Schema format v0.1: what goes in, what stays private

Every schema has a public card and a private package. This is where we draw the line and why the line matters.