Remote Access: the ~2.5 s before a fresh tunnel hostname routes
Timed on the 2026-08-30 tunnel soak, with the log timestamps. Costs nothing to
a human pasting a link; matters if you are scripting a join.
Pairs with claude-jam 75aef63 (campaign F6).
Remote-Access: name the upstream Funnel WebSocket risk (tailscale#18827)
wiki: the ten pages — install, agent-install, hosting, joining, remote, files, security, architecture, troubleshooting
Written against what actually shipped (README/MANUAL/SPEC 'what shipped' notes and
the real flags in the source). Everything specced but not built — LAN discovery,
sounds, nudges, upload auto-allow, guest scrollback, peer tasks, Windows — is listed
on Home under 'Not built yet' and described nowhere else.
Agent-Install is the page another person's agent is pointed at: the never-do list
first, then numbered non-interactive commands with a verification after each, the
steps that need a human called out, and a self-test whose expected output was
recorded from a real run on 2026-08-29.