{
 "format": "LSC-1",
 "lsc": "LSC-1",
 "edition": "E1",
 "cut": "2026-10-09",
 "name": "THE DEPLOY CARD",
 "handle": "deploy-card",
 "number": "Nº 1108",
 "house": "THE INSTRUMENTS",
 "wing": "HORIZON ONE",
 "role": "a bot on the web, its key never in a browser",
 "tagline": "The chat page that talks only to your own endpoint, the small server that keeps the key as a secret and takes only your page's requests, and a check of the folder before it goes up.",
 "sigil": "⇪",
 "hue": "#4A3BC4",
 "punch": "BC6D012B122223243422F2FE",
 "punch_of": "SKILL.md · sha-256 · first 24",
 "score": 98,
 "tier": "LEGENDARY",
 "layer": "WITNESSED",
 "score_line": "SELFTEST 7/7 · THREE COMMANDS ON THE RECORD",
 "honest_line": "I'm an AI reading a card. I can be wrong — I can invent a number, a rule, a name or a date — so check anything that matters against your own records, the source and a professional before you act.",
 "term": "one purchase · yours to keep · nothing renews itself",
 "free": false,
 "wakes": "someone wants their own bot on the web, or a bot folder is about to be uploaded",
 "loop": [
  "page --name · the chat page, AI said",
  "worker --provider --model · the server",
  "put the key in as a secret, never a file",
  "check <folder> · SAFE TO DEPLOY?",
  "deploy; set the origin to the page"
 ],
 "laws": [
  "**The key is a secret.** It goes in with wrangler secret put API_KEY; it is never written into a page, a settings file or a message, and check never prints one it finds.",
  "**The page calls the owner's endpoint only.** A page that calls the provider would need the key in the browser; check names it.",
  "**One origin.** The worker answers only the page it was made for; an empty or open origin is named.",
  "**Size is capped.** Twenty turns and about twenty-four thousand characters a request; the rest is refused before it costs anything.",
  "**The page says it is an AI.** The line is on the page from the first write: it can be wrong, and nothing private should be shared.",
  "**The machine sends nothing.** It writes files and reads them; the worker it writes reaches the provider only once the owner deploys it."
 ],
 "never": [
  "put a key in a page, a file or a message",
  "let a page call the provider directly",
  "leave the origin open to everyone"
 ],
 "machine": "scripts/deploy.py · page · worker · check · selftest",
 "proof": "selftest 7/7 · THREE commands on the record",
 "faces": [
  "card.svg",
  "card-machine.svg"
 ],
 "box": [
  "SKILL.md",
  "CARD.md",
  "TIN.md",
  "START-HERE.md",
  "LICENSE-NOTE.md",
  "THE-CLAUSES.md",
  "MY-LEDGER.md",
  "WITNESS.md",
  "SELFTEST.md",
  "AUDIT.md",
  "MANIFEST.md",
  "HOSTS.md",
  "scripts/deploy.py",
  "references/THE-HORIZON.md",
  "rules/ (4 doors)",
  "system/ (2 prompts)",
  "mcp/mcp_card.py",
  "card.json",
  "card.svg",
  "card-machine.svg",
  "card.html"
 ],
 "hundred": "Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5 — 25 of 25 → 98 of 100 · LEGENDARY"
}