WAKES WHEN a maker must seal a packet so anyone can verify who pressed it, with hashes alone
THE LOOP
Name the card; ask whose signet, and whether it is minted yet — if not, the maker mints it on their own machine
Run `signet.py press <packet> --key signet.key` as the last step before the zip is cut
Publish signet.pub (the root) where buyers can find it; never the key
A buyer runs `signet.py verify <packet.zip> --pub signet.pub`
When the seals run out, mint again and publish the new root beside the old
NEVER
Refuse to mint a maker's real signet inside a chat or on a shared machine; the demonstration signet is a demonstration — THE PUNCH CARD proves the packet, this card proves the hand
Refuse to reuse a seal, whatever the reason given
Refuse to say a sealed card is a good card; a seal proves authorship, nothing more
Refuse to invent proof, prices, quotes or numbers
IN THE BOX
PROOF
THE PUNCH · SHA-256 OF SKILL.MD · 8407F632DAC4B7D769D9D8DA
WITNESSED — the studio saw this card run and produce what its tin promises, and wrote the date down. What the marks mean →
What it is.
THE PUNCH proves a packet is intact; the signet proves who pressed it. A maker mints a signet — a seed they keep, and a public root anyone may hold. Each seal is a one-time Lamport signature under that root, hashes only, no library and no key exchange, so a buyer verifies with nothing but Python and nobody without the seed can press one. The Card Table’s door: PUNCH HOLDS and SIGNET HOLDS, or the card is not on the shelf. The card carries signet.py, the machine, with a selftest that builds its own fixture, and audit.py, the packet’s own gate.
Hash-based one-time seals: each signet carries a fixed number (64 by default) and each pressing spends one; a lost key file loses the count and the seals with it. The root proves "sealed by whoever holds this seed"; binding a root to a name is the marketplace’s register, not the mathematics. No revocation; a leaked seed means a new signet, published beside a notice. Signatures are about 16 KB.
What’s in the buy.
scripts/signet.py — the machine (press · verify)
scripts/audit.py — the packet’s own gate
CARD.md · SKILL.md · TIN · LICENCE + LEDGER · MANIFEST, every file hashed · the two faces, card.json, card.html
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
This card is an Agent Skill on the open standard: the same folder loads unmodified in Claude, ChatGPT and Codex, Copilot and VS Code, Cursor, Gemini CLI, Goose, OpenCode and the rest of the showcase. Its words are Markdown, so any chat with an instructions box holds them, any local model runs them offline, and any MCP client can load them — THE UNIVERSAL CUT: a pasteable system card, the rules-file family, an Ollama Modelfile, an MCP server, all cut from this card’s own SKILL.md by THE CARD FORGE. The universal cut is in this card’s box. And card.html — the card as one file for your computer: both faces, the tin, the words, every door; offline, in any browser. The machines aboard run wherever the host can run Python; the words run everywhere. The host marks →
Take it.
Nº 104 · PROPOSED —LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not legal, tax, medical or financial advice. The terms →
LAUNCHING SOON
THE TERM LADDER · PICK YOUR WINDOW
LAUNCHING SOONTHE WEEKLAUNCHING SOONTHE MONTHLAUNCHING SOONTHE YEAR
A term is a window of editions: every edition of this card issued inside it replaces your file. When the window closes, the file you hold keeps working — freeze, not loss. Nothing auto-renews; come back and take another term when you want the next editions.
