Protocol

An agreed procedure between two people.

An agreed procedure

Structure two people have agreed to.

Protocol is an app for two people in a D/s relationship. It holds the tasks, rituals and rules you have agreed, a record neither of you can rewrite, and writing nobody else can read.

The Today screen: four obligations for the day, one already kept.

What goes wrong

An agreement is only as steady as the record of it, and a record can fail in several ways. Protocol is built against three.

The wrong day
A day that ends at the wrong hour counts what you did at ten past midnight against the day before.
The edited past
When either of you can change an entry, “it says I did it” and “it says I didn’t” have nothing left to settle them.
The open page
What you write sits on a server where whoever runs it can read it.

The record

A record that holds

An append-only log. Merits and standing are worked out from it each time, never stored. Nothing is deleted, so what happened stays happened.

How the record works

Privacy

Private by construction

Titles, notes and proof are encrypted on your device, and the server never holds a key. Lose the recovery code and no one, including us, can recover the writing.

What we can and cannot see

The brake

Stopping always works

Either person can pause everything at once. Asking to skip one item can never become a “no” by silence. Rewards are petitions, not purchases.

How the pause works

In use

Today: Morning report, a kitchen photograph, a kept ritual and a standing rule.

Today

What is set, what is due, what is done. One screen, written the way a page is written.

A written submission, and below it the answer: Read, all of it. One merit.

Reading and answering

Proof is read, all of it, and answered in words. The answer says what counted and why.

The ledger: Fourteen merits, standing steady, and the entries behind them.

The ledger

The balance is the sum of what happened. A miss is shown, in clay, and it is spoken about.

The pause: Everything is paused. No obligations run, nothing is counted, nothing is owed.

The pause

Raised by either of you, lifted by both. While it holds, nothing runs and nothing is owed.

A day, in six lines

Set, do, prove, read, answer, count.

The loop is short on purpose. Each step leaves a line in the log.

Morning report

Written · due 09:00

Ten minutes, seated, no phone

Kept · answered 21:14

Kitchen set right before bed

Photographic · due 22:30

Submitted 07:52

Encrypted on the device before it leaves it

Read, all of it.

Answered in writing

Letter, finally sent

One merit

+1

Quiet by design

Nothing on the surface says what this is.

The mark is two rings, which could be anything. Notifications say that something is waiting and not what. The app can sit behind the phone’s own biometric lock, and quiet hours keep the lock screen empty when you ask it to.

Stopping always works

Nothing new is set, nothing is due, and nothing counts as missed until you resume.

Early access

Protocol is in testing on Android. We will write once, when there is something to install, and not otherwise.