Fail-Closed 账号环境管理器:11项环境指纹审计(Block-on-Fail)、手写STUN协议栈的WebRTC泄漏探针、Kill-Switch断网急停、多账号快照隔离、配置漂移自愈 —— 让真实IP在物理上无法泄漏
One-command per-domain routing over a VLESS/Trojan subscription for OpenWrt (xkeen + xkeen-UI): pick which server(s) each domain list uses, auto-balance by latency, kill-switch, auto-refreshed domain lists.