Standard Script
A lightweight, fail-open browser tag that fetches a signed deployment manifest and applies constrained typed-DSL changes to the DOM at runtime.
Private beta — available to agency partners
This capability is live and working for agencies in GeoScript's private beta program. Learn about agency access →
What Standard Script does
Standard Script is GeoScript's client-side connection method. It is a small JavaScript tag that agencies install on a client's website. At page load, the script fetches a signed deployment manifest from GeoScript's infrastructure and applies the approved changes to the DOM using a constrained typed DSL. The script is fail-open: if it cannot reach GeoScript or the manifest fails validation, the page loads normally without any change or error.
How it works
Constrained typed DSL
The Standard Script does not execute arbitrary JavaScript. It applies changes using a typed, constrained DSL — a set of allowed primitive operations like injecting a JSON-LD schema block, adding a meta tag, or inserting a structured FAQ block. The DSL explicitly rejects any operation involving <script> injection, onclick handlers, or javascript: URLs. This constraint is enforced at the manifest validation layer — an instruction that violates the DSL will not be applied.
Signed manifest
The script fetches a manifest from a signed endpoint. The manifest is cryptographically signed and validated before any DOM operation is applied. A manifest that fails signature validation is rejected entirely — the page loads without any GeoScript changes. This prevents tampering with the instructions in transit.
Fail-open design
If the GeoScript endpoint is unreachable, the script times out and the page loads without any change. There is no error thrown, no visible effect on the user, and no dependency on GeoScript for normal page operation. The Standard Script is designed so that removing GeoScript from a site is as simple as removing the tag — no side effects remain.
Verified DOM apply
DOM operations are verified using jsdom-tested real DOM apply logic. The runtime confirms that each DSL primitive executed as intended before marking the deployment as applied.
What Standard Script does not do
Clear boundaries increase trust. These limitations are documented explicitly, not buried in footnotes.
Standard Script does not execute arbitrary JavaScript — it is constrained to the typed DSL primitives.
Standard Script does not provide server-side rendering, CDN-level interception, or origin-side modifications — those capabilities require Advanced Edge, which is in development.
The script does not collect user data, sessions, or behavioral telemetry — it applies content changes only.
Standard Script cannot modify content that requires JavaScript rendering to display — it operates on the loaded DOM.
GeoScript does not control what the client website does with the DOM after the script runs — the script applies its primitives and does not monitor ongoing page behavior.
Related
Other features
Optimization Engine
Private betaTurn Content Genome findings into typed, deterministic recommendations proposing exact DOM-level changes to improve AI understanding.
Automated Deployment
Private betaRisk-aware approval, signed packaging, preflight, activation, independent verification, and rollback for every deployed intervention.
GeoScript is in private beta
Agency partners get access to the full capability set — acquisition, monitoring, website intelligence, optimization, deployment, and reporting — for $299/month per active client.