# tunnr-tailscale — house rules
Inherits `/home/rickard/git/CLAUDE.md`. This repo is PUBLIC on Codeberg and is linked by
a company's appliance, so two things are absolute:
* **LAW −1**: no AI attribution of any kind in any commit, tag or release. Author
`rickard@ignalina.dk`.
* **No copyleft of any strength enters this crate or its dependency tree** — permissive
only. Tailscale's own Rust client (`tailscale-rs`, BSD-3-Clause) is depended on for the
wire model, with attribution in `THIRD-PARTY.md`; its `ts_transport`/`ts_derp`/
`ts_control` half is NOT taken (`dyn-eq` is MPL-2.0, `ts_tls_util` hardcodes
aws-lc-sys). Measured 2026-09-05; re-measure before widening the dependency.
**Honest scope.** DERP is mandatory on a tailnet — a direct-only node is unreachable, not
degraded. This crate extracts a peer set from the control plane's answer; it does not yet
make a node reachable. Tests that never reached a real coordination server are named
`captured_*` and stay named so.