{
  "meta": {
    "title": "feature+windows — 项目 TODO",
    "updated_at": "2026-06-22T09:32:56.170Z"
  },
  "seq": 3,
  "items": [
    {
      "id": 1,
      "title": "macOS 原生 KillSwitch 补齐 L0→L3",
      "desc": "现状 L0(stub)：VpnChannel.swift:69 setKillSwitch 直接 result(nil)、includeAllNetworks()→false。天花板 L3。改 NetworkExtension：includeAllNetworks=true + NEOnDemandRule 常开 + enforceRoutes，由 neagent 系统级强制、扛 app 崩溃。性价比最高的跨端缺口。依据见 docs/killswitch-design.md §4-6。",
      "level": "mid",
      "tier": 2,
      "tags": [
        "mac"
      ],
      "status": "open",
      "created_at": "2026-06-22T09:32:42.340Z",
      "done": false,
      "completed_at": null,
      "version": null
    },
    {
      "id": 2,
      "title": "Android KillSwitch L1 + 引导系统 Always-on",
      "desc": "现状 L0(stub)：MainActivity.kt setKillSwitch 只打日志(TODO 11G)。目标：app 内做到 L1(config TUN strict_route，复刻 Windows 的 applyKillSwitchToConfig 语义) + 深链引导用户开系统设置「始终开启 VPN + 无 VPN 时阻止连接」拿 L3，UI 诚实标注「彻底防泄漏需在系统设置开启」。属 Android 客户端 11G。依据见 docs/killswitch-design.md §4-6。",
      "level": "mid",
      "tier": 2,
      "tags": [
        "Android"
      ],
      "status": "open",
      "created_at": "2026-06-22T09:32:56.098Z",
      "done": false,
      "completed_at": null,
      "version": null
    },
    {
      "id": 3,
      "title": "Windows KillSwitch L1→L2 (WFP 防火墙强制)",
      "desc": "现状 L1：desktop_vpn_bridge.dart strict_route + 子进程重载，进程被硬杀仍泄漏。目标 L2：app 装 WFP(Windows Filtering Platform) 过滤器阻断非隧道流量，做成系统服务持久化才能扛崩溃。工作量较大，backlog。依据见 docs/killswitch-design.md §4-6。",
      "level": "low",
      "tier": 1,
      "tags": [
        "Windows"
      ],
      "status": "open",
      "created_at": "2026-06-22T09:32:56.169Z",
      "done": false,
      "completed_at": null,
      "version": null
    }
  ]
}