Technical Documentation
Reference manuals, permission lifecycles, and cryptographic offline licensing specifications for AmniShield.
Initial Setup & Android Permissions
To enforce un-bypassable local filtering without VPN performance degradation or external server proxies, AmniShield utilizes Android system APIs:
Accessibility Service
Inspects active package and browser address bar nodes strictly on-device to execute instant redirects.
Usage Access
Tracks foreground app time windows for Focus Mode schedules and daily app launch limiters.
System Overlay
Displays peaceful mindful block screens and PIN lockout verification modals over restricted apps.
Core Blocking Engines
App Blocker & Unified Schedules
Create time-bounded schedules (e.g., blocking social media during work hours or prayer times) and apply launch quotas.
Local Keyword Blocker
Monitors on-screen text in real time. If custom sensitive keywords appear, the view is instantly obscured or closed.
50,000+ Curated Domain Database
Includes categorized filter packs for adult content, gambling, and addictive feeds compiled directly inside the app binary.
AmniHaze On-Device AI Vision Engine
AmniHaze executes real-time neural vision moderation locally using Google LiteRT (TensorFlow Lite) on Android and WebAssembly/WebGL in browser extensions.
Automatic Model Selection
Full Screen: Dispatches to a high-speed whole-screen classification network (224×224 input) for instant screen-wide modesty scoring.
Body Region & Silhouette: Swaps to a YOLO object detection network (416×416 input) with 3,549 spatial anchors and IoU Non-Maximum Suppression (NMS) for pinpoint box blurring.
Zero-GC Double-Buffered Pipeline
Captures frames via MediaProjection into pooled, pre-allocated double buffers (`pooledBitmaps[2]`). Renders smooth 30+ FPS frosted glass overlays with zero garbage collection stutter.
Unified Role Console & Ephemeral Device Pairing
Personal User Mode vs. Guardian Mode
The centralized web console dynamically toggles between Personal Mode (self-management, active seat licenses, personal rules) and Guardian Mode (enforcing non-bypassable policies, tamper protection, and master PIN lock across enrolled family devices).
Ephemeral Pairing Protocol
Enrolling new client devices (Android, Windows, Web Filter) uses an ephemeral 6-digit PIN and dynamic QR code generated with a strict 10-minute time-to-live (TTL). Once claimed, the client subscribes to Supabase Realtime for instant remote policy updates.
Cryptographic Offline-First Licensing
AmniShield Pro passes use NIST P-256 Elliptic Curve Digital Signatures (`SHA256withECDSA`).
The license string is structured as Base64(PayloadJSON).Base64(SignatureBytes). The client verifies the signature using the embedded X.509 public key keyring 100% offline. No remote telemetry or active network connection is required to keep Pro features active.