Master Terms of Service & Hardware Dominion Covenant

1. Nature of the Service and Hardware Dominion

Pandora’s Lid operates exclusively as an operating-system-level governance policy under Android Enterprise Device Owner specifications on physical User 0.

The system does not install custom ROMs or modify OEM flash partitions. The handset remains under your physical ownership. You may, at any time through physical recovery or through the built-in 72-hour emergency break-glass facility, terminate all restrictions.

2. The Ulysses Covenant (Mutual Restraint Protocol)

Users enter into this agreement voluntarily to introduce meaningful friction between sudden impulses and unregulated digital consumption. You covenant and agree that:

• Two-Party Consensus (2-of-2 Multi-Signature): Newly installed applications intercepted from the Google Play Store require independent electronic signatures from both the Device Holder and the designated Accountability Partner before they are made visible or executable on the handset.
• Restricted App Store Access: Applications remain hidden and suspended until formal approval. Neither party alone can unilaterally reveal an application.
• Peer Mutuality: Both parties engage as independent, equal peers. Neither party assumes legal custody, parental authority, or fiduciary care of the other.

3. Web Filtering and Browser Allowlisting

Pandora’s Lid recognizes that an unrestricted web browser circumvents application restrictions. By default, the Device Policy Controller configures managed web browsers (including Google Chrome) to deny all general internet surfing, permitting access exclusively to explicit, approved domain patterns (such as online banking, essential transit services, and workplace portals).

Additions to the web allowlist follow the same dual-signature accountability protocol as software installations. You acknowledge that attempting to access unlisted domains will result in an administrative block page.

4. The Role of the Accountability Partner

The Accountability Partner is an unpaid, voluntary participant invited by the Device Holder. By accepting an invitation, the partner agrees to exercise their independent judgment when reviewing requests.

No Fiduciary Duty: The Accountability Partner does not owe a fiduciary duty, a professional standard of care, or an ongoing surveillance obligation to the Device Holder. The partner is under no obligation to respond promptly to requests, and shall have no liability whatsoever for any personal, commercial, or emotional consequences resulting from a delayed, approved, or refused request.

5. Emergency Off-Ramps & Exit Rights

To prevent digital hostage scenarios and ensure personal safety, Pandora’s Lid incorporates strictly enforced technical off-ramps:

6. Statutory Consumer Rights

If you reside within the United Kingdom or the European Union, nothing in these terms excludes or limits your statutory consumer rights under the Consumer Rights Act 2015 or Directive 2011/83/EU.

You are entitled to cancel your account at any time. Given the free nature of the basic protocol, rights of cancellation are fulfilled by triggering the Cooperative Unenrollment or Break-Glass decommissioning flow.

7. Prohibited Applications and Life Safety Disclaimer

Pandora’s Lid is intended solely for personal habit regulation and digital focus on consumer smartphones. It is strictly prohibited to deploy Pandora’s Lid on:

• Emergency dispatch, police, fire, or ambulance communication systems.
• Life-support systems, clinical patient monitors, or acute emergency diagnostic equipment.
• Critical commercial infrastructure, air traffic navigation, or industrial control apparatus.

While Pandora’s Lid incorporates hardcoded on-device exemptions for continuous glucose monitors (Dexcom, FreeStyle Libre, Medtronic) and domestic welfare services (NHS, Bright Sky), the software is not a certified medical device. You agree not to rely upon Pandora’s Lid for emergency life safety.

8. Limitation of Liability and Warranties

The software and services are provided "as is" and "as available", without warranty of any kind, express or implied. To the maximum extent permitted by applicable law, the project authors, maintainers, and contributors disclaim all warranties, including merchantability, fitness for a particular purpose, and non-infringement.

In no event shall the authors, maintainers, or your Accountability Partner be liable for any indirect, incidental, special, exemplary, or consequential damages (including loss of business, data, or profits) arising out of or in connection with your use or inability to use the device or software.