The record
A record that holds
An append-only log. Merits and standing are worked out from it each time, never stored. Nothing is deleted, so what happened stays happened.
Protocol
An agreed procedure between two people.
An agreed procedure
Protocol is an app for two people in a D/s relationship. It holds the tasks, rituals and rules you have agreed, a record neither of you can rewrite, and writing nobody else can read.

What goes wrong
An agreement is only as steady as the record of it, and a record can fail in several ways. Protocol is built against three.
The record
An append-only log. Merits and standing are worked out from it each time, never stored. Nothing is deleted, so what happened stays happened.
Privacy
Titles, notes and proof are encrypted on your device, and the server never holds a key. Lose the recovery code and no one, including us, can recover the writing.
The brake
Either person can pause everything at once. Asking to skip one item can never become a “no” by silence. Rewards are petitions, not purchases.
In use

What is set, what is due, what is done. One screen, written the way a page is written.

Proof is read, all of it, and answered in words. The answer says what counted and why.

The balance is the sum of what happened. A miss is shown, in clay, and it is spoken about.

Raised by either of you, lifted by both. While it holds, nothing runs and nothing is owed.
A day, in six lines
The loop is short on purpose. Each step leaves a line in the log.
Morning report
Written · due 09:00
Ten minutes, seated, no phone
Kept · answered 21:14
Kitchen set right before bed
Photographic · due 22:30
Submitted 07:52
Encrypted on the device before it leaves it
Read, all of it.
Answered in writing
Letter, finally sent
One merit
Quiet by design
The mark is two rings, which could be anything. Notifications say that something is waiting and not what. The app can sit behind the phone’s own biometric lock, and quiet hours keep the lock screen empty when you ask it to.
Stopping always works
Nothing new is set, nothing is due, and nothing counts as missed until you resume.
Early access
Protocol is in testing on Android. We will write once, when there is something to install, and not otherwise.