2026-10-11.
What it is.
The rules for data read from a brain-computer interface. It waits on consumer brain-computer interfaces; today it reads the policy of any device that measures the brain or nerves. check reads a written data policy for six parts: purposes named and limited (never advertising, insurance, employment or credit), raw signals kept on the device unless the person consents, a time limit on raw and on derived data, sharing only with named recipients each by explicit consent, a written ban on sale, and deletion on request within a set number of days. flow answers whether one proposed flow (the data, the recipient, the purpose, how long it is kept) is allowed under the policy, with the rule that decides; under a policy that fails its check, nothing flows. template writes a policy to start from. Not legal or medical advice.
It carries a machine that shows its working: check — the six parts, each PASS or FAIL with its reason; flow — allowed or not, with the rule that decides; template — a policy to start from — 8 checks in its selftest, every command on the record. It will never let neural data be sold, consented or not; never pass sharing with "partners" or "affiliates"; never call a check legal or medical advice.
Six laws, written into the card.
They are in the card itself, so the AI follows them.
NAMED PURPOSESThe data is used only for purposes the policy names; vague purposes fail, and advertising, insurance, employment and credit are never purposes.
RAW STAYS HOMERaw signals stay on the device unless the person consents, and leave only for recipients the policy names.
KEPT FOR A TIMERaw and derived data each have a limit in days, weeks, months or years; "as long as needed" is not a limit.
ONE CONSENT PER RECIPIENTSharing goes only to named recipients, each with the person's explicit consent; "partners" is not a recipient.
NEVER SOLDThe sale ban must be written, and no consent lifts it.
DELETED ON REQUESTOn the person's request, within a stated number of days; a policy whose deletion does not reach backups is named.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE GUIDEreferences/THE-NEURAL-POLICY.md
THE MACHINEneuraldata.py · three commandscheck — the six parts, each PASS or FAIL with its reason; flow — allowed or not, with the rule that decides; template — a policy to start from. Every command prints its working and refuses a bad input; 8 checks in its selftest, every command on the record.
What it does once your AI has it.
check The six parts, each PASS or FAIL with its reason
flow Allowed or not, with the rule that decides
template A policy to start from
On the record The template policy for a sleep headband passes all six parts. Derived data to the named sleep clinic for sleep staging is allowed with the wearer's consent and not without it; raw signals to a lab the policy does not name are not allowed even with consent; raw kept 30 days against a 7-day limit, a sale even with consent, and a purpose of mood-based ads are each refused with the rule that decides. A focus headset's policy fails all six parts, and under it no flow is allowed.
What it will never do.
It will never let neural data be sold, consented or not; never pass sharing with "partners" or "affiliates"; never call a check legal or medical advice.
It waits on consumer brain-computer interfaces; until then it reads the policies of devices that measure the brain or nerves today. It reads what a policy says, not what a device does, so it cannot see where data really goes. A month counts as 30 days and a year as 365. Its floor is stricter than some laws, and a law may ask for more. Not legal or medical advice. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.
What’s in the buy.
CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-NEURAL-POLICY.md — the guide in references/, in the card's own voice
scripts/neuraldata.py — the machine: check · flow · template, standard library only, selftest 8/8
WITNESS.md + SELFTEST.md — every command on the record, as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md · HOSTS.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor, Claude Code and MCP hosts (rules/, system/, mcp/)
PROOF · SELFTEST 8/8 · 3 COMMANDS ON THE RECORD · WITNESSED IN CLAUDE 2026-10-11 · EDITION 1 · PUNCH 7701D64E1A1694C38FD3E17E
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 1180 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE WITNESSED RUN OF 2026-10-11
neuraldata.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. Every block below is pasted from the card’s own WITNESS.md, as printed.
check
the six parts, each PASS or FAIL with its reason
flow
allowed or not, with the rule that decides
template
a policy to start from
selftest
8 checks that prove the machine; it must print 8/8
template · A POLICY TO START FROM
$ python3 scripts/neuraldata.py template --out policy.json
wrote policy.json · a policy for a sleep headband with all six parts; replace every value with your device's own
check · THE SIX PARTS, EACH PASS OR FAIL WITH ITS REASON
$ python3 scripts/neuraldata.py check policy.json
policy.json · a sleep headband · a neural data policy
PASS · purpose limits · 2 purposes: sleep staging for the wearer; a gentle alarm in light sleep
PASS · raw on the device · raw stays on the device, and leaves only for sleep clinic, with consent
PASS · retention limits · raw 7 days · derived 1 year (365 days)
PASS · sharing by consent · shared only with sleep clinic (raw, derived), each by explicit consent
PASS · sale ban · never sold, consented or not
PASS · deletion on request · on request, within 30 days · raw, derived, backups
PASS · 6 of 6 parts in place
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data derived --to sleep clinic --purpose sleep staging for the wearer --consented
policy.json · derived data → sleep clinic · for sleep staging for the wearer · consented
ALLOWED · sharing · sleep clinic is named for derived data for sleep staging for the wearer, with the person's explicit consent
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data derived --to sleep clinic --purpose sleep staging for the wearer
policy.json · derived data → sleep clinic · for sleep staging for the wearer · no consent given
NOT ALLOWED · consent · sharing with sleep clinic needs the person's explicit consent for sleep clinic, given before anything moves
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data raw --to research lab --purpose sleep staging for the wearer --consented
policy.json · raw data → research lab · for sleep staging for the wearer · consented
NOT ALLOWED · raw on the device · raw signals leave the device only for sleep clinic, with consent
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data raw --to device --purpose sleep staging for the wearer --keep 30 days
policy.json · raw data → device · for sleep staging for the wearer · no consent given · kept 30 days
NOT ALLOWED · retention · raw data is kept at most 7 days; 30 days is longer
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data derived --to sleep clinic --purpose sleep staging for the wearer --consented --sale
policy.json · derived data → sleep clinic · for sleep staging for the wearer · consented · for sale
NOT ALLOWED · sale · neural data is never sold, consented or not
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow policy.json --data derived --to device --purpose mood-based ads
policy.json · derived data → device · for mood-based ads · no consent given
NOT ALLOWED · purposes · "mood-based ads" is not a purpose the policy names (sleep staging for the wearer; a gentle alarm in light sleep)
a check of a written policy, not legal or medical advice
check · THE SIX PARTS, EACH PASS OR FAIL WITH ITS REASON
$ python3 scripts/neuraldata.py check headset.json
headset.json · a focus headset · a neural data policy
FAIL · purpose limits · too broad to limit anything: improve our services; name what it is for
FAIL · raw on the device · raw signals must stay on the device unless the person consents: write raw.on_device true
FAIL · retention limits · raw: "as long as needed" is not a period; write N days, weeks, months or years
FAIL · sharing by consent · "partners" is not a recipient: name each one, each with its own consent
FAIL · sale ban · no sale ban: write "sale": "never"; it must be there, not merely implied
FAIL · deletion on request · no time limit: say within how many days
FAIL · 6 of 6 parts to mend
a check of a written policy, not legal or medical advice
flow · ALLOWED OR NOT, WITH THE RULE THAT DECIDES
$ python3 scripts/neuraldata.py flow headset.json --data derived --to partners --purpose focus scores --consented
NOT ALLOWED · headset.json fails its own check (6 parts): no flow is allowed under it until they are mended
THE NUMBERS, NAMES AND DATES IN THESE RUNS ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO REAL COMPANY, PERSON OR PROPERTY IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
Template · the six parts of a policy. It asks first for the written data policy (purposes, where raw signals stay, how long raw and derived data are kept, each recipient with its consent, the sale line, deletion), and each proposed flow: the data, the recipient, the purpose and how long it is kept.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The self-test (8/8) and every command run on real example inputs, pasted into WITNESS.md as they printed; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file. It waits on consumer brain-computer interfaces; until then it reads the policies of devices that measure the brain or nerves today. It reads what a policy says, not what a device does, so it cannot see where data really goes. A month counts as 30 days and a year as 365. Its floor is stricter than some laws, and a law may ask for more. Not legal or medical advice.
What will it never do?
It will never let neural data be sold, consented or not; never pass sharing with "partners" or "affiliates"; never call a check legal or medical advice.
