Every packet, read before it ships.

What THE PACKET WATCH found in every packet in hand — the reaches, the patterns, the hosts, the punch — and the studio's reading of each one it held.

Before a packet ships, THE PACKET WATCH reads it: what its machine reaches for (the network, a shell, eval, the home folder, deletes), what rides in its files (a secret, a key, a build path, a price, a forbidden word), what the zip itself does, and whether the punch agrees with the record. This page is that reading for every packet in hand on 2026-10-10 — 733 packets: 32 CLEAN, 675 NAMED (a reach the card declares on its face, or the house's own MCP door starting the card's script), 26 HELD (read by hand before shipping; the reading is in the last column). The watch reads words; it does not run a machine, and a machine can do what its words do not say — so run THE PACKET SCAN CARD on anything you download, ours included. "Secret" means a pattern that looks like one: every one listed is a test number or an example address in a card's own fixtures, as the reading says. In the last column, door means the only reaches are the house's own: the MCP door starting the card's script, and a selftest removing its own scratch folder.

The posture, in one place

• Standard-library Python only; no third-party package, no network module in a card's machine unless the card's face says so.
• No account, no key, no server, no telemetry; a packet sends nothing anywhere.
• The punch on every face is the SHA-256 of SKILL.md; check any file against it in the browser, offline.
• The MCP door (mcp/mcp_card.py) starts the card's own script and nothing else; a selftest writes and removes only its own scratch folder.
• Every packet in hand is read again before each upload zip is cut; this page is re-cut with it.