THE SIDESTUDIO CARD · the studio's box, its gate and its go-live
WAKES WHEN someone is shipping, selling or re-cutting SideStudio, or checking its box
THE LOOP
manifest · every file in the box hashed
verify · the box as it was cut
punch · SKILL.md against the record
gate · every device, every ground
golive · the next step, in order
NEVER
Sell what the seat does not open
Let a stranger pay before the test order
Type a seat's price
IT MAKES manifest — every file in the box, hashed; verify — missing, changed, or as cut; punch — the punch, against the record; gate — CLEAN, or HELD with every reason; golive — the eleven steps, the next one, and whether a stranger may pay.
THE STANDARD editions replace files; the punch is the door's; the gate holds the cut; test before a stranger pays; nothing renews unseen; no figure typed.
PROOF SELFTEST 8/8 · witnessed in Claude 2026-10-11 · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. THE-CLAUSES.md rides in the packet and is part of the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 5AC2FCC0658D2C3DBE21F7D8
CITE THIS CARDTHE SIDESTUDIO CARD, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=sidestudio-card. Punch 5AC2FCC0658D2C3DBE21F7D8. Retrieved 2026-10-11.
What it is.
SideStudio as a card, for the operator who deploys, sells or re-cuts it. manifest hashes every file in the box into MANIFEST.sha256; verify proves the box against it and names every file missing, changed or added after the cut; punch gives the punch, the first 24 of the SHA-256 of SKILL.md, and says whether it matches the record; gate reads a device gate's results (every device in every ground, faults, anything past a screen edge, rooms and tools opened) and holds the cut on any miss; golive walks the eleven go-live steps in order, from the payments and the four seats to the Worker, the webhook, the till, a zero-total test order per plan and Safari on a real iPhone, flags any step done out of order and says whether a stranger may pay yet.
It carries a machine that shows its working: manifest — every file in the box, hashed; verify — missing, changed, or as cut; punch — the punch, against the record; gate — CLEAN, or HELD with every reason; golive — the eleven steps, the next one, and whether a stranger may pay — 8 checks in its selftest, every command on the record. It will never sell what the seat does not open; never let a stranger pay before the test order; never type a seat's price.
Six laws, written into the card.
They are in the card itself, so the AI follows them.
EDITIONS REPLACE FILESA box is cut whole and proved against its manifest; a changed box is cut again, never patched in place.
THE PUNCH IS THE DOOR'SThe punch is the first 24 of the SHA-256 of SKILL.md; a packet whose door differs is not the one cut.
THE GATE HOLDS THE CUTEvery device in every ground, no fault, nothing past an edge, every room and tool; one miss holds it.
TEST BEFORE A STRANGER PAYSOne zero-total test order per plan comes before anyone is told the till is open.
NOTHING RENEWS UNSEENThe term line matches the plan, the policy is read and past counsel, and a lapse is never hidden.
NO FIGURE TYPEDThe seats' figures live in the store, never in this card.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE GUIDEreferences/THE-BOX-AND-THE-ROAD.md
THE MACHINEsidestudio.py · five commandsmanifest — every file in the box, hashed; verify — missing, changed, or as cut; punch — the punch, against the record; gate — CLEAN, or HELD with every reason; golive — the eleven steps, the next one, and whether a stranger may pay. Every command prints its working and refuses a bad input; 8 checks in its selftest, every command on the record.
What it does once your AI has it.
manifest Every file in the box, hashed
verify Missing, changed, or as cut
punch The punch, against the record
gate CLEAN, or HELD with every reason
golive The eleven steps, the next one, and whether a stranger may pay
On the record A three-file box is hashed and verifies, then fails on the one file changed after the cut; the demo door's punch matches itself and differs from the Edition 2 record 6EA086096C742798C72967DD; a 7-device, 2-ground gate is CLEAN, and one row with 3 past an edge and 26/27 rooms plus one unrun row hold it; with steps 1-4 and 9 marked, the till is flagged as opened while steps 5-8 are open, the next step is the Worker, and no stranger may pay yet.
What it will never do.
It will never sell what the seat does not open; never let a stranger pay before the test order; never type a seat's price.
This edition is the box keeper, not the studio: SideStudio itself (the one file, the hosted kit, the Worker, the storefront) rides with the seat and is not in this packet. A rebuild from the record of the Sep 13 and Oct 1 2026 cuts and the go-live order of Oct 2 2026: the manifest's form, the punch and the gate's rule are the record's. gate reads results; it runs no browser. golive tracks steps you mark done; it does not see the store. Not legal or financial advice: the terms go past counsel. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.
What’s in the buy.
CARD.md — the whole card: who it is, its laws, when it says no, what it carries · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-BOX-AND-THE-ROAD.md — the guide in references/, in the card's own voice
scripts/sidestudio.py — the machine: manifest · verify · punch · gate · golive, standard library only, selftest 8/8
WITNESS.md + SELFTEST.md — every command on the record, as it printed · MANIFEST.md, every file hashed · AUDIT.md, the twelve checks
MY-LEDGER.md — the card's memory, on your own machine · TIN.md · LICENSE-NOTE.md · THE-CLAUSES.md · HOSTS.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · the doors for ChatGPT, Gemini, Cursor, Claude Code and MCP hosts (rules/, system/, mcp/)
PROOF · SELFTEST 8/8 · 5 COMMANDS ON THE RECORD · WITNESSED IN CLAUDE 2026-10-11 · EDITION 1 · PUNCH 5AC2FCC0658D2C3DBE21F7D8
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 1166 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE WITNESSED RUN OF 2026-10-11
sidestudio.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. Every block below is pasted from the card’s own WITNESS.md, as printed.
manifest
every file in the box, hashed
verify
missing, changed, or as cut
punch
the punch, against the record
gate
CLEAN, or HELD with every reason
golive
the eleven steps, the next one, and whether a stranger may pay
selftest
8 checks that prove the machine; it must print 8/8
manifest · EVERY FILE IN THE BOX, HASHED
$ python3 scripts/sidestudio.py manifest box
MANIFEST.sha256 written: 3 files hashed, every one but itself
aeaaf0802257eccd… CARD.md
386a23b632752b98… SKILL.md
cc42155088fca573… scripts/check.py
verify · MISSING, CHANGED, OR AS CUT
$ python3 scripts/sidestudio.py verify box
3 match · 0 wrong
the box is as it was cut
punch · THE PUNCH, AGAINST THE RECORD
$ python3 scripts/sidestudio.py punch box/SKILL.md --expect 386A23B632752B9877919154
punch 386A23B632752B9877919154 · the first 24 of the SHA-256 of SKILL.md
MATCHES the record
punch · THE PUNCH, AGAINST THE RECORD
$ python3 scripts/sidestudio.py punch box/SKILL.md --expect 6EA086096C742798C72967DD
punch 386A23B632752B9877919154 · the first 24 of the SHA-256 of SKILL.md
DIFFERS from the record 6EA086096C742798C72967DD: this is not the SKILL.md that was cut
verify · MISSING, CHANGED, OR AS CUT
$ python3 scripts/sidestudio.py verify box
MISMATCH CARD.md
2 match · 1 wrong
the box is not as it was cut: re-cut it, never patch it in place
gate · CLEAN, OR HELD WITH EVERY REASON
$ python3 scripts/sidestudio.py gate gate-clean.json
ok iPhone 13 mini · day
ok iPhone 13 mini · night
ok iPhone 17 · day
ok iPhone 17 · night
ok iPhone 17 Pro Max · day
ok iPhone 17 Pro Max · night
ok iPad mini · day
ok iPad mini · night
ok iPad Air landscape · day
ok iPad Air landscape · night
ok MacBook 1280 · day
ok MacBook 1280 · night
ok Desktop 1440 · day
ok Desktop 1440 · night
7 devices × 2 grounds · 14 rows
CLEAN · the cut may go ahead
not proven by this gate: Safari (WebKit) on a real iPhone, and a live order
gate · CLEAN, OR HELD WITH EVERY REASON
$ python3 scripts/sidestudio.py gate gate-held.json
ok iPhone 13 mini · day
HELD iPhone 13 mini · night · 3 past a screen edge; rooms 26/27
ok iPhone 17 · day
ok iPhone 17 · night
ok iPhone 17 Pro Max · day
ok iPhone 17 Pro Max · night
ok iPad mini · day
ok iPad mini · night
ok iPad Air landscape · day
ok iPad Air landscape · night
ok MacBook 1280 · day
ok MacBook 1280 · night
ok Desktop 1440 · day
7 devices × 2 grounds · 13 rows
HELD · nothing is cut while the gate holds:
iPhone 13 mini, night ground: 3 past a screen edge
iPhone 13 mini, night ground: rooms 26/27
Desktop 1440 was not run in the night ground
golive · THE ELEVEN STEPS, THE NEXT ONE, AND WHETHER A STRANGER MAY PAY
$ python3 scripts/sidestudio.py golive done.txt
done 1 · Payments: the store's payments approved: the subscriptions app bills through them
done 2 · The four seats: imported as Draft with SKUs SS-SOLO, SS-PRO, SS-STUDIO, SS-TEAM, the card's file attached to each; the figures checked in the store, never typed here
done 3 · The plan: the subscriptions app installed, one plan named Monthly, billed every month, no discount, the four seats added
done 4 · The words: the subscription policy read (renews monthly, cancel any time from the account), and it and the seat terms past counsel
-- 5 · The Worker: deployed (v1.10) with its D1 database bound as DB and its secrets: the webhook key, the app origins, the session key, the five mail settings, the AI key for Pro and up
-- 6 · The webhook: Order payment, JSON, to the Worker's order address; its signing key is the Worker's webhook secret; every paid order extends the seat 30 days
-- 7 · The theme: Theme settings, SIDESTUDIO: the Worker's address, so the studio page lights its sign-in doors
-- 8 · The order email: the seat snippet pasted into the order confirmation, below the order summary
done 9 · The till: the four products Active on the online store and their handles live; the buttons turn to SUBSCRIBE
-- 10 · The test order: one zero-total test order per plan, straight away, before telling anyone: the plan on the order, the webhook delivered and the Worker's health answering, the seat email arrived, the seat seen on sign-in; then the test subscriptions cancelled
-- 11 · The iPhone: Safari on a real iPhone: the studio page opened, a few rooms and tools walked; the gate ran in Chromium only
OUT OF ORDER · step 9 (the till) is marked done while steps 5, 6, 7, 8 are open
next: step 5 · The Worker
a stranger may pay: not yet; steps 1 to 10 come first, the test order last of them
live and walked: not yet
THE NUMBERS, NAMES AND DATES IN THESE RUNS ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO REAL COMPANY, PERSON OR PROPERTY IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
Manifest · every file in the box hashed. It asks first for the box folder, its SKILL.md and the punch on record, the gate's results as JSON, and which go-live steps are done.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The self-test (8/8) and every command run on real example inputs, pasted into WITNESS.md as they printed; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file. This edition is the box keeper, not the studio: SideStudio itself (the one file, the hosted kit, the Worker, the storefront) rides with the seat and is not in this packet. A rebuild from the record of the Sep 13 and Oct 1 2026 cuts and the go-live order of Oct 2 2026: the manifest's form, the punch and the gate's rule are the record's. gate reads results; it runs no browser. golive tracks steps you mark done; it does not see the store. Not legal or financial advice: the terms go past counsel.
What will it never do?
It will never sell what the seat does not open; never let a stranger pay before the test order; never type a seat's price.
