What Blackout Kit does provide
- Local runtime orchestration
- Local readiness and route guidance
- Machine-bound encrypted storage for saved proxy URIs and supported secrets
- Linux endpoint-scoped kill switch support
- Targeted cleanup of Blackout-owned crash leftovers
What it does not guarantee
- Anonymity
- Traffic-analysis resistance
- That a country profile will work on a given network
- That a green local readiness check means the tunnel will succeed
- That an upstream server is trustworthy
Security modes
- speed — compatibility-focused local settings
- private — randomized XRay fingerprint plus MUX
- legend — stricter handling for known-bad normal TLS certificates
These are local configuration presets, not privacy guarantees.
Kill switch policy
The supported kill switch is Linux-only. The old Windows Firewall approach is intentionally unsupported and its legacy rules are removed instead of being treated as safe protection.