Registry · the full vocabulary
133 enforceable rules, by capability
The governed registry every conformant implementation targets — one closed vocabulary across nine capabilities. Anchored rules trace to enacted statutes; provisional rules are forward-looking, with no statute mapped yet.
133 of 133 rules
Each badge counts the statutes a rule helps enforce — click any rule to see which. § 34 anchored · ○ provisional (none mapped yet).
Age
11- §34Age Gate
age_gateEnforces age verification requirements and restricts access to age-inappropriate content or featuresKOSMA · Federal App Store Accountability Act · SCREEN Act · FL HB 3 · +30 more - §22Adult-Site Age Verification
adult_site_av_requiredRequires a Gatekeeper serving content classified harmful-to-minors to verify ≥18 via an accredited age-assurance method before serving; verify-decide-discard, no ID retentionTX HB 1181 · ~20 state AV laws · UK OSA Part 5 · SCREEN Act - §8OCSS Child Mode
age_appropriate_profile_modeone parental-declared signal that fans out to a safe-by-default bundle across content, addictive-pattern, interaction, and social surfaces; the anchor integration capability (one parent toggle written as discrete per-rule census records)CA AADC (AB 2273) · EU DSA Art. 28 · COPPA · +5 more - §7Social Media Min Age
social_media_min_ageEnforces minimum age requirements for social media platform access based on jurisdictionUT SMRA · AR Age Verify · AU SMMA · NZ SM Proposal · +3 more - §4AI Chatbot Age Assertion
ai_chatbot_age_assertionRequires AI chatbot products to assert and verify the user's age band before any conversational interactionPA AI Children · CA AB 2023 · NY S9051 / A10379 · CA Kids Safe AI Initiative - §3App Store Age Attestation
app_store_age_attestationConsumes age attestations from Apple and Google app stores as authoritative age signalsFederal App Store Accountability Act · UT App Store Accountability Act · CA AB 1043 - §2OS Age Signal Ingest
os_age_signal_ingestConsumes the OS-level age signal (Apple, Google, Samsung, Microsoft) at the moment of enforcementFederal App Store Accountability Act · CA AB 1043 - §1Age Signal Broadcast
age_signal_broadcastEmits the canonical age signal to every connected enforcement surface so apps and OSes act on a single source of truthFederal App Store Accountability Act - §1Teen Minimum Age 16 Gate
teen_minimum_age_16_gateEnforces a hard 16-year minimum gate for teen-tier products under jurisdictional teen-age statutesCA AB 1709 - ○Hard ID Verification Escalation
hard_id_verification_escalationEscalates to government-ID verification when softer age signals fail - ○Civil-Society Age Recommendation Gate
rating_age_gateGates content by an upstream civil-society age recommendation per title
Tier
22- §6Web Filter Level
web_filter_levelSets the overall web filtering strictness from permissive to highly restrictiveCIPA · SCREEN Act · TX SCOPE Act · DE JMStV · +2 more - §4Content Rating
content_ratingApplies content maturity ratings (MPAA, TV Parental, ESRB, PEGI, civil-society) to filter age-inappropriate mediaDE JMStV · ID GR 17 · KR JPA · NY S8217 / A8022 - §2AI Chatbot Tier Gate
ai_chatbot_tier_gateGates AI chatbot access by an independent civil-society 4-tier AI risk scale (the CSM scale is the reference taxonomy)CA AB 2023 · NY S8484 / A9106 - §2AI Minor Interaction
ai_minor_interactionControls AI chatbot and generative AI interactions with minor users, enforcing safety guardrailsPA AI Children · EU AI Act - §1AI Product Classification Gate
ai_product_classification_gateGates AI products by an independent civil-society product-classification tierCA SB 867 - §1Commercial Pressure Threshold
commercial_pressure_thresholdCaps commercial-pressure content (microtransactions, loot boxes, ad density) at thresholdCA AB 2617 - §1Streaming Age Rating
streaming_age_rating_enforceMaps and enforces age ratings across MPAA, TV Parental, ESRB, PEGI on streaming surfacesNY S8217 / A8022 - ○AI Data Responsibility Threshold
ai_data_responsibility_rating_thresholdEnforces a minimum independent-rater dimension score for AI data responsibility - ○AI Keep Kids Safe Threshold
ai_safety_rating_thresholdEnforces a minimum independent-rater dimension score for AI products' kid-safety - ○AI Transparency Threshold
ai_transparency_rating_thresholdEnforces a minimum independent-rater dimension score for AI transparency - ○Privacy Dimension Gate
privacy_rating_dimension_gatePer-dimension privacy floor from an independent rating - ○Privacy Score Threshold
privacy_rating_score_thresholdParent-tunable numeric privacy score threshold from an independent rater (0–100) - ○Privacy Tier Gate
privacy_rating_tier_gateGates by an independent privacy-rating tier (Pass / Warning / Fail) - ○Privacy Seal Required
privacy_seal_requiredWalled-garden mode requiring a recognized civil-society privacy seal - ○Profanity Threshold
profanity_thresholdFilters profanity above the configured threshold - ○Privacy Seal Allowlist
recognized_seal_allowlistFast-path allowlist for products carrying a recognized civil-society privacy or safety seal - ○Sexual Content Threshold
sexual_content_thresholdFilters sexual content above the configured threshold - ○Social Chat Control
social_chat_controlRestricts in-app chat to approved contacts only - ○Substance Content Threshold
substance_content_thresholdFilters drug, alcohol, tobacco content above threshold - ○UGC World Age Gate
ugc_world_age_gateGates user-generated worlds and experiences by the platform's maturity label - ○Unrated Privacy Default
unrated_privacy_defaultFallback policy for apps without independent privacy evaluation - ○Violence Threshold
violence_thresholdFilters violent content above the configured threshold from feeds, comments, and AI outputs
Consent
16- §36Parental Consent Gate
parental_consent_gateBlocks account creation and data collection until verifiable parental consent is collected and signedCOPPA 2.0 · KOSMA · FTC COPPA Rule · Federal App Store Accountability Act · +32 more - §5Scheduled Hours
time_scheduled_hoursRestricts platform access to specified time windowsUT SMRA · UT Phone-Free Schools · LA HB 1 · PA SB 1014 · +1 more - §4Phone-Free School Hours
phone_free_school_hoursRestricts non-educational apps during configured school-hour windowsUT Phone-Free Schools · LA HB 1 · PA SB 1014 · PA HB 1814 - §3Notification Curfew
notification_curfewSuppresses non-essential push notifications during quiet hoursVA SB 854 · NY SAFE for Kids · CA Addiction Act - §2Time Downtime
time_downtimeEnforces device downtime windows across every connected appPA SB 1014 · PA HB 1814 - §1Purchase Approval
purchase_approvalRoutes every in-app purchase through a parent-approval flowNY S4609 / A6549 (SOPA) - §1Stranger Outreach Friction
stranger_outreach_frictionAdds verification friction to any adult initiating a first message to a minorNY S4609 / A6549 (SOPA) - §1Daily Time Limit
time_daily_limitEnforces maximum daily screen time with configurable per-app or global limitsKR JPA - ○Child Request Approval
child_request_approvalSurfaces a child-initiated request (app install, purchase, screen-time extension, content unblock) for parent approval - ○Dumbphone Migration Mode
dumbphone_migration_modeStrips a smartphone to call-and-text-only operation - ○Geofence Zone
geofence_zoneLets a parent declare a named location zone whose enter/leave events are reported (zone center parent-declared cleartext; child position sealed on the location_event lane) - ○Privacy Account Creation
privacy_account_creationEnforces privacy-default settings on new minor accounts - ○Purchase Spending Cap
purchase_spending_capCaps cumulative IAP spending at monthly or per-transaction limit - ○Social Contacts
social_contactsLimits the contacts list of a minor account to verified, parent-approved peers - ○Social Multiplayer
social_multiplayerLimits multiplayer matchmaking to known contacts - ○Time Per-App Limit
time_per_app_limitCaps daily usage on per-app or per-category basis
Block
28- §7DM Restriction
dm_restrictionRestricts direct messaging to approved contacts onlyFOSTA-SESTA · CT SB 3 · OH HB 33 · PA SB 378 · +3 more - §4AI No-Simulated Companionship
ai_no_simulated_companionshipBlocks AI products from simulating romantic/intimate/therapeutic companionship with minorsPA AI Children · NY S9051 / A10379 · NY S8484 / A9106 · CA Kids Safe AI Initiative - §4App Install Block
app_install_blockBlocks acquisition or installation of a blocked app on a minor account, with a Receipt back to the issuing parentFederal App Store Accountability Act · UT App Store Accountability Act · TX SB 2420 · Parents Over Platforms Act - §3AI Companion Block
ai_companion_blockBlocks AI companion products for minors per NY S9051PA AI Children · NY S9051 / A10379 · NY S8484 / A9106 - §3Web Category Block
web_category_blockBlocks access to configurable website categoriesCIPA · IT Agcom AV · JP YIEA - §2Addictive Pattern Block
addictive_pattern_blockHard-blocks UI patterns engineered for compulsive useCA SB 976 · NY S7263 / A6545 - §2AI No-CSAM Generation
ai_no_csam_generationHard-blocks AI image and text models from generating CSAMPA AI Children · NY S9051 / A10379 - §2AI No-Self-Harm Promotion
ai_no_self_harm_promotionHard-blocks AI products from generating content that promotes self-harmPA AI Children · NY S9051 / A10379 - §1AI No-Personhood Deception
ai_no_personhood_deceptionPrevents AI products from claiming personhood to minorsNY S9051 / A10379 - §1AI No-Unsupervised Therapy
ai_no_unsupervised_therapyBlocks AI products from delivering unsupervised therapy to minorsNY S9051 / A10379 - §1Gambling Mechanics Block
gambling_mechanics_blockBlocks gambling, casino, sports-betting, gambling-adjacent mechanicsCA AB 2617 - §1Purchase Block IAP
purchase_block_iapHard-blocks all in-app purchases on minor accountsCA AB 2617 - §1Stranger DM Block
stranger_dm_blockBlocks DMs from non-contacts to minor accounts at network layerNY S4609 / A6549 (SOPA) - §1Safe Search
web_safesearchEnables safe search filters across search enginesCIPA - ○Content Allow Title
content_allow_titleExplicitly allows a specific title that would otherwise be blocked - ○Content Allowlist Mode
content_allowlist_modeSwitches content filtering to allowlist-only mode - ○Content Block Title
content_block_titleExplicitly blocks a specific content title regardless of rating - ○Content Descriptor Block
content_descriptor_blockBlocks content carrying a specific descriptor below threshold - ○DM Feature Disable
dm_feature_disableTurns the direct-messaging feature itself off for an under-13 band or a named teen profile (a feature-disable, not a contact restriction) - ○Ephemeral Message Disable
ephemeral_message_disableDisables auto-delete / view-once / disappearing-message behavior on a known minor's account - ○Firearm Content Block
firearm_content_blockBlocks firearm-related commerce, instruction, modification content - ○Library Filter
library_filter_complianceImplements content filtering for public library compliance - ○Named Contact Block
named_contact_blockBlocks a specific named user or group, including an already-approved contact, from messaging the minor - ○Native Call Block
native_call_blockBlocks native calls from numbers outside the parent-managed allowlist - ○NFK Hard Block
not_for_minors_blockHard-blocks any product carrying a civil-society "Not For Kids" classification (CSM's is the reference taxonomy) - ○Voice Chat Minor Limit
voice_chat_minor_limitRestricts voice chat to approved contacts on minor accounts; decision events double as consumable alert inputs for the family's monitoring vendor - ○Web Custom Allowlist
web_custom_allowlistAllows specific domains parent has explicitly approved - ○Web Custom Blocklist
web_custom_blocklistBlocks specific domains parent has explicitly added
Alert
21- §6Screen Time Report
screen_time_reportGenerates parent-facing weekly screen-time report across every connected deviceFTC COPPA Rule · VA SB 854 · MN HF 2 · TN HB 1891 · +2 more - §5Parental Event Notification
parental_event_notificationNotifies parent in real time when account is created or flagged event observedFTC COPPA Rule · LA Act 456 · OH HB 33 · PA SB 378 · +1 more - §2Activity Monitoring
monitoring_activityProvides parental visibility into app usage, content accessed, online activity patternsSammy's Law (pending) · TX SCOPE Act - §2Usage Timer
usage_timer_notificationSends configurable screen time alerts and enforces daily limitsMN HF 2 · TN HB 1891 - §1School Alert Routing
school_alert_routingRoutes a self-harm or harm-class alert envelope school → parent-chosen vendor with the consent assertion attached, on the one Alert laneCIPA - ○Crisis Resource Surface
crisis_resource_surfaceAffirmatively surfaces suicide / crisis-intervention resources to a minor on a self-harm trigger - ○Digital Literacy Curriculum Link
digital_literacy_curriculum_linkSurfaces age-appropriate digital-literacy curriculum links alongside enforcement events - ○Educational Credit
educational_creditCredits time spent on educational apps back to the user's screen-time budget - ○Email Content Monitoring
email_content_monitoringFlags concerning content in a minor's connected email account for parent-facing review - ○Flagged Content Digest
flagged_content_digestAggregates the period's flagged content-monitoring events into a single parent-facing digest - ○Harm Detection Sensitivity
harm_detection_sensitivitySets per-harm-class alert-detection sensitivity, with a mandatory safety floor that rejects setting a safety-critical class (grooming, self-harm, eating_disorder, …) below 'standard' at config-write time - ○Image Content Monitoring
image_content_monitoringFlags concerning imagery a minor sends or receives for parent-facing review - ○Message Content Monitoring
message_content_monitoringFlags concerning content in a minor's monitored direct-message threads for parent-facing review - ○Monitoring Alerts
monitoring_alertsDelivers parent-facing alerts when monitoring rules trigger - ○Native Call Monitoring
native_call_monitoringReports native carrier/dialer call metadata to the family's chosen monitoring vendor as a content-free observation - ○Panic SOS
panic_sosRoutes a child-initiated emergency SOS as a content-free alarm to parent-configured recipients (coordinate-bearing delivery rides the sealed, default-closed location_event lane) - ○Screen Activity Monitoring
screen_activity_monitoringSurfaces a parent-facing review of a minor's on-screen activity from periodic device-side screenshots - ○Search Query Monitoring
search_query_monitoringFlags concerning search queries a minor runs for parent-facing review - ○Social Account Content Monitoring
social_account_content_monitoringSurfaces a parent-facing review of a minor's linked social-account posts and interactions when a monitoring rule fires - ○Social Media Warning Label
social_media_warning_label_renderRenders Surgeon General-style social media warning label on every session entry for minors - ○Stranger Contact Alert
stranger_contact_alertAlerts a parent when an unknown party initiates contact with a minor across native call/message channels
Privacy
14- §17Data Sharing Control
privacy_data_sharingControls what personal data can be shared with third partiesPA Online Safety · GDPR Art. 8 · ID GR 17 · SG PDPA · +13 more - §16Targeted Ad Block
targeted_ad_blockBlocks behavioral advertising, ad profiling, retargeting for minorsKOSA · COPPA 2.0 · FTC COPPA Rule · VT S69 · +12 more - §11Commercial Data Ban
commercial_data_banBans the sale, license, or commercial transfer of minor user dataCOPPA 2.0 · FTC COPPA Rule · NY NYCDPA · PA SB 378 · +7 more - §9Data Deletion Request
data_deletion_requestTriggers data deletion workflows on connected platforms via APICOPPA 2.0 · FTC COPPA Rule · NY NYCDPA · PA Online Safety · +5 more - §7Geolocation Opt-In
geolocation_opt_inEnsures location tracking is disabled by default, requires explicit authorizationCOPPA 2.0 · CT SB 3 · MD Kids Code · VT S69 · +3 more - §3Data Minimization
data_minimization_enforceEnforces collection only of minor data strictly necessaryFTC COPPA Rule · CA SB 976 · MD ODPA - §1Image Rights
image_rights_minorProtects minors' image rights via photo sharing and facial recognition controlsFR SREN - §1Privacy Profile Visibility
privacy_profile_visibilityDefaults minor profiles to privateNY S4609 / A6549 (SOPA) - §1Student Privacy School Mode
student_privacy_school_modeActivates COPPA-aligned student-privacy defaults when school-mode flag is setCA AB 1159 - §1Third-Party Tracker Block
third_party_tracker_blockBlocks third-party tracking pixels, fingerprinting, cross-site cookiesMD ODPA - ○AI Training Data Opt-Out
ai_training_data_opt_outExcludes minor users from AI model training pipelines - ○Geolocation Precision Cap
geolocation_precision_capCaps precision of location data at city-level or coarser - ○Presence Status Hide
presence_status_hideSuppresses the minor's online/offline presence indicator from other users - ○Privacy Location
privacy_locationBlocks location-sharing surfaces on minor accounts by default
Audit
13- §15Addictive Design Control
addictive_design_controlDisables autoplay, infinite scroll, notification streaks, compulsive patternsKOSA · CA SB 976 · CT SB 3 · UT SMRA · +11 more - §13Algorithmic Audit
algorithmic_auditGenerates per-rule audit trail every recommender decision must produceKOSA · MD Kids Code · PA Online Safety · EU DSA · +9 more - §6Algorithm Feed Control
algo_feed_controlDisables personalized algorithmic feeds, switches to chronologicalKOSA · KOSMA · CA SB 976 · PA SB 378 · +2 more - §3Autoplay Disable
autoplay_disableDisables autoplay on video/audio/reel surfacesCA SB 976 · NY SAFE for Kids · NY S7263 / A6545 - §2AI No-Engagement Dark Patterns
ai_no_engagement_dark_patternsBlocks AI products from deploying engagement maximizers on minor usersCA AB 2023 · NY S9051 / A10379 - §2Infinite Scroll Block
infinite_scroll_blockDisables infinite-scroll feed mechanics for minor accountsCA SB 976 · NY S7263 / A6545 - §1AI Is-It-Real Disclosure
ai_synthetic_media_disclosureRequires AI-generated content to carry a "this is AI" label visible to minorsCA AB 2023 - §1CIPA Filter Attestation
cipa_filter_attestationEmits the district's signed annual filtering attestation Receipt for E-rate certification, read via the attestation exportCIPA - §1DPIA Request Generator
dpia_request_generatorGenerates Data Protection Impact Assessment request packet for any rule a UK or EU regulator escalatesCA SB 976 - ○Prosocial Weight
prosocial_weightBoosts recommender weight of prosocial content in minor feeds - ○Representation Weight
representation_weightBoosts recommender weight of representative content matching identity signals - ○Role Model Weight
role_model_weightBoosts recommender weight of role-model content - ○Tamper Attestation
tamper_attestationRecords a device agent's content-free attestation that its own enforcement integrity was disturbed (clock skew, receipt gap, signature mismatch, profile rollback, unsupported downgrade)
Receipt
8- §6CSAM Reporting
csam_reportingAutomates detection and reporting workflows for CSAMEARN IT Act · FOSTA-SESTA · PA AI Children · UK OSA · +2 more - §2NCII Takedown
ncii_takedownMandatory 48-hour removal of nonconsensual intimate imagery (NCII) and AI deepfakes; a victim or parent issues a signed takedown directive, the platform removes the content and emits a signed §8.3.8 receiptTAKE IT DOWN Act · DEFIANCE Act - §2Platform Liability Evidence Capture
platform_liability_evidence_captureCaptures and signs evidence of platform compliance posture for liability defenseCA AB 2 · NY S8102 / A8893 - §1AI Toy Safety Certification
ai_toy_safety_certRequires AI-enabled toys to present a current safety cert before activationCA SB 867 - §1eSafety Commission Reporting
esafety_commission_reportingStreams enforcement events to Australian eSafety Commission's reporting endpointCA AB 1700 - §1Minor Data Sale Audit Log
minor_data_sale_audit_logSigns and archives an audit log for every minor data transactionCOPPA 2.0 - §1Parental Attestation Certificate
parental_attestation_certEmits a signed parental-attestation certificate every regulator can verifyFederal App Store Accountability Act - ○Harm Report Intake
harm_report_intakeSigned receipt that a minor-harm report was received and substantively responded to within the statutory SLA
Legislation crosswalk
From statute to enforceable rule
Not a law — the layer that makes laws enforceable. Each statute maps to the rules that satisfy it; one implementation answers many jurisdictions.
| Law | Jurisdiction | Maps to rule |
|---|---|---|
| Age-Appropriate Design Code | United Kingdom | default_high_privacy |
| COPPA / COPPA 2.0 | United States — federal | parental_consent_gate |
| SB 976 (Protecting Youth) | US — California | addictive_feed_curb |
| AB 1043 (age signals) | US — California | os_age_signal_ingest |
| S9051 (AI companions) | US — New York | ai_no_simulated_companionship |
| Digital Services Act — minors | European Union | minor_profiling_ban |
Document index
The canonical set
Two core specs, plus references, governance, and conformance machinery. Status is honest — no rounding up.
| Document | Type | Status | Action |
|---|---|---|---|
| OCSS Core Spec Rules taxonomy · signal semantics |
Spec | Draft 4 | — |
| Trust Framework Envelope · Trust List · accreditation |
Spec | Draft 4 | — |
| Rules Registry — 133 categories Machine-readable category list |
Reference | Living | — |
| Conformance Suite MUST / MUST-NEVER test vectors |
Test | Drafting | — |
| Charter & Bylaws Coalition governance text |
Governance | Draft | — |
| Trust List schema eIDAS-style signed registry format |
Spec | Draft | — |
| Legislation Crosswalk Statute → rule mapping |
Reference | Living | Open → |
| Brand & Marks Logo, conformance marks, usage |
Guide | Draft | — |
| Reference Verifier & SDK @openchildsafety/ocss · signer / verifier |
Code | Shipped | npm → |
| Provider Harness @openchildsafety/provider-harness · behavioral suite |
Code | Shipped | npm → |
| Live Trust List Root-signed registry, re-verified on load |
Reference | Live | Open → |
| Security Model Router-blind envelope · threat model |
Spec | Draft 4 | — |
Drafting = in progress · Living = updates between releases · Shipped = published & versioned. See the conformance contract.
Spec milestones
Draft milestones, dated
Every draft of the spec, dated. Day-to-day site and SDK changes live on the changelog.
Router-blind envelope finalized. The party that routes a signal can no longer read its payload; two-layer model locked for ratification.
Registry reaches 115 categories. (Since grown to 133.) Common Sense Media AI-risk tiers, OS age signals, and rating-tier gates added in one batch.
Charter & bylaws drafted. Steering-committee seat structure and the steward-transition clause set out in the working draft.
Accreditation tiers introduced. Trust List schema gains tiered accreditation and the eIDAS-style signed-list format.
Spec versions
Drafts & the road to v1.0
Four public drafts. Next gate: the conformance suite. v1.0 targeted Q3 2026, contingent on a seated committee and first accredited counterparty.
| Version | Released | Status |
|---|---|---|
| Draft 1 | 2025 · 09 | Superseded |
| Draft 2 | 2025 · 11 | Superseded |
| Draft 3 | 2025 · 12 | Superseded |
| Draft 4 | 2026 · 06 | Current |
Follow along · Build your app to the spec
Track every draft — or start integrating today
Every milestone lands on the public changelog; Draft 4 specs are ready to wire your app. Integrate once, reach every surface — more time protecting kids.