Guardians publish policy as ordinary Nostr events. The subject's own engine assembles it and answers two questions — each with a verdict and a trace.
Guardians publish policy as ordinary Nostr events. The subject's own engine assembles it and answers two questions — each with a verdict and a trace.
Who writes policy
Who writes policy
Guardians Parents, in the motivating case: one or more, named by the subject. Each guardian publishes and edits their own policy.
GuardiansParents, in the motivating case: one or more, namedby the subject. Each guardian publishes and edits theirown policy.
Policy carriers 37710 open · 37711 sealed (encrypted to the subject) grants, deny gates and a subject-wide global gate
Policy carriers37710 open · 37711 sealed (encrypted to the subject)grants, deny gates and a subject-wide global gate
Re-association offers 7710 open · 7711 sealed a guardian proposes a new guardian set; the subject ratifies
Re-association offers7710 open · 7711 sealeda guardian proposes a new guardian set; the subject ratifies
Curators and relay operators publish open general carriers that any household may adopt. Peers are other subjects: a household can inherit what a peer is permitted.
Curators and relay operatorspublish open general carriers that any household may adopt.Peersare other subjects: a household can inherit what a peer ispermitted.
Anyone: restriction profiles 7712 reusable schedules and kind rules. A profile binds nobody until a guardian's carrier references it.
Anyone: restriction profiles7712 reusable schedules and kind rules. A profile binds nobodyuntil a guardian's carrier references it.
Where it lives
Where it lives
relay public
relaypublic
Ordinary Nostr relays. No TEPP server, no special relay.
Ordinary Nostr relays.No TEPP server, no special relay.
relay family
relayfamily
relay school
relayschool
A relay never enforces a subject's regime. It may run a regime of its own, for its own space.
A relay never enforces a subject's regime.It may run a regime of its own, for its ownspace.
Where it is enforced: the subject's own engine
Where it is enforced: the subject's own engine
The subject Signs one association (17710) naming its guardians. Who governs changes only by the subject's own signature.
The subjectSigns one association (17710) naming itsguardians.Who governs changes only by the subject'sown signature.
The engine Runs in the subject's TEPP signer, TEPP client, or both. Fetches, verifies and assembles. Reads no ambient clock.
The engineRuns in the subject's TEPP signer, TEPP client,or both.Fetches, verifies and assembles. Reads noambient clock.
The construct One merged permission state: admission entries · deny gates · global set
The constructOne merged permission state:admission entries · deny gates · global set
Input May this arriving event reach the subject? Reading: one permitted person, place or thing admits; any deny blocks.
InputMay this arriving event reach the subject?Reading: one permitted person, place or thingadmits; any deny blocks.
Output May the subject sign this event? Acting: everyone and everything it names must be covered, and nothing denied is amplified.
OutputMay the subject sign this event?Acting: everyone and everything it names must becovered, and nothing denied is amplified.