Swift native
Network Extension, local VPN/DNS, Family Controls and Managed Settings where approved, optional configuration profiles for stronger lockdown.
Product overview
Filtering you cannot impulsively switch off.
SentryPact is a privacy-preserving, lockdown-first blocker for adults and families who want protection that stays on at the exact moment it is needed most. It combines DNS, app, and browser filtering with timer-locked Solo Pacts, optional co-signers, tamper detection, and minimal accountability reporting.
Wedge
Most blockers fail at the same point.
The user can disable them when impulse is strongest. SentryPact starts from the opposite assumption: ask the user to make a clear pact up front, record the server-verified release time, and keep enforcement active until the pact is fulfilled or a documented release path completes.
Core language we use
- Lockdown-first filtering
- Timer-locked Solo Pacts
- Optional co-signer approvals
- Tamper and bypass detection
- Privacy-preserving accountability
Claims we will not make
- Impossible to bypass
- Unbreakable
- Addiction cure
- Guaranteed protection
- Secret monitoring
Architecture direction
Native enforcement, Rails control plane.
The cloud control plane owns accounts, subscriptions, devices, pact state, server-side time, partner relationships, approvals, tamper ingestion, reports, and signed configuration publishing. The enforcement layer stays native because the operating system is the only place real control lives.
Kotlin native
VpnService filtering, Device Admin friction where policy allows, accessibility services only when truly needed, no surveillance by default.
Native service
Windows Filtering Platform with locked DNS and hosts controls, tamper-resistant service registration, deterministic update behavior.
Companion extensions
Chrome, Edge, Firefox, and Safari companions for cosmetic filtering, DoH detection, SafeSearch enforcement, and YouTube Restricted Mode.
Rails control plane
Server-rendered dashboard, JSON APIs for native clients, signed configuration publishing, audit trail, and operator inspection.
Explicit and inspectable
SQLite for the local Rails scaffold today, PostgreSQL likely once the control plane stores real pact and device state.
First product target
SentryPact Solo for iOS.
The MVP focuses on the smallest believable loop: a person can install the app, choose categories, lock a Solo Pact, and stay locked through the release time even when their willpower changes.
- Account creation
- Local VPN/DNS filtering
- Categories: porn, gambling, drugs, ads/trackers, malware/phishing, proxy/VPN/Tor
- Solo Pact timers for 24h, 72h, 7d, and 30d
- Server-verified release timestamps
- Basic tamper detection
- Emergency unlock with a 24h cooling-off period
- Blocked-attempt counter
- Minimal dashboard
- Signed blocklist CDN
- Privacy-first weekly summary
- Out of scope for v0.1: partner dashboard
- Out of scope for v0.1: family accounts
- Out of scope for v0.1: desktop apps
- Out of scope for v0.1: router DNS
- Out of scope for v0.1: AI classification
- Out of scope for v0.1: deep reports
- Out of scope for v0.1: group plans
- Out of scope for v0.1: MDM features
Roadmap direction
One thing at a time, in the right order.
Each step earns the next. We will not start a full native app until the control plane has contracts the native client can actually consume.
- Rails website and backend foundation. Public site, accounts, devices, pact state, audit events, signed configuration publishing.
- iOS Solo MVP. Local VPN/DNS filtering, server-verified Solo Pact release, tamper detection, minimal reporting.
- Android Solo MVP. VpnService and Device Admin where appropriate, with the same pact semantics.
- Co-Signed Pact mode. Approval requests, tamper alerts, weekly privacy-preserving reports.
- Desktop and browser coverage. macOS, Windows, and browser companions.
- Family and group plans. Parent dashboard, child profiles, recovery and coach groups.
- Intelligence layer. On-device classification, bypass research, false-positive review.