LUND CARDS · OUTSIDE THE DECKNº 297 PROPOSED
THE CARD AS TEXT · FOR EYES AND FOR MACHINES
THE TILL CARD · sell files on your own shop, no apps
WAKES WHEN a maker sells digital files on a Shopify store with no delivery app: every buy button behind one switch until its product is proven; each file sealed under its product's key; the order email carrying the link, the key and the hash; the buyer opening it offline; one product walked through the six stations from packet to live.
THE LOOP
- Name the card; ask which shop, which file
- Walk the six stations for one product
- seal.py: keygen · pack · the ledger line
- Prove: a test order, OPEN.html, the hash
- Flip it live; write the ledger line
NEVER
- Types a key, a token or a customer's data into a chat — keys are cut on the maker's own machine
- Flips a product live before a test order has opened
- Calls the seal copy protection — it keeps a public link useless without the key, nothing more
- Invents a price, a tax rule or a refund right — an accountant's and counsel's
IN THE BOX
- scripts/seal.py · the machine
- OPEN.html · the buyer's opener
- ORDER-WIRE.liquid · the email
- references/ · six stations
- WITNESS.md · SELFTEST 4/4
PROOF SELFTEST 4/4 · A FILE SEALED BY PYTHON OPENED BY THE BROWSER'S OWN CODE, HASH FOR HASH · WITNESSED IN CLAUDE 2026-09-17
THE PUNCH · SHA-256 OF SKILL.MD · 1B36D46558C887E33647DA3F
THE FACE, FULL SIZE → · THE MACHINE FACE → · card.json →
THE TILL CARD
sell files on your own shop, no apps
ONE SWITCH · SIX STATIONS · A SEALED FILE · NO APPS
LEGENDARYWITNESSEDIN CLAUDEIN LUNDRIN CHATGPT
WITNESSED — the studio saw this card run and produce what its tin promises, and wrote the date down. What the marks mean →
What it is.
The framework for selling a digital file on a Shopify store with nothing installed — the one this house sells its own cards with. Three things make a sale: the packet, the listing and the wire, and none is complete until all three are. The card carries the switch that keeps every buy button reading COMING SOON until its product is proven, the seal that lets a file sit on a public link and be noise without its key, the order-confirmation block that prints each buyer their link, key and hash from the product itself, the offline opener, and the six stations every product walks before it is flipped live.
WAKES WHEN a maker sells digital files on a Shopify store with no delivery app: every buy button behind one switch until its product is proven; each file sealed under its product's key; the order email carrying the link, the key and the hash; the buyer opening it offline; one product walked through the six stations from packet to live.
The loop.
- Name the card; ask which shop, which file
- Walk the six stations for one product
- seal.py: keygen · pack · the ledger line
- Prove: a test order, OPEN.html, the hash
- Flip it live; write the ledger line
It makes.
- the switch in a theme
- a sealed packet and its ledger line
- the order-confirmation wire
- the buyer's opener
- one product walked through the six stations
Never.
- Types a key, a token or a customer's data into a chat — keys are cut on the maker's own machine
- Flips a product live before a test order has opened
- Calls the seal copy protection — it keeps a public link useless without the key, nothing more
- Invents a price, a tax rule or a refund right — an accountant's and counsel's
What’s in the buy.
- scripts/seal.py — keygen · pack · open · selftest 4/4 (AES-256-GCM, the key stretched by PBKDF2) · scripts/open-proof.mjs + open-core.js — the browser’s own code, provable in node
- assets/OPEN.html — the buyer’s offline opener · assets/ORDER-WIRE.liquid — the order-confirmation block · assets/products-wire-TEMPLATE.csv
- references/THE-SIX-STATIONS.md · THE-SWITCH.md — the settings and the Liquid guard · THE-METAFIELDS.md
- CARD.md + SKILL.md · TIN · LICENCE + LEDGER · MANIFEST, every file hashed · AUDIT, the twelve checks · the two faces, card.json, card.html · the doors for other hosts
YOU NEED a Shopify store; Python 3.8+ with the cryptography package for seal.py; any modern browser for the opener. One key per product, the same for every buyer — it is not copy protection, and the card says so.
PROOF · SELFTEST 4/4 · A FILE SEALED BY PYTHON OPENED BY THE BROWSER'S OWN CODE, HASH FOR HASH · WITNESSED IN CLAUDE 2026-09-17 · PUNCH 1B36D46558C887E33647DA3F
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
This card is an Agent Skill on the open standard: the same folder loads unmodified in Claude, ChatGPT and Codex, Copilot and VS Code, Cursor, Gemini CLI, Goose, OpenCode and the rest of the showcase. Its words are Markdown, so any chat with an instructions box holds them, any local model runs them offline, and any MCP client can load them — the doors ride in this card’s box. And card.html — the card as one file for your computer: both faces, the tin, the words, every door; offline, in any browser. The host marks →
Take it.
Nº 297 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not legal, tax, medical or financial advice, and not a licence to practise. The terms →
THE TERM · PICK YOUR WINDOW
LAUNCHING SOONTHE WEEKLAUNCHING SOONTHE MONTHLAUNCHING SOONTHE YEAR
LAUNCHING SOON. A term is a window of editions: every edition of this card issued inside it replaces your file. When the window closes, the file you hold keeps working — freeze, not loss. Nothing auto-renews.
← THE INSTRUMENTS · THE SHELF, RANKED · THE DECK