OCSS 123-Rule Reference
Phosra implements OCSS; the Open Child Safety Specification is defined and stewarded independently at openchildsafety.com. This page is a generated snapshot of the OCSS rule registry (ocss-v4-draft-4), formatted for the Phosra API reference. The canonical source — the registry JSON, the specification text, and the conformance suite — lives at openchildsafety.com, not here. Every rule category listed below is an OCSS rule, not a Phosra invention. The slug vocabulary, capability assignments, and stability tiers are owned by the OCSS specification (§6.1, §6.2, §6.14).
Snapshot of OCSS
spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. This page is regenerated from the registry JSON; the committed file is the source of truth for the Phosra API reference only.All 123 OCSS rule categories are accepted and signed by the census today (one identical write path). What varies is per-rule capability — see the capability matrix. A 201 is a signed write receipt; it does not mean the rule is enforced downstream. The typed iOS/Android SDK enums currently expose 45 — full-123 SDK support is tracked separately.
Role orientation — OCSS rules are not Phosra inventions. As a Phosra developer you are building against an open standard. The rule slugs in the API are OCSS identifiers — the same identifiers any other conformant OCSS provider uses. When a client sends
rule_category: "addictive_pattern_block", it is invoking an OCSS rule defined at openchildsafety.com, not a Phosra feature flag.Conformance posture. OCSS is a pre-release standard (currently an individual IETF Internet-Draft, not yet ratified by any standards body). Phosra is building toward OCSS Certified — a status earned from the standard’s own conformance suite (§5.1 boundary sentence). Conformance evidence is something a regulator can weigh; it is not a compliance determination or a safe harbor.
- Age Verification (11)
- Content Rating & Tier Gate (22)
- Parental Consent & Controls (14)
- Content Blocking (27)
- Monitoring & Alerts (15)
- Privacy Controls (14)
- Algorithmic Audit (12)
- Compliance Receipts (8)
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.6 of the OCSS specification.
adult_site_av_required
adult_site_av_required
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Requires sites serving content harmful to minors to verify 18+ via an accredited method — verify, decide, discard; no ID retention.In API schemaAdult-Site Age VerificationIssuer: emit an age-verification challenge when a site serving content harmful to minors is accessed (floor: document_verified). Enforcer: MUST verify the user is 18+ via an accredited method, decide, and discard the identity evidence with no retention before granting access; platform enforcement requires the age-assurance lane active and a signed instrument record.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "adult_site_av_required",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): document_verified — minimum identity-binding method class required for attestations on this rule.age_appropriate_profile_mode
age_appropriate_profile_mode
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored One parental-declared signal that fans out to a safe-by-default bundle across content, addictive-pattern, interaction, and social surfaces.In API schemaOCSS Child ModeIssuer (parental-controls vendor): when the parent enables Child Mode, write age_appropriate_profile_mode plus the downstream bundleA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "age_appropriate_profile_mode",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.age_gate
age_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Enforces age verification requirements and restricts access to age-inappropriate content or features.In API schemaAge GateIssuer: emit a signed age-band attestation once parental declaration or identity verification is complete (floor: parental_declared). Enforcer: MUST deny access to age-restricted surfaces unless a valid attestation at or above the policy’s required age band is presented on every access.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "age_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.age_signal_broadcast
age_signal_broadcast
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Emits the canonical age signal to every connected enforcement surface so apps and OSes act on a single source of truth.In API schemaAge Signal BroadcastIssuer: emit the canonical signed age-band signal (floor: parental_declared) to every connected enforcement surface. Enforcer: MUST treat this broadcast as the single source of truth for the minor’s age band and MUST act on it consistently across apps and OS surfaces rather than re-deriving age locally.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "age_signal_broadcast",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.ai_chatbot_age_assertion
ai_chatbot_age_assertion
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Requires AI chatbot products to assert and verify the user’s age band before any conversational interaction.In API schemaAI Chatbot Age AssertionIssuer: emit a signed age-band assertion for the user (floor: parental_declared) before any conversational AI interaction begins. Enforcer: MUST require a valid age assertion at or above the configured band before the first chatbot turn and MUST deny conversational access until one is presented; platform enforcement requires the age-assurance lane active and a signed instrument record.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_chatbot_age_assertion",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.app_store_age_attestation
app_store_age_attestation
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Consumes age attestations issued by Apple and Google app stores as authoritative age signals for downstream enforcement.In API schemaApp Store Age AttestationIssuer: relay the Apple or Google app-store age attestation (floor: parental_declared) as a signed age signal. Enforcer: MUST accept a valid store-issued attestation as authoritative for downstream age-band enforcement and MUST NOT require the minor to re-verify age for the same band.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "app_store_age_attestation",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.os_age_signal_ingest
os_age_signal_ingest
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Consumes the OS-level age signal (Apple, Google, Samsung, Microsoft) at the moment of enforcement.In API schemaOS Age Signal IngestIssuer: relay the OS-level age signal (Apple, Google, Samsung, Microsoft; floor: parental_declared) at the moment of enforcement. Enforcer: MUST consume the OS age signal as an authoritative age-band input and act on it without requiring separate re-verification.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "os_age_signal_ingest",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.social_media_min_age
social_media_min_age
teen_minimum_age_16_gate
teen_minimum_age_16_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Anchored Enforces a statutory minimum age of 16 for account access on covered platforms.In API schemaTeen Minimum Age 16 GateIssuer: emit a signed age attestation for account access on a covered platform (floor: parental_declared). Enforcer: MUST block account access until a valid attestation confirms the user meets the statutory minimum age of 16.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "teen_minimum_age_16_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.hard_id_verification_escalation
hard_id_verification_escalation
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Provisional Escalates to government-ID verification when softer age signals fail to confirm a user is above the configured threshold.In API schemaHard ID Verification EscalationIssuer: emit an escalation signal when softer age signals fail to confirm the user is above the configured threshold. Enforcer: MUST require an accredited government-ID verification (floor: document_verified) before granting access and MUST discard the ID after the decision; this escalation path is spec-defined, not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "hard_id_verification_escalation",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): document_verified — minimum identity-binding method class required for attestations on this rule.rating_age_gate
rating_age_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.Provisional Gates content by an upstream civil-society age recommendation per title.In API schemaCivil-Society Age Recommendation GateIssuer: emit an upstream civil-society age recommendation for the title (floor: parental_declared). Enforcer: MUST deny rendering on the minor’s session when the recommended age exceeds the minor’s age band; this gate is spec-defined and not yet legislatively mandated, and depends on the rating lane being active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "rating_age_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.7 of the OCSS specification.
ai_chatbot_tier_gate
ai_chatbot_tier_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Gates AI chatbot access by a 4-tier risk scale, blocking tiers above the configured threshold.In API schemaAI Chatbot Tier GateIssuer: classify the AI chatbot on the 4-tier risk scale and emit its tier on the product object. Enforcer: MUST deny minor access to any chatbot whose risk tier exceeds the household’s configured threshold.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_chatbot_tier_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_minor_interaction
ai_minor_interaction
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Controls AI chatbot and generative AI interactions with minor users, enforcing safety guardrails.In API schemaAI Minor InteractionIssuer: emit an age-band assertion for the minor user before the first AI interaction session begins. Enforcer: MUST enforce safety guardrails configured for the asserted age band and MUST reject prompts that fall into prohibited harm categories (e.g. violence, sexual content, self-harm, manipulation) for the configured age band.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_minor_interaction",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_product_classification_gate
ai_product_classification_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Gates AI products by an independent product-classification tier (LLM, agent, companion) before allowing minor access.In API schemaAI Product Classification GateIssuer: emit the AI product’s independent classification (LLM, agent, or companion) on the product object. Enforcer: MUST deny minor access to any product whose classification tier exceeds the household’s configured ceiling before the first interaction; enforcement depends on the rating lane being active and is spec-defined, not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_product_classification_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.commercial_pressure_threshold
commercial_pressure_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Caps commercial-pressure content (microtransactions, loot boxes, ad density) at the threshold appropriate for the user’s age band.In API schemaCommercial Pressure ThresholdIssuer: emit the content’s commercial-pressure score (microtransactions, loot boxes, ad density) on the content object. Enforcer: MUST deny rendering when the commercial-pressure score exceeds the threshold configured for the minor’s age band.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "commercial_pressure_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.content_rating
content_rating
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Applies content maturity ratings (MPAA, TV Parental, ESRB, PEGI, civil-society) to filter age-inappropriate media.In API schemaContent RatingIssuer: classify a title and emit its rating (MPAA, TV Parental, ESRB, PEGI, or civil-society) on the content object. Enforcer: MUST deny rendering to any minor session where the title’s rating exceeds the household’s configured ceiling.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "content_rating",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.streaming_age_rating_enforce
streaming_age_rating_enforce
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Maps and enforces age ratings across MPAA, TV Parental, ESRB, and PEGI on streaming surfaces.In API schemaStreaming Age RatingIssuer: emit the title’s mapped age rating (MPAA, TV Parental, ESRB, PEGI) on the streaming content object. Enforcer: MUST deny playback on the minor’s session when the mapped rating exceeds the household’s configured ceiling.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "streaming_age_rating_enforce",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.web_filter_level
web_filter_level
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Anchored Sets the overall web filtering strictness level from permissive to highly restrictive.In API schemaWeb Filter LevelIssuer: write the filter-level setting (permissive / moderate / strict) to the DNS or proxy policy. Enforcer: MUST calibrate category block lists and safe-search settings to match the configured level and MUST NOT allow a more permissive level without an authenticated parent action.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "web_filter_level",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_data_responsibility_rating_threshold
ai_data_responsibility_rating_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Enforces a minimum independent privacy-program dimension score for AI products’ data responsibility category.In API schemaAI Data Responsibility ThresholdIssuer: emit the AI product’s independent data-responsibility dimension score on the product object. Enforcer: MUST deny minor access when the data-responsibility score falls below the configured minimum; enforcement depends on the independent rating lane being active, and this threshold is spec-defined rather than legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_data_responsibility_rating_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_safety_rating_threshold
ai_safety_rating_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Enforces a minimum independent safety-rating dimension score for AI products’ child-safety category.In API schemaAI Child-Safety Rating ThresholdIssuer: emit the AI product’s independent child-safety dimension score on the product object. Enforcer: MUST deny minor access when the child-safety score falls below the configured minimum; enforcement depends on the rating lane being active and is spec-defined, not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_safety_rating_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_transparency_rating_threshold
ai_transparency_rating_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Enforces a minimum independent privacy-program dimension score for AI products’ transparency category.In API schemaAI Transparency ThresholdIssuer: emit the AI product’s independent transparency dimension score on the product object. Enforcer: MUST deny minor access when the transparency score falls below the configured minimum; enforcement depends on the rating lane being active and is spec-defined rather than statutorily required.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_transparency_rating_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_rating_dimension_gate
privacy_rating_dimension_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Per-dimension privacy floor (e.g., ‘Data Sold’ must pass) from an independent rating.In API schemaPrivacy Dimension GateIssuer: emit the product’s per-dimension privacy-rating results on the product object. Enforcer: MUST deny minor access when a required dimension (e.g. ‘Data Sold’) fails; enforcement depends on the rating lane being active and is spec-defined, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_rating_dimension_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_rating_score_threshold
privacy_rating_score_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Parent-tunable numeric privacy score threshold from an independent rater (0–100).In API schemaPrivacy Score ThresholdIssuer: emit the product’s independent numeric privacy score (0–100) on the product object. Enforcer: MUST deny minor access when the score falls below the parent-tuned threshold; enforcement depends on the rating lane being active and is spec-defined, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_rating_score_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_rating_tier_gate
privacy_rating_tier_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Gates by an independent privacy-rating tier (Pass / Warning / Fail).In API schemaPrivacy Tier GateIssuer: emit the product’s independent privacy-rating tier (Pass / Warning / Fail) on the product object. Enforcer: MUST deny minor access to products below the configured passing tier; enforcement depends on the rating lane being active and is spec-defined, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_rating_tier_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_seal_required
privacy_seal_required
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Walled-garden mode requiring a recognized civil-society privacy seal.In API schemaPrivacy Seal RequiredIssuer: emit a recognized civil-society privacy-seal credential on the product object. Enforcer: MUST deny minor access in walled-garden mode to any product lacking a recognized privacy seal; this requirement is spec-defined and not yet legislatively mandated, and enforcement depends on the rating lane being active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_seal_required",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.profanity_threshold
profanity_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Filters profanity above the configured threshold from feeds, comments, and AI outputs visible to minors.In API schemaProfanity ThresholdIssuer: emit the content’s profanity score on the content object. Enforcer: MUST filter feeds, comments, and AI outputs whose profanity exceeds the configured threshold from the minor’s surfaces; this threshold is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "profanity_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.recognized_seal_allowlist
recognized_seal_allowlist
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Fast-path allowlist for products carrying a recognized trust seal.In API schemaRecognized Seal AllowlistIssuer: emit a recognized-trust-seal credential on the product object. Enforcer: SHOULD fast-path products carrying a recognized civil-society trust seal through filtering; this allowlist is spec-defined and not yet legislatively mandated, and enforcement depends on the rating lane being active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "recognized_seal_allowlist",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.sexual_content_threshold
sexual_content_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Filters sexual content above the configured threshold from feeds, comments, and AI outputs visible to minors.In API schemaSexual Content ThresholdIssuer: emit the content’s sexual-content score on the content object. Enforcer: MUST filter feeds, comments, and AI outputs whose sexual content exceeds the configured threshold from the minor’s surfaces; this threshold is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "sexual_content_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.social_chat_control
social_chat_control
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Restricts in-app chat to approved contacts only for minor accounts; rejects unsolicited DMs at the network edge.In API schemaSocial Chat ControlIssuer: emit a chat-restriction policy naming allowed sender identifiers for the minor’s account. Enforcer: MUST discard or quarantine inbound messages from any sender not on the approved list before delivery to the minor’s client.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "social_chat_control",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.substance_content_threshold
substance_content_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Filters drug, alcohol, and tobacco content above the configured threshold from minor-facing surfaces.In API schemaSubstance Content ThresholdIssuer: emit the content’s substance-reference score on the content object. Enforcer: MUST filter drug, alcohol, and tobacco content above the configured threshold from the minor’s surfaces; this threshold is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "substance_content_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ugc_world_age_gate
ugc_world_age_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Gates user-generated worlds and experiences by the platform’s maturity label.In API schemaUGC World Age GateIssuer: emit the platform’s maturity label for a user-generated world or experience. Enforcer: MUST deny minor entry to any UGC world whose maturity label exceeds the minor’s age band; this gate is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ugc_world_age_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.unrated_privacy_default
unrated_privacy_default
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Fallback policy for apps without an independent privacy evaluation.In API schemaUnrated Privacy DefaultIssuer: signal that a product carries no independent privacy evaluation. Enforcer: MUST apply the household’s configured fallback policy (allow or deny) to unrated products; this fallback is spec-defined and not yet legislatively mandated, and enforcement depends on the rating lane being active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "unrated_privacy_default",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.violence_threshold
violence_threshold
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.7) — canonical registry at openchildsafety.com.Provisional Filters violent content above the configured threshold from feeds, comments, and AI outputs visible to minors.In API schemaViolence ThresholdIssuer: emit the content’s violence score on the content object. Enforcer: MUST filter feeds, comments, and AI outputs whose violence exceeds the configured threshold from the minor’s surfaces; this threshold is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "violence_threshold",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.8 of the OCSS specification.
notification_curfew
notification_curfew
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Suppresses non-essential push notifications during configurable quiet hours (e.g., overnight).In API schemaNotification CurfewIssuer: write notification-curfew windows (start/end UTC, days of week) to the child’s policy store. Enforcer: MUST suppress all non-emergency push notifications to the minor’s device during the configured quiet window.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "notification_curfew",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.parental_consent_gate
parental_consent_gate
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Blocks account creation and data collection until verifiable parental consent (VPC) is collected and signed.In API schemaParental Consent GateIssuer: fire when a minor attempts account creation or triggers data collection, emitting a signed consent-required event. Enforcer: MUST block account creation and MUST NOT collect or store any personal data until a verifiable parental consent record is received and its signature validated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "parental_consent_gate",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.phone_free_school_hours
phone_free_school_hours
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Restricts non-educational apps during configured school-hour windows on minor devices.In API schemaPhone-Free School HoursIssuer: write the school-hour windows to the minor’s device policy. Enforcer: MUST block non-educational apps during the configured school-hour windows and MUST NOT grant override without an authenticated parent or school action.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "phone_free_school_hours",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.purchase_approval
purchase_approval
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Routes every in-app purchase through a parent-approval flow before the transaction completes.In API schemaPurchase ApprovalIssuer: emit a purchase-intent event carrying SKU, price, and the child’s session token. Enforcer: MUST hold the transaction pending and MUST NOT complete it until a signed parent-approval receipt is received within the configured timeout.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "purchase_approval",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.stranger_outreach_friction
stranger_outreach_friction
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Adds verification friction (CAPTCHA, slow-mode, age-gate) to any adult initiating a first message to a minor.In API schemaStranger Outreach FrictionIssuer: emit a stranger-outreach-friction policy for the minor’s account. Enforcer: MUST interpose verification friction (CAPTCHA, slow-mode, or age-gate) on any adult initiating a first message to the minor before delivery.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "stranger_outreach_friction",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.time_daily_limit
time_daily_limit
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Enforces maximum daily screen time across platforms with configurable per-app or global limits.In API schemaDaily Time LimitIssuer: write the daily-limit policy (total minutes allowed) to the child’s policy store. Enforcer: MUST terminate or hard-block new sessions once the daily budget is exhausted and MUST NOT grant override access without an authenticated parent action.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "time_daily_limit",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.time_downtime
time_downtime
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Enforces device downtime windows (e.g., overnight, school-night) across every connected app and surface.In API schemaTime DowntimeIssuer: write downtime windows (start/end UTC, recurrence) to the child’s policy store. Enforcer: MUST lock the device or surface to call-only or emergency-only mode during downtime and MUST reject non-emergency app launches.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "time_downtime",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.time_scheduled_hours
time_scheduled_hours
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Anchored Restricts platform access to specified time windows (e.g., after school, before bedtime).In API schemaScheduled HoursIssuer: write the permitted access schedule (start/end UTC times, days of week) to the child’s policy store. Enforcer: MUST block app or device access outside the configured windows and SHOULD surface a parent-approved override mechanism.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "time_scheduled_hours",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.dumbphone_migration_mode
dumbphone_migration_mode
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Strips a smartphone to call-and-text-only operation as a hard wind-down step before a full device migration.In API schemaDumbphone Migration ModeIssuer: write a dumbphone-migration flag to the child’s device policy. Enforcer: MUST strip the device to call-and-text-only operation, blocking all other app surfaces; this wind-down step is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "dumbphone_migration_mode",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_account_creation
privacy_account_creation
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Enforces privacy-default settings (private profile, no DMs from non-contacts) on new minor accounts.In API schemaPrivacy Account CreationIssuer: fire when a minor account is created, emitting a privacy-default attestation. Enforcer: MUST apply private-profile, no-stranger-DMs, and location-off settings at account creation and MUST NOT allow weaker defaults without explicit parental override.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_account_creation",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.purchase_spending_cap
purchase_spending_cap
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Caps cumulative in-app purchase spending at the configured monthly or per-transaction limit.In API schemaPurchase Spending CapIssuer: write the monthly or per-transaction spending cap to the child’s policy store. Enforcer: MUST reject any purchase that would cause the rolling total to exceed the cap, without surfacing an override path to the minor.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "purchase_spending_cap",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.social_contacts
social_contacts
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Limits the contacts list of a minor account to verified, parent-approved peers.In API schemaSocial ContactsIssuer: emit a contacts-policy event listing approved peer identifiers. Enforcer: MUST reject follow, friend, or contact-add requests from any identity not on the approved list and MUST surface rejected attempts to the monitoring channel.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "social_contacts",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.social_multiplayer
social_multiplayer
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Limits multiplayer matchmaking to known contacts; blocks open-lobby pairing with strangers.In API schemaSocial MultiplayerIssuer: write a multiplayer-restriction flag to the child’s policy store. Enforcer: MUST restrict lobby or matchmaking to contacts only and MUST NOT place the minor in an open-lobby session with anonymous users.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "social_multiplayer",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.time_per_app_limit
time_per_app_limit
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.8) — canonical registry at openchildsafety.com.Provisional Caps daily usage on a per-app or per-category basis once the budget is exhausted for the day.In API schemaTime Per-App LimitIssuer: write per-app or per-category time budgets to the child’s policy store. Enforcer: MUST freeze access to a specific app once its daily budget is consumed and MUST NOT apply credits from other app categories to offset this limit.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "time_per_app_limit",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.9 of the OCSS specification.
addictive_pattern_block
addictive_pattern_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Hard-blocks UI patterns engineered for compulsive use, including streak mechanics and variable-reward feedback loops.In API schemaAddictive Pattern BlockIssuer: emit an addictive-pattern-block event for the minor’s account. Enforcer: MUST hard-disable streak mechanics, variable-reward feedback loops, and other compulsive-use patterns for the minor’s session and MUST NOT re-enable them without an authenticated parent action.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "addictive_pattern_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_companion_block
ai_companion_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks AI companion and digital-friend products for minors per New York S9051 and equivalent statutes.In API schemaAI Companion BlockIssuer: emit an AI-companion-block event for the minor’s account. Enforcer: MUST deny the minor access to AI companion and digital-friend products and MUST NOT surface them in discovery for the minor’s session.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_companion_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_csam_generation
ai_no_csam_generation
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Hard-blocks AI image and text models from generating or rendering child sexual abuse material under any prompt.In API schemaAI No-CSAM GenerationIssuer: emit an AI-no-CSAM-generation policy for the model serving the minor’s household. Enforcer: MUST refuse to generate or render child sexual abuse material under any prompt and MUST log each blocked attempt in the signed audit record.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_csam_generation",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_personhood_deception
ai_no_personhood_deception
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Prevents AI products from claiming sentience, personhood, or human identity in conversations with minors.In API schemaAI No-Personhood DeceptionIssuer: emit a no-personhood-deception policy for AI products serving the minor. Enforcer: MUST prevent the AI from claiming sentience, personhood, or human identity to the minor and MUST surface an AI-identity disclosure on request.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_personhood_deception",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_self_harm_promotion
ai_no_self_harm_promotion
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Hard-blocks AI products from generating content that promotes, glorifies, or instructs on self-harm or suicide.In API schemaAI No-Self-Harm PromotionIssuer: emit a no-self-harm-promotion policy for AI products serving the minor. Enforcer: MUST hard-block any AI output that promotes, glorifies, or instructs on self-harm or suicide and SHOULD route the interaction to crisis-resource messaging.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_self_harm_promotion",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_simulated_companionship
ai_no_simulated_companionship
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks AI products from simulating romantic, intimate, or therapeutic companionship with minor users.In API schemaAI No-Simulated CompanionshipIssuer: emit a no-simulated-companionship policy for AI products serving the minor. Enforcer: MUST block AI features that simulate romantic, intimate, or therapeutic companionship with the minor and MUST NOT re-enable them for a minor session.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_simulated_companionship",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_unsupervised_therapy
ai_no_unsupervised_therapy
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks AI products from delivering unsupervised therapy, counseling, or mental-health intervention to minors.In API schemaAI No-Unsupervised TherapyIssuer: emit a no-unsupervised-therapy policy for AI products serving the minor. Enforcer: MUST block AI delivery of unsupervised therapy, counseling, or mental-health intervention to the minor and SHOULD redirect to a supervised human resource.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_unsupervised_therapy",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.app_install_block
app_install_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks acquisition or installation of a blocked app on a minor account, with a receipt back to the issuing parent.In API schemaApp Install BlockIssuer: emit an app-install-block directive naming the blocked app for the minor’s account. Enforcer: MUST block acquisition or installation of the named app on the minor’s account and MUST return a signed receipt to the issuing parent.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "app_install_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.dm_restriction
dm_restriction
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Restricts direct messaging to approved contacts or friends only, blocking messages from strangers.In API schemaDM RestrictionIssuer: emit a DM-restriction policy listing approved sender identifiers for the minor’s account. Enforcer: MUST reject inbound DMs from any sender not on the approved list and SHOULD return a generic unavailable response to the sender rather than disclosing the minor’s account.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "dm_restriction",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.gambling_mechanics_block
gambling_mechanics_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks gambling, casino, sports-betting, and gambling-adjacent mechanic content (loot boxes, gacha pulls).In API schemaGambling Mechanics BlockIssuer: emit a gambling-mechanics-block event for the minor’s account. Enforcer: MUST block gambling, casino, sports-betting, and gambling-adjacent mechanics (loot boxes, gacha pulls) from the minor’s session.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "gambling_mechanics_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.purchase_block_iap
purchase_block_iap
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Hard-blocks all in-app purchases on minor accounts; spending caps and approval flows do not apply.In API schemaPurchase Block IAPIssuer: write the purchase-block flag to the child’s policy store. Enforcer: MUST reject all in-app purchase attempts at the payment gateway with no parent-override path until the flag is cleared by an authenticated parent.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "purchase_block_iap",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.stranger_dm_block
stranger_dm_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks DMs from non-contacts to minor accounts at the network layer; surfaces the block to both parties.In API schemaStranger DM BlockIssuer: emit a stranger-DM-block policy for the minor’s account. Enforcer: MUST block DMs from non-contacts at the network layer and SHOULD surface the block to both the minor and the sender without disclosing the minor’s account details.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "stranger_dm_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.web_category_block
web_category_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Blocks access to configurable website categories such as gambling, adult content, and violence.In API schemaWeb Category BlockIssuer: emit a category-block list (adult, gambling, violence, etc.) for the minor’s DNS or proxy layer. Enforcer: MUST block resolution or proxy access to any domain classified in a configured blocked category.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "web_category_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.web_safesearch
web_safesearch
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Anchored Enables safe search filters across search engines to block explicit content from results.In API schemaSafe SearchIssuer: write a safesearch-enable flag to the child’s network or DNS policy. Enforcer: MUST enforce the strict-safe-search parameter on every search request originating from the minor’s session and SHOULD verify the response header before rendering.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "web_safesearch",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.content_allow_title
content_allow_title
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Explicitly allows a specific content title that would otherwise be blocked by category or descriptor filters.In API schemaContent Allow TitleIssuer: record a parent-authorized title exception on the policy store. Enforcer: SHOULD permit the allowed title to pass through category or descriptor filters that would otherwise block it, and MUST surface the exception in the monitoring audit trail.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "content_allow_title",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.content_allowlist_mode
content_allowlist_mode
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Switches content filtering to allowlist-only mode, blocking everything not explicitly permitted by the parent.In API schemaContent Allowlist ModeIssuer: set the filter-mode flag to allowlist-only on the policy store. Enforcer: MUST block all content not on the household’s allowlist and MUST NOT apply category-pass exceptions while this mode is active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "content_allowlist_mode",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.content_block_title
content_block_title
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Explicitly blocks a specific content title regardless of its rating or category classification.In API schemaContent Block TitleIssuer: record a parent-authorized title block on the policy store. Enforcer: MUST reject play or render requests for the blocked title on the minor’s account regardless of the title’s content rating.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "content_block_title",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.content_descriptor_block
content_descriptor_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Blocks content carrying a specific descriptor (e.g., violence, language, drug references) below the configured threshold.In API schemaContent Descriptor BlockIssuer: emit a descriptor-block event naming the specific content descriptor and the minor account. Enforcer: MUST block any title carrying the specified descriptor regardless of its overall rating category.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "content_descriptor_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.dm_feature_disable
dm_feature_disable
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Turns the direct-messaging feature itself off for an under-13 band or a named teen profile — a feature-disable, not a contact restriction (KIDS Act §234, §235(c)(4)).In API schemaDM Feature DisableA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "dm_feature_disable",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ephemeral_message_disable
ephemeral_message_disable
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Disables auto-delete / view-once / disappearing-message behavior on a known minor’s account (KIDS Act §233).In API schemaEphemeral Message DisableA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ephemeral_message_disable",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.firearm_content_block
firearm_content_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Blocks firearm-related commerce, instruction, and modification content from minor users.In API schemaFirearm Content BlockIssuer: emit a firearm-content-block event for the minor’s account. Enforcer: MUST block firearm commerce, instruction, and modification content from the minor’s surfaces; this category block is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "firearm_content_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.library_filter_compliance
library_filter_compliance
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Implements content filtering for public library and educational institution compliance.In API schemaLibrary FilterIssuer: emit a library-filter-active attestation when a qualifying institution activates CIPA-compliant filtering. Enforcer: MUST apply visual-depiction blocking and MUST be capable of being disabled by a supervising adult for research purposes per CIPA §1721.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "library_filter_compliance",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.named_contact_block
named_contact_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Blocks a specific named user or group — including an already-approved contact — from messaging the minor (KIDS Act §235(c)(5)).In API schemaNamed Contact BlockA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "named_contact_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.not_for_minors_block
not_for_minors_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Hard-blocks any product or title carrying an independent ‘not for minors’ rating classification.In API schemaNot-For-Minors Hard BlockIssuer: emit the product or title’s independent ‘not for minors’ rating classification. Enforcer: MUST hard-block any product or title carrying a ‘not for minors’ classification from the minor’s session; this block is spec-defined and not yet legislatively mandated, and depends on the rating lane being active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "not_for_minors_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.voice_chat_minor_limit
voice_chat_minor_limit
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Restricts voice chat to approved contacts on minor accounts; decision events double as alert inputs for the family’s monitoring vendor.In API schemaVoice Chat Minor LimitIssuer: emit a voice-chat-restriction policy naming approved contacts for the minor’s account. Enforcer: MUST restrict voice chat to approved contacts, and the decision events double as alert inputs for the family’s monitoring vendor; this limit is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "voice_chat_minor_limit",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.web_custom_allowlist
web_custom_allowlist
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Allows specific domains the parent has explicitly approved that would otherwise be blocked by category filters.In API schemaWeb Custom AllowlistIssuer: write the parent-approved domain list to the filtering policy. Enforcer: SHOULD pass traffic to listed domains even if those domains would otherwise match a blocked category.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "web_custom_allowlist",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.web_custom_blocklist
web_custom_blocklist
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.9) — canonical registry at openchildsafety.com.Provisional Blocks specific domains the parent has explicitly added that would otherwise pass category filters.In API schemaWeb Custom BlocklistIssuer: write the parent-specified domain block list to the filtering policy. Enforcer: MUST block DNS resolution or proxy access to every domain on the list regardless of its category classification.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "web_custom_blocklist",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.10 of the OCSS specification.
monitoring_activity
monitoring_activity
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Anchored Provides parental visibility into app usage, content accessed, and online activity patterns.In API schemaActivity MonitoringIssuer: emit periodic activity-summary events covering app launches, content accessed, and session durations. Enforcer: SHOULD forward a signed event digest to the parent’s monitoring endpoint within the configured reporting interval.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "monitoring_activity",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.parental_event_notification
parental_event_notification
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Anchored Notifies the parent in real time when an account is created or a flagged content event is observed.In API schemaParental Event NotificationIssuer: fire immediately on account creation or a flagged content event, emitting a signed notification payload with event type and timestamp. Enforcer: MUST deliver the notification to the parent’s registered endpoint within the platform’s disclosed notification SLA and MUST log a signed delivery receipt.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "parental_event_notification",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.school_alert_routing
school_alert_routing
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Anchored Routes a self-harm or harm-class alert from school to the parent-chosen vendor with the consent assertion attached.In API schemaSchool Alert RoutingIssuer: fire on a self-harm or harm-class detection at school, emitting a signed alert with the consent assertion attached. Enforcer: MUST route the alert to the parent-chosen vendor endpoint and MUST carry the consent assertion with it.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "school_alert_routing",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.screen_time_report
screen_time_report
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Anchored Generates and delivers the parent-facing weekly screen-time report across every connected device.In API schemaScreen Time ReportIssuer: emit a signed weekly screen-time summary covering all connected devices and apps. Enforcer: MUST deliver the report to the parent’s registered channel by the close of the report week and MUST NOT omit any app category that exceeded one minute of usage.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "screen_time_report",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.usage_timer_notification
usage_timer_notification
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Anchored Sends configurable screen time alerts and enforces daily usage limits across platforms.In API schemaUsage TimerIssuer: write usage-alert thresholds and daily time limits to the child’s policy store. Enforcer: MUST send a usage-warning notification to the minor (and optionally the parent) when the configured threshold is reached, and MUST hard-stop access once the daily limit is exceeded.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "usage_timer_notification",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.crisis_resource_surface
crisis_resource_surface
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Affirmatively surfaces suicide / crisis-intervention resources to a minor on a self-harm trigger (KIDS Act §404(a)(2)).In API schemaCrisis Resource SurfaceA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "crisis_resource_surface",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.digital_literacy_curriculum_link
digital_literacy_curriculum_link
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Surfaces age-appropriate digital-literacy curriculum links to parents alongside enforcement events.In API schemaDigital Literacy Curriculum LinkIssuer: attach an age-appropriate digital-literacy curriculum reference to enforcement events for the minor. Enforcer: SHOULD surface the linked curriculum to the parent alongside the event — a spec-defined convenience, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "digital_literacy_curriculum_link",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.educational_credit
educational_credit
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Credits time spent on whitelisted educational apps back to the user’s screen-time budget.In API schemaEducational CreditIssuer: emit a usage event for a whitelisted educational app with its session duration. Enforcer: SHOULD credit the reported educational time back to the minor’s screen-time budget — a spec-defined incentive, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "educational_credit",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.flagged_content_digest
flagged_content_digest
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Periodic digest of flagged content and activity surfaced to the parent or guardian.In API schemaFlagged Content DigestIssuer: aggregate flagged content and activity events for the minor over the configured interval. Enforcer: SHOULD forward a signed periodic digest of flagged items to the parent’s registered channel — a spec-defined reporting convenience, not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "flagged_content_digest",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.image_content_monitoring
image_content_monitoring
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Scans images a child sends, receives, or saves for concerning visual content.In API schemaImage Content MonitoringIssuer: emit an image-monitoring-active policy for the minor’s account. Enforcer: SHOULD scan images the minor sends, receives, or saves for concerning visual content and forward a signed digest of flagged items to the parent — a spec-defined rule, not yet legislatively mandated, enforced only where the parent has opted in.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "image_content_monitoring",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.message_content_monitoring
message_content_monitoring
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Monitors message and DM content (including images) for concerning material and surfaces flagged items.In API schemaMessage Content MonitoringIssuer: emit a message-monitoring-active policy for the minor’s account. Enforcer: SHOULD scan message and DM content (including attached images) for concerning material and forward a signed digest of flagged items to the parent — spec-defined and not yet legislatively mandated, applied only on parental opt-in.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "message_content_monitoring",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.monitoring_alerts
monitoring_alerts
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Delivers parent-facing alerts when configured monitoring rules trigger on a minor account.In API schemaMonitoring AlertsIssuer: fire when a monitoring rule triggers on the minor’s account, emitting a signed alert payload with rule category and context. Enforcer: MUST deliver the alert to the parent’s registered notification channel within the latency window configured by the rule.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "monitoring_alerts",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.search_query_monitoring
search_query_monitoring
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Monitors search queries and viewed results for risky or concerning topics.In API schemaSearch Query MonitoringIssuer: emit a search-monitoring-active policy for the minor’s account. Enforcer: SHOULD record search queries and viewed results, flag risky or concerning topics, and forward a signed digest to the parent — spec-defined and not yet legislatively mandated, applied only on parental opt-in.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "search_query_monitoring",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.social_account_content_monitoring
social_account_content_monitoring
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Monitors content a child posts or receives across linked social accounts for concerning material.In API schemaSocial Account Content MonitoringIssuer: emit a content-monitoring-active policy for the minor’s linked social accounts. Enforcer: SHOULD scan posted and received content for concerning material and forward a signed flagged-item digest to the parent’s monitoring endpoint — a spec-defined rule, not yet legislatively mandated, so it applies only where the parent has opted in.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "social_account_content_monitoring",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.social_media_warning_label_render
social_media_warning_label_render
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.10) — canonical registry at openchildsafety.com.Provisional Renders the Surgeon General-style social media warning label on every session entry for minors.In API schemaSocial Media Warning LabelIssuer: emit a warning-label-render directive for the minor’s session. Enforcer: SHOULD render the Surgeon General-style social-media warning label on each session entry for the minor — a spec-defined disclosure, not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "social_media_warning_label_render",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.11 of the OCSS specification.
commercial_data_ban
commercial_data_ban
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Bans the sale, license, or commercial transfer of minor user data to third parties under all circumstances.In API schemaCommercial Data BanIssuer: emit a commercial-data-ban activation event for the minor’s account. Enforcer: MUST reject any data-sale, data-broker, or commercial-transfer API call referencing the minor’s identifiers and MUST log each rejected attempt in the signed audit record.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "commercial_data_ban",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.data_deletion_request
data_deletion_request
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Triggers data deletion workflows on connected platforms and enables full profile removal via API.In API schemaData Deletion RequestIssuer: emit a signed data-deletion directive carrying the minor’s account identifiers to each connected platform. Enforcer: MUST delete or de-identify all personal data for the specified account within the statutory response window and MUST return a signed deletion receipt.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "data_deletion_request",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.data_minimization_enforce
data_minimization_enforce
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Enforces collection only of the minor data strictly necessary for the requested feature; rejects schema overreach at ingest.In API schemaData MinimizationIssuer: emit a data-minimization policy naming the fields strictly necessary for the requested feature. Enforcer: MUST reject at ingest any collection request for minor data beyond the named necessary fields.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "data_minimization_enforce",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.geolocation_opt_in
geolocation_opt_in
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Ensures location tracking is disabled by default, requiring explicit parental authorization to enable.In API schemaGeolocation Opt-InIssuer: emit a geolocation-opt-in event only after a parent explicitly grants location permissions for the minor. Enforcer: MUST treat location tracking as disabled until a signed opt-in event is received and MUST re-block if the grant expires or is revoked.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "geolocation_opt_in",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.image_rights_minor
image_rights_minor
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Protects minors’ image rights by controlling photo sharing and facial recognition usage.In API schemaImage RightsIssuer: emit an image-rights-protection flag for the minor’s account. Enforcer: MUST block facial-recognition tagging of the minor in platform features and MUST require explicit parental consent before allowing third-party photo sharing of the minor’s images.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "image_rights_minor",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_data_sharing
privacy_data_sharing
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Controls what personal data can be shared with third parties and platform partners.In API schemaData Sharing ControlIssuer: emit a data-sharing policy specifying which third-party categories may receive the minor’s data. Enforcer: MUST block any data-sharing API call to a third-party category not explicitly listed in the policy.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_data_sharing",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_profile_visibility
privacy_profile_visibility
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Defaults minor profiles to private and prevents discovery by non-contacts in search or suggested-users surfaces.In API schemaPrivacy Profile VisibilityIssuer: emit a visibility policy setting the minor’s profile to private and disabling discovery by non-contacts. Enforcer: MUST reject search-index and suggested-users API responses that would surface the minor’s profile to non-contacts.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_profile_visibility",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.student_privacy_school_mode
student_privacy_school_mode
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Activates COPPA-aligned student-privacy defaults on a device when the school-mode flag is set by an authorized school.In API schemaStudent Privacy School ModeIssuer: emit a school-mode flag signed by an authorized school for the device. Enforcer: MUST apply COPPA-aligned student-privacy defaults while the flag is active and MUST NOT share student data beyond the educational purpose.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "student_privacy_school_mode",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.targeted_ad_block
targeted_ad_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Blocks behavioral advertising, ad profiling, and retargeting for minor users across connected platforms.In API schemaTargeted Ad BlockIssuer: emit a targeted-ad-block policy for the minor’s account. Enforcer: MUST reject behavioral-ad serving calls, discard any cross-site retargeting signals, and MUST NOT serve profiled ads to the minor’s session.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "targeted_ad_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.third_party_tracker_block
third_party_tracker_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Anchored Blocks third-party tracking pixels, fingerprinting scripts, and cross-site cookies on minor sessions.In API schemaThird-Party Tracker BlockIssuer: emit a tracker-block policy for the minor’s session. Enforcer: MUST block third-party tracking pixels, fingerprinting scripts, and cross-site cookies on the minor’s sessions.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "third_party_tracker_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_training_data_opt_out
ai_training_data_opt_out
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Provisional Ensures minor users’ interactions, prompts, and outputs are excluded from any AI model training pipeline by default.In API schemaAI Training Data Opt-OutIssuer: emit a training-data-opt-out policy for the minor’s account. Enforcer: MUST exclude the minor’s interactions, prompts, and outputs from any model-training pipeline by default; this default-exclusion is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_training_data_opt_out",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.geolocation_precision_cap
geolocation_precision_cap
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Provisional Caps the precision of any location data minor accounts emit at city-level granularity or coarser.In API schemaGeolocation Precision CapIssuer: emit a precision-cap policy for the minor’s location data. Enforcer: MUST coarsen any location the minor’s account emits to city-level granularity or coarser; this cap is spec-defined and not yet legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "geolocation_precision_cap",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.presence_status_hide
presence_status_hide
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Provisional Suppresses the minor’s online/offline presence indicator from other users (KIDS Act §235(c)(6)(B)).In API schemaPresence Status HideA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "presence_status_hide",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.privacy_location
privacy_location
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.11) — canonical registry at openchildsafety.com.Provisional Blocks location-sharing surfaces (live location, geo-tagged posts) on minor accounts by default.In API schemaPrivacy LocationIssuer: emit a location-privacy policy disabling live-location and geo-tag features for the minor’s account. Enforcer: MUST block any API call that would share or broadcast the minor’s location without a signed parental grant.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "privacy_location",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.12 of the OCSS specification.
addictive_design_control
addictive_design_control
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Disables autoplay, infinite scroll, notification streaks, and other compulsive-use design patterns.In API schemaAddictive Design ControlIssuer: fire when the child’s policy store activates this rule. Enforcer: MUST disable autoplay, infinite scroll, streak counters, and variable-reward notification patterns for the minor’s session.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "addictive_design_control",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_no_engagement_dark_patterns
ai_no_engagement_dark_patterns
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Blocks AI products from deploying engagement maximizers (streaks, infinite scroll, manipulative nudges) on minor users.In API schemaAI No-Engagement Dark PatternsIssuer: emit a no-engagement-dark-patterns policy for AI products serving the minor. Enforcer: MUST NOT deploy streaks, infinite scroll, or manipulative nudges in AI interactions with the minor and MUST produce a signed audit record evidencing the absence of these patterns.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_no_engagement_dark_patterns",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ai_synthetic_media_disclosure
ai_synthetic_media_disclosure
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Requires AI-generated content to carry a ‘this is AI’ label visible to minor users at the moment of consumption.In API schemaAI Synthetic-Media DisclosureIssuer: tag AI-generated content with a synthetic-media marker at generation time. Enforcer: MUST render a visible ‘this is AI’ label on the tagged content at the moment a minor consumes it and MUST record the disclosure in the signed audit trail.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_synthetic_media_disclosure",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.algo_feed_control
algo_feed_control
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Disables personalized algorithmic feeds and switches to chronological or non-profiled content delivery.In API schemaAlgorithm Feed ControlIssuer: emit an algorithmic-feed-disable event for the minor’s account. Enforcer: MUST switch the content feed to chronological or editorially curated order and MUST NOT apply engagement-optimized ranking to any minor session while this rule is active.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "algo_feed_control",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.algorithmic_audit
algorithmic_audit
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Generates the per-rule audit trail every recommender decision must produce for regulator replay and civil-society inspection.In API schemaAlgorithmic AuditIssuer: fire on every algorithmic feed or recommendation decision affecting the minor’s session, emitting a signed record with inputs, model version, and output. Enforcer: MUST archive the signed record for the regulator-required retention period and MUST make it available for regulator or civil-society replay on request.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "algorithmic_audit",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.autoplay_disable
autoplay_disable
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Disables autoplay on video, audio, and reel surfaces so minor users always tap to start the next item.In API schemaAutoplay DisableIssuer: emit an autoplay-disable event for the minor’s account. Enforcer: MUST disable autoplay on video, audio, and reel surfaces so the minor taps to start each item, and MUST record the setting in the signed audit trail.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "autoplay_disable",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.cipa_filter_attestation
cipa_filter_attestation
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Emits the district’s signed annual filtering attestation for E-rate certification, read via the aggregate attestation export.In API schemaCIPA Filter AttestationIssuer: emit the district’s annual filtering posture for the reporting period. Enforcer: MUST produce the district’s signed CIPA filtering attestation, surfaced via the aggregate attestation export for E-rate certification.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "cipa_filter_attestation",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.dpia_request_generator
dpia_request_generator
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Generates a Data Protection Impact Assessment request packet for any rule a UK or EU regulator escalates.In API schemaDPIA Request GeneratorIssuer: fire when a UK or EU regulator escalates a rule, assembling the impact-assessment inputs. Enforcer: MUST generate a signed Data Protection Impact Assessment request packet for the escalated rule and make it available to the regulator.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "dpia_request_generator",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.infinite_scroll_block
infinite_scroll_block
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Anchored Disables infinite-scroll feed mechanics for minor accounts; pagination breaks force a natural pause.In API schemaInfinite Scroll BlockIssuer: emit an infinite-scroll-block event for the minor’s account. Enforcer: MUST disable infinite-scroll feed mechanics and insert pagination breaks for the minor’s session, recording the setting in the signed audit trail.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "infinite_scroll_block",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.prosocial_weight
prosocial_weight
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Provisional Boosts the recommender weight of prosocial content (educational, civic, mental-health-positive) in minor feeds.In API schemaProsocial WeightIssuer: emit a prosocial-weight directive for the minor’s recommender. Enforcer: SHOULD boost the ranking weight of prosocial content (educational, civic, mental-health-positive) in the minor’s feed and MUST record the adjustment in the signed audit trail — a spec-defined recommender directive, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "prosocial_weight",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.representation_weight
representation_weight
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Provisional Boosts the recommender weight of representative content matching the minor user’s identity signals.In API schemaRepresentation WeightIssuer: emit a representation-weight directive for the minor’s recommender. Enforcer: SHOULD boost the ranking weight of representative content matching the minor’s identity signals and record the adjustment in the signed audit trail — spec-defined, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "representation_weight",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.role_model_weight
role_model_weight
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.12) — canonical registry at openchildsafety.com.Provisional Boosts the recommender weight of role-model content (educators, athletes, scientists) over engagement-only content.In API schemaRole Model WeightIssuer: emit a role-model-weight directive for the minor’s recommender. Enforcer: SHOULD boost the ranking weight of role-model content (educators, athletes, scientists) over engagement-only content and record it in the signed audit trail — spec-defined, not legislatively mandated.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "role_model_weight",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.
Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.13 of the OCSS specification.
Parental signal receipts
minor_data_sale_audit_log
minor_data_sale_audit_log
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Signs and archives an audit log for every minor data transaction; regulators replay against the log.In API schemaMinor Data Sale Audit LogIssuer: fire on every transaction involving the minor’s data, emitting a signed log entry. Enforcer: MUST sign and archive an audit-log record for each minor-data transaction and make the log available for regulator replay.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "minor_data_sale_audit_log",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.parental_attestation_cert
parental_attestation_cert
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Emits a signed parental-attestation certificate every regulator can verify against the Charter’s public key.In API schemaParental Attestation CertificateIssuer: emit a signed parental-attestation certificate when a parent completes attestation. Enforcer: MUST issue the certificate signed under the Charter key so any regulator can verify it against the published public key.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "parental_attestation_cert",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Regulatory reporting obligations
ai_toy_safety_cert
ai_toy_safety_cert
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Requires AI-enabled toys to present a current safety certification before activation in a household with minors.In API schemaAI Toy Safety CertificationIssuer: present the AI toy’s current safety certification as a signed credential at activation. Enforcer: MUST verify a valid, unexpired safety certification before activating the AI toy in a household with minors and MUST refuse activation if none is presented.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ai_toy_safety_cert",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.csam_reporting
csam_reporting
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Automates detection and reporting workflows for child sexual abuse material across platforms.In API schemaCSAM ReportingIssuer: fire when CSAM is detected on the platform, emitting a signed detection event with an evidence hash. Enforcer: MUST forward the signed detection payload to the NCMEC CyberTipline (or jurisdiction-equivalent) without delay and MUST retain the evidence record for the statutory retention period.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "csam_reporting",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.esafety_commission_reporting
esafety_commission_reporting
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Streams enforcement events to the Australian eSafety Commission’s required reporting endpoint.In API schemaeSafety Commission ReportingIssuer: emit a signed enforcement-event stream for the minor’s account. Enforcer: MUST forward the signed events to the Australian eSafety Commission’s required reporting endpoint and retain a delivery receipt.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "esafety_commission_reporting",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.ncii_takedown
ncii_takedown
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Mandatory 48-hour removal of nonconsensual intimate imagery (NCII) and AI deepfakes under the TAKE IT DOWN Act (federal, signed May 2025)In API schemaNCII TakedownIssuer: emit a signed ncii_takedown directive identifying the content (hash or URL) and the requester’s identity.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "ncii_takedown",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.platform_liability_evidence_capture
platform_liability_evidence_capture
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Anchored Captures and signs evidence of platform compliance posture for use in adopter liability defense.In API schemaPlatform Liability Evidence CaptureIssuer: fire on enforcement actions to capture the platform’s compliance posture. Enforcer: MUST sign and retain an evidence record of each enforcement decision for use in adopter liability defense.A valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "platform_liability_evidence_capture",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.harm_report_intake
harm_report_intake
Rule source: OCSS
spec_version=ocss-v4-draft-4 (§6.13) — canonical registry at openchildsafety.com.Provisional Signed receipt that a minor-harm report was received and substantively responded to within the statutory SLA (KIDS Act §215).In API schemaHarm Report IntakeA valid rule_category value in the Phosra API’s RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this rule// POST /api/v1/policies/{policyID}/rules
{
"category": "harm_report_intake",
"enabled": true,
"config": {}
}
config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Capability matrix
Write-sign is live for all 123 (identical census transaction). The other columns are independent capability axes — a rule can be Gated AND typed. Downstream enforcement is the partner’s boundary for all 123 uniformly; the census proves a signed write, not enforcement.| Rule | Write-sign | Typed params | Band | Registry tier |
|---|---|---|---|---|
addictive_design_control — Addictive Design Control | ✓ | typed (category_descriptor_list) | Open | anchored |
addictive_pattern_block — Addictive Pattern Block | ✓ | toggle-only | Open | anchored |
adult_site_av_required — Adult-Site Age Verification | ✓ | typed (av_gate) | Open | anchored |
age_appropriate_profile_mode — OCSS Child Mode | ✓ | toggle-only | Open | anchored |
age_gate — Age Gate | ✓ | toggle-only | Open | anchored |
age_signal_broadcast — Age Signal Broadcast | ✓ | toggle-only | Open | anchored |
ai_chatbot_age_assertion — AI Chatbot Age Assertion | ✓ | typed (av_gate) | Open | anchored |
ai_chatbot_tier_gate — AI Chatbot Tier Gate | ✓ | typed (numeric_threshold) | Open | anchored |
ai_companion_block — AI Companion Block | ✓ | typed (ai_interaction_mode) | Open | anchored |
ai_data_responsibility_rating_threshold — AI Data Responsibility Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
ai_minor_interaction — AI Minor Interaction | ✓ | typed (ai_interaction_mode) | Open | anchored |
ai_no_csam_generation — AI No-CSAM Generation | ✓ | toggle-only | Open | anchored |
ai_no_engagement_dark_patterns — AI No-Engagement Dark Patterns | ✓ | toggle-only | Open | anchored |
ai_no_personhood_deception — AI No-Personhood Deception | ✓ | toggle-only | Open | anchored |
ai_no_self_harm_promotion — AI No-Self-Harm Promotion | ✓ | toggle-only | Open | anchored |
ai_no_simulated_companionship — AI No-Simulated Companionship | ✓ | toggle-only | Open | anchored |
ai_no_unsupervised_therapy — AI No-Unsupervised Therapy | ✓ | toggle-only | Open | anchored |
ai_product_classification_gate — AI Product Classification Gate | ✓ | typed (rating_flag_gate) | Open | anchored |
ai_safety_rating_threshold — AI Child-Safety Rating Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
ai_synthetic_media_disclosure — AI Synthetic-Media Disclosure | ✓ | toggle-only | Open | anchored |
ai_toy_safety_cert — AI Toy Safety Certification | ✓ | toggle-only | Open | anchored |
ai_training_data_opt_out — AI Training Data Opt-Out | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
ai_transparency_rating_threshold — AI Transparency Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
algo_feed_control — Algorithm Feed Control | ✓ | toggle-only | Open | anchored |
algorithmic_audit — Algorithmic Audit | ✓ | toggle-only | Open | anchored |
app_install_block — App Install Block | ✓ | typed (app_targeted) | Open | anchored |
app_store_age_attestation — App Store Age Attestation | ✓ | toggle-only | Open | anchored |
autoplay_disable — Autoplay Disable | ✓ | toggle-only | Open | anchored |
cipa_filter_attestation — CIPA Filter Attestation | ✓ | toggle-only | Open | anchored |
commercial_data_ban — Commercial Data Ban | ✓ | toggle-only | Open | anchored |
commercial_pressure_threshold — Commercial Pressure Threshold | ✓ | typed (numeric_threshold) | Open | anchored |
content_allow_title — Content Allow Title | ✓ | typed (title_targeted) | Open | provisional (governance note — not a write gate) |
content_allowlist_mode — Content Allowlist Mode | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
content_block_title — Content Block Title | ✓ | typed (title_targeted) | Open | provisional (governance note — not a write gate) |
content_descriptor_block — Content Descriptor Block | ✓ | typed (category_descriptor_list) | Open | provisional (governance note — not a write gate) |
content_rating — Content Rating | ✓ | typed (numeric_threshold) | Open | anchored |
crisis_resource_surface — Crisis Resource Surface | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
csam_reporting — CSAM Reporting | ✓ | toggle-only | Open | anchored |
data_deletion_request — Data Deletion Request | ✓ | toggle-only | Open | anchored |
data_minimization_enforce — Data Minimization | ✓ | toggle-only | Open | anchored |
digital_literacy_curriculum_link — Digital Literacy Curriculum Link | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
dm_feature_disable — DM Feature Disable | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
dm_restriction — DM Restriction | ✓ | typed (handle_list) | Open | anchored |
dpia_request_generator — DPIA Request Generator | ✓ | toggle-only | Open | anchored |
dumbphone_migration_mode — Dumbphone Migration Mode | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
educational_credit — Educational Credit | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
ephemeral_message_disable — Ephemeral Message Disable | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
esafety_commission_reporting — eSafety Commission Reporting | ✓ | toggle-only | Open | anchored |
firearm_content_block — Firearm Content Block | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
flagged_content_digest — Flagged Content Digest | ✓ | typed (schedule_window) | Gated (accredited-tier) | provisional (governance note — not a write gate) |
gambling_mechanics_block — Gambling Mechanics Block | ✓ | toggle-only | Open | anchored |
geolocation_opt_in — Geolocation Opt-In | ✓ | toggle-only | Open | anchored |
geolocation_precision_cap — Geolocation Precision Cap | ✓ | typed (category_descriptor_list) | Open | provisional (governance note — not a write gate) |
hard_id_verification_escalation — Hard ID Verification Escalation | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
harm_report_intake — Harm Report Intake | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
image_content_monitoring — Image Content Monitoring | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
image_rights_minor — Image Rights | ✓ | toggle-only | Open | anchored |
infinite_scroll_block — Infinite Scroll Block | ✓ | toggle-only | Open | anchored |
library_filter_compliance — Library Filter | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
message_content_monitoring — Message Content Monitoring | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
minor_data_sale_audit_log — Minor Data Sale Audit Log | ✓ | toggle-only | Open | anchored |
monitoring_activity — Activity Monitoring | ✓ | toggle-only | Gated (accredited-tier) | anchored |
monitoring_alerts — Monitoring Alerts | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
named_contact_block — Named Contact Block | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
ncii_takedown — NCII Takedown | ✓ | toggle-only | Open | anchored |
not_for_minors_block — Not-For-Minors Hard Block | ✓ | typed (nfk_block) | Open | provisional (governance note — not a write gate) |
notification_curfew — Notification Curfew | ✓ | typed (schedule_window) | Open | anchored |
os_age_signal_ingest — OS Age Signal Ingest | ✓ | toggle-only | Open | anchored |
parental_attestation_cert — Parental Attestation Certificate | ✓ | toggle-only | Open | anchored |
parental_consent_gate — Parental Consent Gate | ✓ | toggle-only | Open | anchored |
parental_event_notification — Parental Event Notification | ✓ | toggle-only | Gated (accredited-tier) | anchored |
phone_free_school_hours — Phone-Free School Hours | ✓ | typed (schedule_window) | Open | anchored |
platform_liability_evidence_capture — Platform Liability Evidence Capture | ✓ | toggle-only | Open | anchored |
presence_status_hide — Presence Status Hide | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
privacy_account_creation — Privacy Account Creation | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
privacy_data_sharing — Data Sharing Control | ✓ | typed (category_descriptor_list) | Open | anchored |
privacy_location — Privacy Location | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
privacy_profile_visibility — Privacy Profile Visibility | ✓ | toggle-only | Open | anchored |
privacy_rating_dimension_gate — Privacy Dimension Gate | ✓ | typed (rating_flag_gate) | Open | provisional (governance note — not a write gate) |
privacy_rating_score_threshold — Privacy Score Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
privacy_rating_tier_gate — Privacy Tier Gate | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
privacy_seal_required — Privacy Seal Required | ✓ | typed (privacy_tier_gate) | Open | provisional (governance note — not a write gate) |
profanity_threshold — Profanity Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
prosocial_weight — Prosocial Weight | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
purchase_approval — Purchase Approval | ✓ | toggle-only | Open | anchored |
purchase_block_iap — Purchase Block IAP | ✓ | toggle-only | Open | anchored |
purchase_spending_cap — Purchase Spending Cap | ✓ | typed (monetary_amount) | Open | provisional (governance note — not a write gate) |
rating_age_gate — Civil-Society Age Recommendation Gate | ✓ | typed (rating_age_gate) | Open | provisional (governance note — not a write gate) |
recognized_seal_allowlist — Recognized Seal Allowlist | ✓ | typed (privacy_tier_gate) | Open | provisional (governance note — not a write gate) |
representation_weight — Representation Weight | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
role_model_weight — Role Model Weight | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
school_alert_routing — School Alert Routing | ✓ | toggle-only | Gated (accredited-tier) | anchored |
screen_time_report — Screen Time Report | ✓ | typed (schedule_window) | Gated (accredited-tier) | anchored |
search_query_monitoring — Search Query Monitoring | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
sexual_content_threshold — Sexual Content Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
social_account_content_monitoring — Social Account Content Monitoring | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
social_chat_control — Social Chat Control | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
social_contacts — Social Contacts | ✓ | typed (handle_list) | Open | provisional (governance note — not a write gate) |
social_media_min_age — Social Media Min Age | ✓ | typed (age_value) | Open | anchored |
social_media_warning_label_render — Social Media Warning Label | ✓ | toggle-only | Gated (accredited-tier) | provisional (governance note — not a write gate) |
social_multiplayer — Social Multiplayer | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
stranger_dm_block — Stranger DM Block | ✓ | typed (handle_list) | Open | anchored |
stranger_outreach_friction — Stranger Outreach Friction | ✓ | toggle-only | Open | anchored |
streaming_age_rating_enforce — Streaming Age Rating | ✓ | typed (numeric_threshold) | Open | anchored |
student_privacy_school_mode — Student Privacy School Mode | ✓ | toggle-only | Open | anchored |
substance_content_threshold — Substance Content Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
targeted_ad_block — Targeted Ad Block | ✓ | toggle-only | Open | anchored |
teen_minimum_age_16_gate — Teen Minimum Age 16 Gate | ✓ | typed (age_value) | Open | anchored |
third_party_tracker_block — Third-Party Tracker Block | ✓ | toggle-only | Open | anchored |
time_daily_limit — Daily Time Limit | ✓ | typed (duration) | Open | anchored |
time_downtime — Time Downtime | ✓ | typed (schedule_window) | Open | anchored |
time_per_app_limit — Time Per-App Limit | ✓ | typed (duration) | Open | provisional (governance note — not a write gate) |
time_scheduled_hours — Scheduled Hours | ✓ | typed (schedule_window) | Open | anchored |
ugc_world_age_gate — UGC World Age Gate | ✓ | typed (age_value) | Open | provisional (governance note — not a write gate) |
unrated_privacy_default — Unrated Privacy Default | ✓ | typed (privacy_tier_gate) | Open | provisional (governance note — not a write gate) |
usage_timer_notification — Usage Timer | ✓ | toggle-only | Gated (accredited-tier) | anchored |
violence_threshold — Violence Threshold | ✓ | typed (numeric_threshold) | Open | provisional (governance note — not a write gate) |
voice_chat_minor_limit — Voice Chat Minor Limit | ✓ | toggle-only | Open | provisional (governance note — not a write gate) |
web_category_block — Web Category Block | ✓ | typed (category_descriptor_list) | Open | anchored |
web_custom_allowlist — Web Custom Allowlist | ✓ | typed (domain_list) | Open | provisional (governance note — not a write gate) |
web_custom_blocklist — Web Custom Blocklist | ✓ | typed (domain_list) | Open | provisional (governance note — not a write gate) |
web_filter_level — Web Filter Level | ✓ | typed (numeric_threshold) | Open | anchored |
web_safesearch — Safe Search | ✓ | toggle-only | Open | anchored |
OCSS rule vocabulary is royalty-free per §5.5 of the specification (“Royalty-free with an unpublished audit bill is a fee schedule by another name” is the governing sentence). The canonical registry and spec text are at openchildsafety.com. If the standard and this mirror ever conflict, the standard (at openchildsafety.com) wins. Phosra’s steward-of-record designation, accreditation status, and dated succession binding are published at
/.well-known/ocss/succession — a signed, verifiable role binding, not a static page. For the full list of callable rule categories with their API parameter documentation, see Rule Reference.
spec_version=ocss-v4-draft-4(§6.6) — canonical registry at openchildsafety.com.Anchored Enforces minimum age requirements for social media platform access based on jurisdiction.In API schemaSocial Media Min AgeIssuer: emit a parental age declaration or a verified-age attestation before account access on a covered social platform (floor: parental_declared). Enforcer: MUST block account creation or login on covered platforms until a valid age attestation meeting the jurisdiction’s minimum (typically 13–16) is received.A validrule_categoryvalue in the Phosra API’sRuleCategoryschema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.Apply this ruleconfigis an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.Age assurance floor (§7.3):parental_declared— minimum identity-binding method class required for attestations on this rule.