Changelog

November 2026

Family Filter for iPhone, the parent’s iPhone app: alerts as push notifications, the off switches and Focus controls, and history, at home and away.
Away from home: the filter API, history service and notifier on the tailnet, at real HTTPS addresses, with nothing opened to the internet.
History service on the Firewalla, append-only, with an archive Mac. History Sync 1.1 sends to it.
Home check: the child’s Mac connects its VPN only while home answers, so home being down leaves it with ordinary internet instead of none. IPv6 is now sent into the tunnel and dropped, rather than going around the filter.
VPN reconnect helper on the child’s Mac, for waking on a new network.
The child’s iPhone set up like the iPad: the certificate profile and an on-demand tunnel in the WireGuard app.

URL filter on the Firewalla: mitmproxy, reached through the child’s WireGuard tunnels, blocking whole sites or single pages. It has a never-blocked list, a log of page loads and an API. The Mac app’s Web blocking card runs it, and the timeline marks blocked visits.
Trust but verify: alerts when a device’s certificate seems removed, when it’s at home with the VPN off, and when visits were made with the VPN off.
Off switches: the whole filter, for a time or until turned back on, and one device at a time.
Focus Mode: block sets on a schedule or on demand, time limits, allowances, days off, and “I’m done with my work”.

History Sync.app replaced the Python launchd agent. It installs its own background service, so Full Disk Access goes to one signed app. It’s notarized.
Timestamps use the UTC offset in force on the visit’s date. Older visits across a daylight-saving change used to be an hour off.
Safari report, for deciding what else to sync.
Chrome: History Sync sends every Chrome profile’s history, notices history that has disappeared, and checks the Chrome History Lock. The viewer shows the browser and lists deletions.
Heartbeat and viewer alerts for a Mac that stops checking in.

safari_history.py: export Safari history, or push it from a launchd agent. Still handy for one-off exports.