🤫hussh
  • Wiki
Reserve
🤫hussh
The Hussh Protocol · PCHP

Privacy you can verify.

PCHP — the Personal Consent Handshake Protocol, “SSH for humans” — is the open consent layer behind 🤫 One. Read it the way a privacy-first reviewer would: your data stays on hardware you own, you share the exact field and nothing more, every access writes a receipt you can read, and you can revoke at any time. Identity without exposure. No tracking. No selling.

Read the formal RFC-001Privacy & ownership
Reviewed from a privacy-first point of view

The principles a careful reviewer looks for — enforced, not promised.

📲 On your device

Your data stays yours

Your information lives on hardware you own. The server only ever holds ciphertext; the key that unlocks your vault lives in memory, on your device, and nowhere else.

🤏 Data minimization

The exact field, nothing more

Every request is negotiated down to the precise scope and the precise moment. No bulk copies, no “give us everything,” no shadow profile assembled behind your back.

🧾 Transparency

A receipt for every access

Both sides sign a receipt and both keep a copy. You can see exactly what left your vault, to whom, for what purpose, and for how long — on a ledger only you can read.

🎛️ Control

Consent-gated and revocable

Nothing moves without your explicit consent, granted with a biometric unlock. Consent has a purpose and an expiry, and you can pull it back at any time.

🪪 Identity without exposure

Prove who you are, not your whole life

PCHP resolves identity the way SSH proves a machine — without exposing the secrets that make you you. Today identity is a reverse-lookup key; PCHP ends that.

🚫 Not the product

No tracking. No selling.

There are no cookies or trackers reconstructing you across apps. Your information is never sold and never used to train someone else's model. You are the owner, not the inventory.

The handshake

Every exchange, the same four phases.

01

Identity resolution

Who are you, really? Not what you claim — what you can prove. Like SSH, identity is established without handing over the secrets behind it.

02

Consent negotiation

What, specifically, is being requested? For how long, and for what purpose? When does consent expire? You decide, in plain terms.

03

Scoped data exchange

You release exactly what was negotiated — no more, no less — scoped to the moment, encrypted end to end.

04

Audit receipt

Both sides sign a receipt, both keep a copy, and both can be held to it later. The record is yours to read forever.

Composable

A consent layer on top of the rails the world already uses.

PCHP is not a walled garden. It adds identity, scope, and a receipt to the open agent rails — so it strengthens what exists rather than replacing it.

MCP

Model Context Protocol

How an agent reaches tools and data. PCHP wraps each access in consent and writes it to your ledger.

A2A

Agent-to-Agent

How two agents talk. The handshake is the PCHP meeting when two Ones meet on behalf of their humans.

AP2

Agent Payments

How agents pay. PCHP gates the settlement and records it on both ledgers.

UCP

Open commerce rails

How agents transact. PCHP scopes what is shared, with the receipt on your ledger.

The promise, in numbers

What the protocol guarantees.

4
Phases

Identity, consent, scoped exchange, receipt — every time.

1
Field at a time

Data minimization by construction: the exact scope, nothing more.

100%
Audited

A receipt for every access, on a ledger only you can read.

0
Sold or tracked

No cookies, no trackers, no selling, no training on your data.

Open, not owned

RFC-001, published for the world.

PCHP is published openly as RFC-001 and shared for policymakers, professors, and scientists to consider and adopt — a consent layer the whole internet can build to, so a person's identity can be resolved without their private life being handed over by default. Own the name; open the pattern.

Questions, answered

The Hussh protocol, in plain English.

What is the Hussh protocol (PCHP)?+

PCHP — the Personal Consent Handshake Protocol, “SSH for humans” — is an open consent layer that sits on top of the communication protocols the world already uses. Every time another party wants your information, it runs the same four phases: identity resolution, consent negotiation, scoped data exchange, and an audit receipt. Identity is proven without exposing the secrets behind it, and nothing is shared without your consent and a receipt.

How is this aligned with an Apple-style privacy point of view?+

It enforces the same principles a privacy-conscious reviewer expects: data stays on hardware you own (the server holds only ciphertext), data minimization (the exact field, nothing more), transparency (a receipt for every access), user control (consent is purpose-bound, expiring, and revocable), identity without exposure, and no tracking or selling. Privacy isn't a promise here — it's the protocol.

Is it open, or owned by hushh?+

Open. PCHP is published as RFC-001 under an open license; any product or agent may implement it, and no patent is claimed on the core handshake. We own the name and open the pattern, because a consent standard only works if the whole world can build to it.

Why does the protocol matter to me as an individual?+

Today your phone number, name, and email are reverse-lookup keys that let companies — and anyone who breaches them — assemble your private life without your knowledge, leaving you holding the bag. PCHP flips that: your information becomes your business and your asset, shared only by your consent, scoped to the moment, with a receipt you can audit and revoke.

Consent is the whole point.

Read the formal RFC, see how it sits in the whole platform on the Mega Map, or claim your One and start owning your information today.

Read the formal RFC-001See the Mega MapClaim your One — free

One is a product of Hushh Technologies Corporation (brand: 🤫 “hussh”), an independent company. One runs on third-party silicon, systems, and cloud; all company names are used solely to describe the platforms on which One software runs. Hushh Technologies is not affiliated with, endorsed by, sponsored by, or partnered with any company named.