{
  "schema_version": "1.0",
  "title": "Private Family Space Architecture",
  "status": "public blueprint; encrypted backend not activated until its independent proof matrix passes",
  "purpose": "Restore the joy of personal pages, direct presence, files and chat without rebuilding advertising, engagement ranking, surveillance or purchased influence.",
  "root_laws": [
    "Every person has their own space, keys, choices and portable archive.",
    "Private is the starting state, not a temporary draft waiting to become public.",
    "No global feed, trending score, follower market, like count or attention auction controls visibility.",
    "Support, guardianship, recovery and succession do not grant secret transcript access.",
    "Children grow into greater authority; adults do not permanently own a child's identity.",
    "Every outward share shows the exact content, audience, duration, copying rule and withdrawal path.",
    "The system is free at the human core and cannot sell personal data, attention or access to a person."
  ],
  "spaces": [
    {
      "id": "my-space",
      "name": "My Space",
      "features": ["personal colors and layout", "about me", "music and art", "private journal", "chosen public card", "room-specific identity", "export and delete"],
      "default_visibility": "private"
    },
    {
      "id": "direct-chat",
      "name": "Direct Chat",
      "features": ["presence by choice", "direct messages", "small group rooms", "voice notes", "files", "reactions without popularity scoring", "block, mute, leave and report"],
      "default_visibility": "invited participants"
    },
    {
      "id": "family-room",
      "name": "Family Room",
      "features": ["shared calendar", "photos", "stories", "tasks", "care plans", "language choices", "succession plan", "family archive"],
      "default_visibility": "named family circle"
    },
    {
      "id": "project-room",
      "name": "Project Room",
      "features": ["creative planning", "approvals", "versions", "support offers", "public preview proposals", "child veto", "portable project archive"],
      "default_visibility": "invited collaborators"
    },
    {
      "id": "learning-room",
      "name": "Learning Room",
      "features": ["questions", "resources", "mentor access", "progress owned by learner", "no public ranking", "multiple communication modes"],
      "default_visibility": "learner and chosen supporters"
    }
  ],
  "backend_layers": [
    {
      "id": "identity",
      "requirements": ["passkeys", "optional recovery codes", "age-respectful identity", "pseudonyms", "room-specific profiles", "no identity sale"]
    },
    {
      "id": "keys-and-encryption",
      "requirements": ["audited established cryptography", "client-held content keys", "end-to-end encrypted messages and files", "key rotation", "device removal", "no home-grown cipher"]
    },
    {
      "id": "files",
      "requirements": ["client-side encryption before upload", "encrypted object storage", "metadata minimization", "malware scanning before encryption where possible", "portable export", "retention and deletion choices"]
    },
    {
      "id": "messaging",
      "requirements": ["end-to-end encryption", "small-room focus", "no engagement ranking", "consent for adding participants", "forwarding and download controls", "selective report disclosure"]
    },
    {
      "id": "safe-browser",
      "requirements": ["auditable open-source engine adapters", "isolated profiles", "tracker blocking", "safe-search choices", "download quarantine", "permission explanations", "guardian guidance without full browsing transcript", "child ability to ask for help"]
    },
    {
      "id": "public-projection",
      "requirements": ["separate public copy", "exact preview", "audience and duration", "subject approval", "child and guardian choice where required", "revocation and replacement"]
    },
    {
      "id": "support-and-safety",
      "requirements": ["block", "mute", "leave", "trusted-help request", "emergency escalation", "non-punitive repair", "human review", "no automated life-status decision"]
    },
    {
      "id": "portability",
      "requirements": ["open export", "encrypted archive", "interoperable contacts", "media originals", "consent receipts", "project separation", "account deletion"]
    }
  ],
  "child_growth": {
    "principle": "Protection changes with development; it does not freeze a child into permanent adult control.",
    "stages": [
      {
        "stage": "supported beginning",
        "child_authority": ["choose expression", "approve people", "veto public release", "ask for help", "leave a room"],
        "adult_role": ["explain", "protect", "co-approve legally required actions", "never impersonate silently"]
      },
      {
        "stage": "growing independence",
        "child_authority": ["manage more contacts", "hold personal recovery factor", "create private rooms", "review guardian actions", "export personal work"],
        "adult_role": ["support by request", "respond to safety conditions", "prepare handover"]
      },
      {
        "stage": "adult handover",
        "person_authority": ["full keys", "full export", "replace guardians", "retain or delete childhood archive", "choose continuing family roles"],
        "system_rule": "Handover is explicit, documented, reversible during a transition window and does not expose private childhood messages to former stewards."
      }
    ]
  },
  "succession": {
    "events": ["lost device", "forgotten access", "guardian incapacity", "guardian death", "family separation", "child reaches adulthood", "adult incapacity", "death of account holder", "unsafe steward removal"],
    "model": "threshold recovery using multiple independent trusted factors",
    "minimum_rule": "No single steward can seize an identity, decrypt all history or publish on behalf of another person.",
    "possible_outcomes": ["restore access", "rotate keys", "transfer stewardship", "archive", "memorialize", "delete", "continue a family or project space"]
  },
  "monetization_boundary": {
    "advertising": false,
    "behavioral_profiling": false,
    "sale_of_personal_data": false,
    "pay_to_reach_people": false,
    "engagement_ranking": false,
    "paid_authority": false,
    "core_human_features_free": true,
    "allowed_support_model": ["voluntary infrastructure sponsorship", "community hosting", "grants without data rights", "transparent cost sharing", "self-hosting"]
  },
  "activation_gate": {
    "public_blueprint_may_deploy": true,
    "accounts_may_open": false,
    "private_messages_may_open": false,
    "file_uploads_may_open": false,
    "safe_browser_may_open": false,
    "required_before_activation": [
      "threat model",
      "independent cryptography review",
      "child-safety and abuse-response review",
      "identity and recovery proof",
      "data deletion and portability proof",
      "whole-life accessibility proof",
      "language and script proof",
      "failure, rollback and succession proof",
      "live observation proof"
    ]
  }
}