OCSS Rule Reference

Phosra implements OCSS and remains steward of record while a proposed transfer to independent governance is incomplete. The draft is published at openchildsafety.com.

This page is a generated snapshot of the OCSS rule registry (ocss-v4-draft-4), formatted for the Phosra API reference. The canonical source — the registry JSON, the specification text, and the conformance suite — lives at openchildsafety.com, not here. Every rule category listed below is an OCSS rule, not a Phosra invention. The slug vocabulary, capability assignments, and stability tiers are owned by the OCSS specification (§6.1, §6.2, §6.14).

Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. This page is regenerated from the registry JSON; the committed file is the source of truth for the Phosra API reference only.

All 123 OCSS rule categories can be exercised through the documented sandbox write path. What varies is per-rule capability — see the capability matrix. A sandbox 201 and sample signed receipt do not mean the rule was enforced by a real platform or carried on a production receipt rail. The typed iOS/Android SDK enums currently expose 45 — full-123 SDK support is tracked separately.

Role orientation — OCSS rules are not Phosra inventions. As a Phosra developer you are building against an open standard. The rule slugs in the API are OCSS identifiers — the same identifiers any other conformant OCSS provider uses. When a client sends rule_category: "addictive_pattern_block", it is invoking an OCSS rule defined at openchildsafety.com, not a Phosra feature flag.

Conformance posture. OCSS Draft 4 is an independent pre-release draft intended for standards-track submission; it is not ratified and has no official IETF Datatracker record. Phosra does not claim current certification or accreditation; certification pathways remain roadmap. Conformance evidence is something a regulator can weigh; it is not a compliance determination or a safe harbor.

Snapshot of OCSS spec_version=ocss-v4-draft-4; authoritative copy at openchildsafety.com. Rules in this tab are defined in §6.6 of the OCSS specification.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Requires sites serving content harmful to minors to verify 18+ via an accredited method — verify, decide, discard; no ID retention.

In API schema

Adult-Site Age Verification

Issuer: emit an age-verification challenge when a site serving content harmful to minors is accessed (floor: document_verified). Enforcer: MUST verify the user is 18+ via an accredited method, decide, and discard the identity evidence with no retention before granting access; platform enforcement requires the age-assurance lane active and a signed instrument record.

A valid rule_category value in the Phosra API's RuleCategory schema (POST /api/v1/policies/{policyID}/rules). See Conformance Status for endpoint availability and Rule Reference for the full parameter documentation.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "adult_site_av_required",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): document_verified — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored One parental-declared signal that fans out to a safe-by-default bundle across content, addictive-pattern, interaction, and social surfaces.

In API schema

OCSS Child Mode

Issuer (parental-controls vendor): when the parent enables Child Mode, write age_appropriate_profile_mode plus the downstream bundle

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "age_appropriate_profile_mode",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Enforces age verification requirements and restricts access to age-inappropriate content or features.

In API schema

Age Gate

Issuer: emit a signed age-band attestation once parental declaration or identity verification is complete (floor: parental_declared). Enforcer: MUST deny access to age-restricted surfaces unless a valid attestation at or above the policy's required age band is presented on every access.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "age_gate",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Emits the canonical age signal to every connected enforcement surface so apps and OSes act on a single source of truth.

In API schema

Age Signal Broadcast

Issuer: emit the canonical signed age-band signal (floor: parental_declared) to every connected enforcement surface. Enforcer: MUST treat this broadcast as the single source of truth for the minor's age band and MUST act on it consistently across apps and OS surfaces rather than re-deriving age locally.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "age_signal_broadcast",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Requires AI chatbot products to assert and verify the user's age band before any conversational interaction.

In API schema

AI Chatbot Age Assertion

Issuer: emit a signed age-band assertion for the user (floor: parental_declared) before any conversational AI interaction begins. Enforcer: MUST require a valid age assertion at or above the configured band before the first chatbot turn and MUST deny conversational access until one is presented; platform enforcement requires the age-assurance lane active and a signed instrument record.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "ai_chatbot_age_assertion",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Consumes age attestations issued by Apple and Google app stores as authoritative age signals for downstream enforcement.

In API schema

App Store Age Attestation

Issuer: relay the Apple or Google app-store age attestation (floor: parental_declared) as a signed age signal. Enforcer: MUST accept a valid store-issued attestation as authoritative for downstream age-band enforcement and MUST NOT require the minor to re-verify age for the same band.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "app_store_age_attestation",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Consumes the OS-level age signal (Apple, Google, Samsung, Microsoft) at the moment of enforcement.

In API schema

OS Age Signal Ingest

Issuer: relay the OS-level age signal (Apple, Google, Samsung, Microsoft; floor: parental_declared) at the moment of enforcement. Enforcer: MUST consume the OS age signal as an authoritative age-band input and act on it without requiring separate re-verification.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "os_age_signal_ingest",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Enforces minimum age requirements for social media platform access based on jurisdiction.

In API schema

Social Media Min Age

Issuer: emit a parental age declaration or a verified-age attestation before account access on a covered social platform (floor: parental_declared). Enforcer: MUST block account creation or login on covered platforms until a valid age attestation meeting the jurisdiction's minimum (typically 13–16) is received.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "social_media_min_age",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Anchored Enforces a statutory minimum age of 16 for account access on covered platforms.

In API schema

Teen Minimum Age 16 Gate

Issuer: emit a signed age attestation for account access on a covered platform (floor: parental_declared). Enforcer: MUST block account access until a valid attestation confirms the user meets the statutory minimum age of 16.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "teen_minimum_age_16_gate",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Provisional Escalates to government-ID verification when softer age signals fail to confirm a user is above the configured threshold.

In API schema

Hard ID Verification Escalation

Issuer: emit an escalation signal when softer age signals fail to confirm the user is above the configured threshold. Enforcer: MUST require an accredited government-ID verification (floor: document_verified) before granting access and MUST discard the ID after the decision; this escalation path is spec-defined, not yet legislatively mandated.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "hard_id_verification_escalation",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): document_verified — minimum identity-binding method class required for attestations on this rule.

Rule source: OCSS spec_version=ocss-v4-draft-4 (§6.6) — canonical registry at openchildsafety.com.

Provisional Gates content by an upstream civil-society age recommendation per title.

In API schema

Civil-Society Age Recommendation Gate

Issuer: emit an upstream civil-society age recommendation for the title (floor: parental_declared). Enforcer: MUST deny rendering on the minor's session when the recommended age exceeds the minor's age band; this gate is spec-defined and not yet legislatively mandated, and depends on the rating lane being active.

Apply this rule

json

// POST /api/v1/policies/{policyID}/rules
{
  "category": "rating_age_gate",
  "enabled": true,
  "config": {}
}

config is an opaque, category-specific object; per-category field schemas are not yet specified — see the OCSS rule definition for the normative Issuer/Enforcer requirements.

Age assurance floor (§7.3): parental_declared — minimum identity-binding method class required for attestations on this rule.

Capability matrix

The sandbox write path accepts all 123 categories through one test transaction shape. The other columns are independent capability axes — a rule can be Gated AND typed. A sandbox result or sample signed receipt does not prove downstream enforcement.

Rule	Write-sign	Typed params	Band	Registry tier
`addictive_design_control` — Addictive Design Control	✓	typed (category_descriptor_list)	Open	anchored
`addictive_pattern_block` — Addictive Pattern Block	✓	toggle-only	Open	anchored
`adult_site_av_required` — Adult-Site Age Verification	✓	typed (av_gate)	Open	anchored
`age_appropriate_profile_mode` — OCSS Child Mode	✓	toggle-only	Open	anchored
`age_gate` — Age Gate	✓	toggle-only	Open	anchored
`age_signal_broadcast` — Age Signal Broadcast	✓	toggle-only	Open	anchored
`ai_chatbot_age_assertion` — AI Chatbot Age Assertion	✓	typed (av_gate)	Open	anchored
`ai_chatbot_tier_gate` — AI Chatbot Tier Gate	✓	typed (numeric_threshold)	Open	anchored
`ai_companion_block` — AI Companion Block	✓	typed (ai_interaction_mode)	Open	anchored
`ai_data_responsibility_rating_threshold` — AI Data Responsibility Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`ai_minor_interaction` — AI Minor Interaction	✓	typed (ai_interaction_mode)	Open	anchored
`ai_no_csam_generation` — AI No-CSAM Generation	✓	toggle-only	Open	anchored
`ai_no_engagement_dark_patterns` — AI No-Engagement Dark Patterns	✓	toggle-only	Open	anchored
`ai_no_personhood_deception` — AI No-Personhood Deception	✓	toggle-only	Open	anchored
`ai_no_self_harm_promotion` — AI No-Self-Harm Promotion	✓	toggle-only	Open	anchored
`ai_no_simulated_companionship` — AI No-Simulated Companionship	✓	toggle-only	Open	anchored
`ai_no_unsupervised_therapy` — AI No-Unsupervised Therapy	✓	toggle-only	Open	anchored
`ai_product_classification_gate` — AI Product Classification Gate	✓	typed (rating_flag_gate)	Open	anchored
`ai_safety_rating_threshold` — AI Child-Safety Rating Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`ai_synthetic_media_disclosure` — AI Synthetic-Media Disclosure	✓	toggle-only	Open	anchored
`ai_toy_safety_cert` — AI Toy Safety Certification	✓	toggle-only	Open	anchored
`ai_training_data_opt_out` — AI Training Data Opt-Out	✓	toggle-only	Open	provisional (governance note — not a write gate)
`ai_transparency_rating_threshold` — AI Transparency Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`algo_feed_control` — Algorithm Feed Control	✓	toggle-only	Open	anchored
`algorithmic_audit` — Algorithmic Audit	✓	toggle-only	Open	anchored
`app_install_block` — App Install Block	✓	typed (app_targeted)	Open	anchored
`app_store_age_attestation` — App Store Age Attestation	✓	toggle-only	Open	anchored
`autoplay_disable` — Autoplay Disable	✓	toggle-only	Open	anchored
`cipa_filter_attestation` — CIPA Filter Attestation	✓	toggle-only	Open	anchored
`commercial_data_ban` — Commercial Data Ban	✓	toggle-only	Open	anchored
`commercial_pressure_threshold` — Commercial Pressure Threshold	✓	typed (numeric_threshold)	Open	anchored
`content_allow_title` — Content Allow Title	✓	typed (title_targeted)	Open	provisional (governance note — not a write gate)
`content_allowlist_mode` — Content Allowlist Mode	✓	toggle-only	Open	provisional (governance note — not a write gate)
`content_block_title` — Content Block Title	✓	typed (title_targeted)	Open	provisional (governance note — not a write gate)
`content_descriptor_block` — Content Descriptor Block	✓	typed (category_descriptor_list)	Open	provisional (governance note — not a write gate)
`content_rating` — Content Rating	✓	typed (numeric_threshold)	Open	anchored
`crisis_resource_surface` — Crisis Resource Surface	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`csam_reporting` — CSAM Reporting	✓	toggle-only	Open	anchored
`data_deletion_request` — Data Deletion Request	✓	toggle-only	Open	anchored
`data_minimization_enforce` — Data Minimization	✓	toggle-only	Open	anchored
`digital_literacy_curriculum_link` — Digital Literacy Curriculum Link	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`dm_feature_disable` — DM Feature Disable	✓	toggle-only	Open	provisional (governance note — not a write gate)
`dm_restriction` — DM Restriction	✓	typed (handle_list)	Open	anchored
`dpia_request_generator` — DPIA Request Generator	✓	toggle-only	Open	anchored
`dumbphone_migration_mode` — Dumbphone Migration Mode	✓	toggle-only	Open	provisional (governance note — not a write gate)
`educational_credit` — Educational Credit	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`ephemeral_message_disable` — Ephemeral Message Disable	✓	toggle-only	Open	provisional (governance note — not a write gate)
`esafety_commission_reporting` — eSafety Commission Reporting	✓	toggle-only	Open	anchored
`firearm_content_block` — Firearm Content Block	✓	toggle-only	Open	provisional (governance note — not a write gate)
`flagged_content_digest` — Flagged Content Digest	✓	typed (schedule_window)	Gated (accredited-tier)	provisional (governance note — not a write gate)
`gambling_mechanics_block` — Gambling Mechanics Block	✓	toggle-only	Open	anchored
`geolocation_opt_in` — Geolocation Opt-In	✓	toggle-only	Open	anchored
`geolocation_precision_cap` — Geolocation Precision Cap	✓	typed (category_descriptor_list)	Open	provisional (governance note — not a write gate)
`hard_id_verification_escalation` — Hard ID Verification Escalation	✓	toggle-only	Open	provisional (governance note — not a write gate)
`harm_report_intake` — Harm Report Intake	✓	toggle-only	Open	provisional (governance note — not a write gate)
`image_content_monitoring` — Image Content Monitoring	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`image_rights_minor` — Image Rights	✓	toggle-only	Open	anchored
`infinite_scroll_block` — Infinite Scroll Block	✓	toggle-only	Open	anchored
`library_filter_compliance` — Library Filter	✓	toggle-only	Open	provisional (governance note — not a write gate)
`message_content_monitoring` — Message Content Monitoring	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`minor_data_sale_audit_log` — Minor Data Sale Audit Log	✓	toggle-only	Open	anchored
`monitoring_activity` — Activity Monitoring	✓	toggle-only	Gated (accredited-tier)	anchored
`monitoring_alerts` — Monitoring Alerts	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`named_contact_block` — Named Contact Block	✓	toggle-only	Open	provisional (governance note — not a write gate)
`ncii_takedown` — NCII Takedown	✓	toggle-only	Open	anchored
`not_for_minors_block` — Not-For-Minors Hard Block	✓	typed (nfk_block)	Open	provisional (governance note — not a write gate)
`notification_curfew` — Notification Curfew	✓	typed (schedule_window)	Open	anchored
`os_age_signal_ingest` — OS Age Signal Ingest	✓	toggle-only	Open	anchored
`parental_attestation_cert` — Parental Attestation Certificate	✓	toggle-only	Open	anchored
`parental_consent_gate` — Parental Consent Gate	✓	toggle-only	Open	anchored
`parental_event_notification` — Parental Event Notification	✓	toggle-only	Gated (accredited-tier)	anchored
`phone_free_school_hours` — Phone-Free School Hours	✓	typed (schedule_window)	Open	anchored
`platform_liability_evidence_capture` — Platform Liability Evidence Capture	✓	toggle-only	Open	anchored
`presence_status_hide` — Presence Status Hide	✓	toggle-only	Open	provisional (governance note — not a write gate)
`privacy_account_creation` — Privacy Account Creation	✓	toggle-only	Open	provisional (governance note — not a write gate)
`privacy_data_sharing` — Data Sharing Control	✓	typed (category_descriptor_list)	Open	anchored
`privacy_location` — Privacy Location	✓	toggle-only	Open	provisional (governance note — not a write gate)
`privacy_profile_visibility` — Privacy Profile Visibility	✓	toggle-only	Open	anchored
`privacy_rating_dimension_gate` — Privacy Dimension Gate	✓	typed (rating_flag_gate)	Open	provisional (governance note — not a write gate)
`privacy_rating_score_threshold` — Privacy Score Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`privacy_rating_tier_gate` — Privacy Tier Gate	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`privacy_seal_required` — Privacy Seal Required	✓	typed (privacy_tier_gate)	Open	provisional (governance note — not a write gate)
`profanity_threshold` — Profanity Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`prosocial_weight` — Prosocial Weight	✓	toggle-only	Open	provisional (governance note — not a write gate)
`purchase_approval` — Purchase Approval	✓	toggle-only	Open	anchored
`purchase_block_iap` — Purchase Block IAP	✓	toggle-only	Open	anchored
`purchase_spending_cap` — Purchase Spending Cap	✓	typed (monetary_amount)	Open	provisional (governance note — not a write gate)
`rating_age_gate` — Civil-Society Age Recommendation Gate	✓	typed (rating_age_gate)	Open	provisional (governance note — not a write gate)
`recognized_seal_allowlist` — Recognized Seal Allowlist	✓	typed (privacy_tier_gate)	Open	provisional (governance note — not a write gate)
`representation_weight` — Representation Weight	✓	toggle-only	Open	provisional (governance note — not a write gate)
`role_model_weight` — Role Model Weight	✓	toggle-only	Open	provisional (governance note — not a write gate)
`school_alert_routing` — School Alert Routing	✓	toggle-only	Gated (accredited-tier)	anchored
`screen_time_report` — Screen Time Report	✓	typed (schedule_window)	Gated (accredited-tier)	anchored
`search_query_monitoring` — Search Query Monitoring	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`sexual_content_threshold` — Sexual Content Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`social_account_content_monitoring` — Social Account Content Monitoring	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`social_chat_control` — Social Chat Control	✓	toggle-only	Open	provisional (governance note — not a write gate)
`social_contacts` — Social Contacts	✓	typed (handle_list)	Open	provisional (governance note — not a write gate)
`social_media_min_age` — Social Media Min Age	✓	typed (age_value)	Open	anchored
`social_media_warning_label_render` — Social Media Warning Label	✓	toggle-only	Gated (accredited-tier)	provisional (governance note — not a write gate)
`social_multiplayer` — Social Multiplayer	✓	toggle-only	Open	provisional (governance note — not a write gate)
`stranger_dm_block` — Stranger DM Block	✓	typed (handle_list)	Open	anchored
`stranger_outreach_friction` — Stranger Outreach Friction	✓	toggle-only	Open	anchored
`streaming_age_rating_enforce` — Streaming Age Rating	✓	typed (numeric_threshold)	Open	anchored
`student_privacy_school_mode` — Student Privacy School Mode	✓	toggle-only	Open	anchored
`substance_content_threshold` — Substance Content Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`targeted_ad_block` — Targeted Ad Block	✓	toggle-only	Open	anchored
`teen_minimum_age_16_gate` — Teen Minimum Age 16 Gate	✓	typed (age_value)	Open	anchored
`third_party_tracker_block` — Third-Party Tracker Block	✓	toggle-only	Open	anchored
`time_daily_limit` — Daily Time Limit	✓	typed (duration)	Open	anchored
`time_downtime` — Time Downtime	✓	typed (schedule_window)	Open	anchored
`time_per_app_limit` — Time Per-App Limit	✓	typed (duration)	Open	provisional (governance note — not a write gate)
`time_scheduled_hours` — Scheduled Hours	✓	typed (schedule_window)	Open	anchored
`ugc_world_age_gate` — UGC World Age Gate	✓	typed (age_value)	Open	provisional (governance note — not a write gate)
`unrated_privacy_default` — Unrated Privacy Default	✓	typed (privacy_tier_gate)	Open	provisional (governance note — not a write gate)
`usage_timer_notification` — Usage Timer	✓	toggle-only	Gated (accredited-tier)	anchored
`violence_threshold` — Violence Threshold	✓	typed (numeric_threshold)	Open	provisional (governance note — not a write gate)
`voice_chat_minor_limit` — Voice Chat Minor Limit	✓	toggle-only	Open	provisional (governance note — not a write gate)
`web_category_block` — Web Category Block	✓	typed (category_descriptor_list)	Open	anchored
`web_custom_allowlist` — Web Custom Allowlist	✓	typed (domain_list)	Open	provisional (governance note — not a write gate)
`web_custom_blocklist` — Web Custom Blocklist	✓	typed (domain_list)	Open	provisional (governance note — not a write gate)
`web_filter_level` — Web Filter Level	✓	typed (numeric_threshold)	Open	anchored
`web_safesearch` — Safe Search	✓	toggle-only	Open	anchored

OCSS rule vocabulary is royalty-free per §5.5 of the specification ("Royalty-free with an unpublished audit bill is a fee schedule by another name" is the governing sentence). The canonical registry and spec text are at openchildsafety.com. If the standard and this mirror ever conflict, the standard (at openchildsafety.com) wins. Phosra's current stewardship posture and dated succession binding are published at /.well-known/ocss/succession — a signed, verifiable role binding, not a claim of accreditation or independent adoption. For the full list of callable rule categories with their API parameter documentation, see Rule Reference.