Welcome
A fully local, zero-trust system that splits every privileged operation into isolated, self-defending agents so a single breach doesn't mean death.
The Plagues Protocol is the ultra-minimalist, zero-trust local RPC protocol that powers every single interaction inside the XRUIOS (Our Cross Platform Framework/OS/Abstraction Layer).
Windows • Linux • Easy To Add Platforms • Fully Offline • Post Quantum Computing Resistant • No BS
How it works
The Plagues Protocol enforces a cryptographically-sealed boundary on the same machine between:
- Untrusted side – your shell, apps, plugins (running as the logged-in user)
- Trusted side – tiny, manifest-protected workers running as SYSTEM/root
All communication uses MagicOnion over OS-local channels (named pipes / Unix sockets) for zero-copy performance and zero network exposure.
Trusted workers:
- Verify their own executable and DLLs against a Kyber-signed manifest (Blake3 hashes) before listening
- Refuse to run if tampered
- Require no discovery, no TLS, no handshake — if you can open the pipe and the worker self-verified, the call is allowed
Result: Even a complete userland compromise cannot escalate or exfiltrate privileged data.
“A single breach can never conquer the machine.”
| Code by WalkerDev “Loving coding is the same as hating yourself” Discord |
Art by Kennaness “When will I get my isekai?” Bluesky • ArtStation |
View on GitHub • Walker Industries • Discord • Patreon
Use Plagues Doctor; A CMD Tool To Easily Use Plagues Protocol •
---What's In Here
| Focus | Description |
|---|---|
| Worker.cs | A Windows Specific Service Worker Example |
| Worker.cs | A Linux Specific Service Worker Example |
| PublicAcc.cs | The MagicOnion Server Interface And Definitions Shared Between Linux/Windows Workers |
| Accounts.cs | The Windows specific function for getting the data from the Service Worker |
| Accounts.cs | The Linux specific function for getting the data from the Service Worker |
| Core.cs | Where code cross platform by default goes + the XRUIOS.Windows or Linux |
| Program.cs | A CMD Test Of The XRUIOS.Core |
Full overview → 1. Design Philosophy
Using The System
//The Base DLL (Ensure you also have all other DLLs for your OS at minimum)
//Also Shared References Between OSes
using XRUIOS.Core;
using XRUIOS.Interfaces;
//We assume the worker "XRUIOS.Windows.PublicAccountDataHandler" was launched already at start, which should have resulted in the address "worker_addr" being populated with the API endpoint we want to
//If the worker address is not exist, you can wait for it to be set but for now we handle the exception
var clientAddr = Utils.SecureStore.Get<string>("worker_addr");
if (clientAddr == null)
{
throw new Exception("Worker address not found in secure storage.");
}
//Take the resulting address and setup an Onion Client
using var channel = Grpc.Net.Client.GrpcChannel.ForAddress(clientAddr);
var client = MagicOnion.Client.MagicOnionClient.Create<XRUIOS.Interfaces.IPublicAcc>(channel);
//Get the resulting data and ensure it shows something
var result = await client.GetAccInfo(Environment.UserName);
Console.Write(result);
Console.WriteLine($"Name: {result.Name}");
Console.WriteLine($"Folder: {result.OSFolder}");
Console.WriteLine($"Checked: {result.LastCheck}");
Want to understand how to make your own services? Check Out 1. Setup The Plagues Protocol
Other Services
Interested in using Secure Store but not so excited for Plagues Protocol?
We separated Secure Store into it's own .DLL!
Check It Here
License & Artwork
Code: NON-AI MPL 2.0
Artwork: © Kennaness — NO AI training. NO reproduction. NO exceptions.

Unauthorized use of the artwork — including but not limited to copying, distribution, modification, or inclusion in any machine-learning training dataset — is strictly prohibited and will be prosecuted to the fullest extent of the law.

