Safety products should not prove their value by creating anxiety.
MTFDX follows the principle of "quiet when normal, clear when abnormal": controlling false alarms, avoiding unconfirmed danger conclusions, and preserving a human path for critical actions.
Today2 children
15:30 HandoverOn time
Trusted adultWindow active
Safety by Design.
Least privilege
Evidence by Design
Offline/Fail-safe
Human escalation
Device neutral
Color is not a conclusion; status must be backed by evidence.
Unverified anomalies are not directly displayed as "danger."
Normal
Proceeding quietly as planned.
Needs confirmation
Prompt confirmation first, then explain.
Emergency
Only after high risk is confirmed.
At any moment, only one primary responsible party is permitted.
If a Handover fails, the original responsible party is retained to prevent incorrect system switching.
Today2 children
15:30 HandoverOn time
Trusted adultWindow active
Where automation cannot reach, there must be a human fallback path.
- Normal: quiet
- Needs confirmation: verify first
- Emergency: only after confirmation
Today2 children
15:30 HandoverOn time
Trusted adultWindow active
Network, battery, GPS, and cloud services can all fail.
Critical flows must not assume "everything is online."
Offline, today's essentials stay available.
Critical flows must not assume "everything is online."
- Cache only today's roster and consents
- Re-sync on reconnect, tagged offline_origin
Critical actions can be traced, but this is not about recording a child's entire life.
AI cannot replace the responsible person in the real world.
- AI is never the responsible adult
- High risk goes to a real adult
- Age-appropriate support
Today2 children
15:30 HandoverOn time
Trusted adultWindow active