THE METHODS · THE CARD BENCH · Nº 434 · EDITION 2 · LAUNCHING SOON
LUND CARDS · THE METHODSNº 434
THE CARD AS TEXT · FOR EYES AND FOR MACHINES
THE PACKAGE CARD · The shelf-ready seat: a card folder packed into the one file a loader takes, the same bytes every time.
WAKES WHEN A card folder is finished and must become a .skill.zip. · A zip was rejected by a loader and nobody knows why. · Two zips of the same card differ by bytes and they should not. · A folder has a .env or a __pycache__ in it that must never ship.
THE LOOP
Check the folder: door, front matter, secrets
Pack: one top folder, fixed timestamps
Inspect the zip back
Say SAME or DIFFERENT between two
NEVER
Never packs a secret, by name or by content
Never packs a folder with no door
Never packs stray files like .DS_Store
Never claims a certainty it does not have
IT MAKES check — is the folder shelf-ready? NO DOOR, BAD FRONT MATTER, SECRET and STRAY (junk files) are refused; EMPTY DIR and LARGE are flagged; pack — write DIR_OUT/<name>.skill.zip, one top folder, deterministic bytes; refused on any check failure; inspect — read a package back: the top folder, the door's name and description, the file count and size; WRONG LAYOUT when there is no single top folder; same — are two packages the same content, entry for entry? SAME or DIFFERENT, with the first difference named; list — print every entry with its size.
THE LAW A package is one zip with one top folder named for the card, the door at its root with a name and a description, and nothing inside that should not leave the maker's machine. The same folder packs to the same bytes every time, so two people can prove they hold the same thing.
PROOF SELFTEST 14/14 · witnessed in Claude 2026-10-14 on fictional fixtures · the test prompts in fresh chat, 9/9 · Edition 2.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. LICENSE-NOTE.md rides in the packet and is the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 6E7A7E30A108B2C3750BE12A
CITE THIS CARDTHE PACKAGE CARD, Edition 2. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=package-card. Punch 6E7A7E30A108B2C3750BE12A. Retrieved 2026-10-14.
What it is.
Use when a card folder must become the one zip a shelf and an AI's skill loader take: layout, front matter, deterministic bytes, nothing secret or stray inside. Not for the edition number or the tin.
It carries a machine that shows its working: check — is the folder shelf-ready? NO DOOR, BAD FRONT MATTER, SECRET and STRAY (junk files) are refused; EMPTY DIR and LARGE are flagged; pack — write DIR_OUT/<name>.skill.zip, one top folder, deterministic bytes; refused on any check failure; inspect — read a package back: the top folder, the door's name and description, the file count and size; WRONG LAYOUT when there is no single top folder; same — are two packages the same content, entry for entry? SAME or DIFFERENT, with the first difference named; list — print every entry with its size — 14 checks in its selftest. It never packs a secret, by name or by content; never packs a folder with no door; never packs stray files like .DS_Store; never claims a certainty it does not have.
The law, written into the card.
It is in the card itself, so the AI follows it.
THE LAWA package is one zip with one top folder named for the card, the door at its root with a name and a description, and nothing inside that should not leave the maker's machine. The same folder packs to the same bytes every time, so two people can prove they hold the same thing.
The method.
Check the folder: SKILL.md at the root with front matter name (lower-case, digits, dashes) and description (1024 characters or fewer); no secret by name or content; no stray files or folders.
Pack: the machine writes <name>.skill.zip with entries sorted and timestamps fixed, so the bytes are the same every time.
Inspect the zip back: the top folder, the door's name and description, the count and the size; a zip with no single top folder is WRONG LAYOUT.
Compare two zips entry for entry when they should be the same; the first difference is named.
An EMPTY DIR is a flag (a zip cannot carry it); LARGE is a flag; everything else that fails refuses the pack.
What you bring.
The finished card folder.
The name the package takes, if not the folder's.
The loader's rules, if they differ from the ones here.
Planned as a separate seat, not in this box and not yet on sale: the packer the studio uses at every cut of its own cards.
What it does once your AI has it.
check Is the folder shelf-ready? NO DOOR, BAD FRONT MATTER, SECRET and STRAY (junk files) are refused; EMPTY DIR and LARGE are flagged
pack Write DIR_OUT/<name>.skill.zip, one top folder, deterministic bytes; refused on any check failure
inspect Read a package back: the top folder, the door's name and description, the file count and size; WRONG LAYOUT when there is no single top folder
same Are two packages the same content, entry for entry? SAME or DIFFERENT, with the first difference named
list Print every entry with its size
What it will never do.
It never packs a secret, by name or by content; never packs a folder with no door; never packs stray files like .DS_Store; never claims a certainty it does not have.
Where it hands off: The edition number and note → THE EDITION CARD; The tin that describes the box → THE TIN CARD; Proof the machine inside works → THE WITNESS CARD.
It is not a code-signing tool. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source. The holder brings their own AI; no endorsement by Anthropic or any other AI company is claimed.
What’s in the buy.
SKILL.md — the card your AI reads: when it wakes, the loop, the never-lines, the hand-offs.
CARD.md — the whole card in ten sections: face, law, method, machine, what you bring, never, tests, seal, term.
scripts/package.py — the machine, Python standard library only; `selftest` proves it on its own fixtures.
tests/EVALS.json and scripts/evals.py — 9 test prompts and the offline runner that scores your AI's answers.
references/ — the data schema and FICTIONAL demo files, invented to show the machine, not real.
MY-LEDGER.md — your own record of what you asked and what you decided.
START-HERE.md, system/short-prompt.md, system/rules.md — the doors, for any AI with or without skills.
card.svg, card.json, card.html, AUDIT.md, MANIFEST.md, WITNESS.md, SELFTEST.md — the faces and the proof.
NOT IN THE BOX — any studio edition (planned, not yet on sale: the packer the studio uses at every cut of its own cards). Also not in the box: any data you must bring, and advice of any kind (not a code-signing tool).
PROOF · SELFTEST 14/14 · WITNESSED IN CLAUDE 2026-10-14 ON FICTIONAL FIXTURES · THE 9 TEST PROMPTS ASKED IN A FRESH CHAT HOLDING ONLY THE CARD · 9/9 · EDITION 2 · PUNCH 6E7A7E30A108B2C3750BE12A
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 434 — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE CARD’S OWN SELFTEST.MD
package.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. The block below is pasted from the card’s own SELFTEST.md, as printed when it was run from inside the packet.
check
is the folder shelf-ready? NO DOOR, BAD FRONT MATTER, SECRET and STRAY (junk files) are refused; EMPTY DIR and LARGE are flagged
pack
write DIR_OUT/<name>.skill.zip, one top folder, deterministic bytes; refused on any check failure
inspect
read a package back: the top folder, the door's name and description, the file count and size; WRONG LAYOUT when there is no single top folder
same
are two packages the same content, entry for entry? SAME or DIFFERENT, with the first difference named
list
print every entry with its size
selftest
14 checks that prove the machine; it must print selftest 14/14
THE SELFTEST, AS PRINTED
pack <tmp> · 683 bytes · sha256 4a4b3e7518ca9d1a · 0 flags
pack <tmp> · 683 bytes · sha256 4a4b3e7518ca9d1a · 0 flags
inspect <tmp> · top folder example-card · name: example-card · description: Use when trying the packer. Not for anything real. · 4 files · 142 bytes
BAD FRONT MATTER: name 'Example Card' is not lower-case letters, digits and dashes
pack refused · <tmp> · fix the folder first
WRONG LAYOUT: a package is one top folder with everything inside it; this zip has SKILL.md
SAME · 4 entries, byte for byte
DIFFERENT: CARD.md only in <tmp>
ok 1 a clean card folder is shelf-ready
ok 2 pack writes <name>.skill.zip with one top folder and every file inside it
ok 3 packing the same folder twice gives the same bytes
ok 4 inspect reads the door's name and description back
ok 5 a secret file by its name is SECRET: refused
ok 6 a credential inside a text file is SECRET: refused
ok 7 junk files and folders are STRAY: refused
ok 8 a door with no front matter is BAD FRONT MATTER: refused
ok 9 a name with capitals or spaces is BAD FRONT MATTER
ok 10 pack exits 1 and writes nothing when the folder is refused
ok 11 an empty folder is EMPTY DIR, flagged not refused
ok 12 a zip with no single top folder is WRONG LAYOUT
ok 13 same says SAME for two identical packages
ok 14 same says DIFFERENT and names the first difference
selftest 14/14
THE RUN IS PASTED FROM THE CARD’S OWN SELFTEST.MD AS PRINTED. ITS FIXTURES ARE FICTIONAL, INVENTED FOR THE TEST; NO PRIVATE PERSON IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
The finished card folder. The name the package takes, if not the folder's. The loader's rules, if they differ from the ones here. If something it needs is missing, it says what is missing and stops there.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The machine's selftest (14/14), run from inside the packet in Claude on 2026-10-14 on fictional fixtures and pasted into SELFTEST.md as printed; the twelve-check audit (AUDIT.md). Owed, and said so in WITNESS.md: Any run on real data. Every demo file is fictional. The punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. LICENSE-NOTE.md rides in the packet and is the licence. It is not a code-signing tool.
What will it never do?
It never packs a secret, by name or by content; never packs a folder with no door; never packs stray files like .DS_Store; never claims a certainty it does not have.
