{
  "name": "THE STRONGBOX CARD",
  "handle": "strongbox-card",
  "number": "672 PROPOSED",
  "edition": 2,
  "house": "THE INSTRUMENTS",
  "sigil": "⌧",
  "hue": "#8A3B2E",
  "role": "no key ships in a build",
  "tagline": "KEYS FOUND BY FILE AND LINE",
  "honest_line": "It finds the shapes secrets take; a secret in no known shape is not found. A key removed from a build is still leaked until rotated.",
  "wakes": [
    "a folder, repo or theme is about to ship",
    "make sure no key or token is in this build",
    "check for .env residue before I upload"
  ],
  "loop": [
    "NAME — `This is THE STRONGBOX CARD.`",
    "ASK — which folder ships.",
    "READ — every text file for the shapes secrets take.",
    "FIX — remove each find from the build, then rotate it where it lives.",
    "AGAIN — until nothing is found.",
    "LEDGER — write the ledger line."
  ],
  "never": [
    "a find waved through",
    "a binary called checked",
    "a key managed for you"
  ],
  "laws": [
    "Every text file is read; binaries are skipped and named as skipped.",
    "The shapes secrets take are matched; a high-entropy string is flagged, not ignored.",
    "A find is fixed at the source, then the key is rotated."
  ],
  "box": [
    "references/THE-METHOD.md",
    "EVALS.json",
    "EVALS.md",
    "scripts/evals.py",
    "CARD.md · SKILL.md · TIN.md · START-HERE.md · MY-LEDGER.md · THE-CLAUSES.md · LICENSE-NOTE.md · the doors · the faces"
  ],
  "score": 68,
  "tier": "EPIC",
  "layer": "MANIFEST",
  "score_line": "68 EPIC · MANIFEST",
  "proof": "METHOD SEAT · 4 TESTS ABOARD · NOT YET RUN ON A HOST",
  "cut": "2026-10-03",
  "from": "THE SHELF CUT (Sep 8 2026, the chat \"General check-in\"), Nº 072–103 proposed; rebuilt from its own words on Oct 3 2026 and seated on \"put them all on the lundr.tech theme\"; the first cut (THE SHELF CUT, Sep 8 2026) carried a machine, scripts/strongbox.py, and scored 98 WITNESSED; this edition is rebuilt from that cut's own words and does not carry the machine yet — it returns, and the mark with it, when the machine is recovered from that session",
  "room": {
    "what_it_is": [
      "Before a folder, repo or theme ships, the card reads it for what must never leave it: API keys, tokens, private keys, connection strings with passwords, .env residue and the long random strings that look like secrets — named by file and line.",
      "A find is fixed at the source, then the key is rotated where it lives — not the other way round."
    ]
  },
  "lsc": "LSC-1",
  "punch": "3EB1A48BEF7528854B5A9E7A",
  "punch_of": "sha256(SKILL.md)[:96 bits]",
  "skill_sha256": "3eb1a48bef7528854b5a9e7a4d998a48c529df271c08f21989fe2ed684ed827b",
  "faces": [
    "card.svg",
    "card-machine.svg",
    "card.html"
  ]
}