One Household.
One Policy. Every Screen.

The open-source protocol for native, kernel-level safety across Windows, Linux, Macs, Smart TVs, Mobile Phones, Gaming Consoles, and more.

Contribute on GitHub View RFC Specs

The Total Environment Standard

Moving beyond app-based limits to native OS state orchestration.

Atomic ChildSafe Mode

Instantly toggle restricted modes across the entire household. One signal reconfigures everything from PC kernels to TV inputs.

Kernel Enforcement

X-PP resides in the OS fabric (LSM/WFP), ensuring safety is tamper-proof and respects household sovereignty.

Privacy First

No central cloud tracking. All synchronization is End-to-End Encrypted and identity-bound.

Universal Quota

Time limits follow the identity, not the device. 1 hour on the console means 1 hour less on the laptop.

The FamilySafe OS Manifesto (v1.2)

The twelve principles for a safer digital household.

Vendor Neutrality Policies must be portable across all FamilySafe-certified platforms.
Decisional Hierarchy The household administrator is the ultimate authority.
API Transparency OS vendors must provide official, native policy hooks.
Privacy by Design Local processing and E2EE for all synchronization.
Simplicity as Security Setup via the QR Trust-Pairing model.
Offline Sovereignty Full governance must function in LAN-only environments.
Delegated Enrollment Mobile satellites act as secure proxies for setup.
Physical Safety Primacy (Break-Glass) Audited emergency access always supersedes digital rules.
Kernel-Level Authority Enforcement must be a native, tamper-proof OS subsystem.
Native Integration Evolution from middleware hacks to native kernel citizens.
Ecosystem Independence Freedom to mix hardware brands without losing governance.
Environmental Totality Policies follow the user, extending to TVs, Consoles, and Handhelds.

X-PP v2.4 Signaling

Universal JSON-LD schema for cross-platform compliance and real-time state synchronization.

{
  "@context": "https://familysafeos.org/v2",
  "@type": "StateChangeSignal",
  "state": "CHILD_SAFE_MODE",
  "enforcement": "KERNEL_MANDATORY",
  "parameters": {
    "uiFiltering": "NATIVE_KIDS_UI",
    "networkProfile": "STRICT_DNS_ONLY"
  }
}
View Full RFC v2.4.0 Specification →

Certification Program

Adherence to the X-PP standard allows manufacturers to display the FamilySafe OS badge.

FS-CL1 Network Gateway

Network Gateway

Compliance for legacy devices and closed IoT ecosystems via the X-PP Network Bridge/Proxy.

FS-CL2 System Integrated

System Integrated

Native system-service support and Remote Mode Signaling (RMS) without full kernel modification.

FS-CL3 Native Kernel

Native Kernel

The gold standard. Full integration into OS Kernel with hardware-backed security and an immutable watchdog.

View Audit Checklist