nordisk/tunnr-tailscale

tunnr-tailscale — house rules

Inherits /home/rickard/git/CLAUDE.md. This repo is PUBLIC on Codeberg and is linked by a company's appliance, so two things are absolute:

• LAW −1: no AI attribution of any kind in any commit, tag or release. Author rickard@ignalina.dk.
• No copyleft of any strength enters this crate or its dependency tree — permissive only. Tailscale's own Rust client (tailscale-rs, BSD-3-Clause) is depended on for the wire model, with attribution in THIRD-PARTY.md; its ts_transport/ts_derp/ ts_control half is NOT taken (dyn-eq is MPL-2.0, ts_tls_util hardcodes aws-lc-sys). Measured 2026-09-05; re-measure before widening the dependency.

Honest scope. DERP is mandatory on a tailnet — a direct-only node is unreachable, not degraded. This crate extracts a peer set from the control plane's answer; it does not yet make a node reachable. Tests that never reached a real coordination server are named captured_* and stay named so.