OCSS · the open standard for child-safety signals

Build child-safety protections once. Enforce them everywhere.

One standard for parental-control apps and the surfaces that enforce them — less time wiring integrations, more time protecting kids.

signal flow · one envelope
Parental-control app a parent sets a rule did:ocss:app OCSS signed signal one envelope, verifiable verified to root DNS resolver Cloudflare · NextDNS Home router eero · Google Nest Device / OS iOS · Android Browser / app store Chrome · Safari Apps Netflix · Instagram
Signed once. Enforced everywhere.
signal flow · one envelope
Parental-control app a parent sets a rule did:ocss:app
signs one envelope
OCSS signed signal one envelope, verifiable verified to root
fans out · verified at each surface
5 ENFORCEMENT SURFACES
DNS · Cloudflare · NextDNS Router · eero · Nest Device / OS · iOS · Android Browser / app store Apps · Netflix · Instagram
Signed once. Enforced everywhere.
9capability layers
133rule categories
91laws mapped
30+jurisdictions

Two layers, one standard

Meaning and movement, kept separate.

Apps implement both once. Rules say what a signal means; the Trust Framework carries it as a signed payload.

architecture · two layers
RULES What a signal means 133 categories · the shared vocabulary 133 TRUST FRAMEWORK How it moves & who's trusted signed envelope + eIDAS-style Trust List SIGNED OCSS carried as payload
Like WebAuthn + CTAP under FIDO2.
architecture · two layers
OCSS the umbrella standard
RULES What a signal means 133 categories · the shared vocabulary
carried as payload
TRUST FRAMEWORK How it moves & who's trusted signed envelope + eIDAS-style Trust List
SIGNED
Like WebAuthn + CTAP under FIDO2.

The payoff

Stop building one integration per surface.

App-to-surface wiring is an N×M tangle. Get on the shared Trust List once, and it collapses to N+M.

before / after · N×M → N+M
Today — one integration per surface With OCSS — integrate once Filter app Screen-time Monitor app Your app DNS Router Device / OS App store Apps Netflix · Instagram 4 × 5 = 20 integrations Filter app Screen-time Monitor app Your app DNS Router Device / OS App store Apps Netflix · Instagram OCSS Trust List 4 + 5 = 9 integrations
Integrate once. Protect everywhere. Federation health turns green at three independent surfaces — no single point of failure.
today — one integration per surface
4 PARENTAL-CONTROL APPS
Filter app Screen-time Monitor app Your app
wired pairwise · a tangle
5 ENFORCEMENT SURFACES
DNS Router Device / OS App store Apps · Netflix · Instagram
4 × 5 = 20 integrations
with OCSS — integrate once
4 PARENTAL-CONTROL APPS
Filter app Screen-time Monitor app Your app
sign once
OCSS the shared Trust List verified to root
fan out
5 ENFORCEMENT SURFACES
DNS Router Device / OS App store Apps · Netflix · Instagram
4 + 5 = 9 integrations
Integrate once. Protect everywhere. Federation health turns green at three independent surfaces — no single point of failure.

Pre-ratification, in the open

We publish our zeros.

No production accreditations yet; the committee is forming. Verify every claim against the live signed ledger.

0 accredited in production committee forming by design

Founding coalition · forming

Help write the standard
you’ll build to.

Founding members shape the taxonomy, the conformance contract, and how trust is granted — before ratification, while it can still change.