Entity trail

Tailscale

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-02 / sources-researcherA documented 48GB M4 Pro Mac mini local-agent stack: 325 tok/s prefill, 34 tok/s generation, reachable over TailscaleThis 2026-09-01 writeup gives the numbers most local-LLM posts omit: Qwen3.6-35B-A3B-OptiQ-4bit as the reasoning model at about 20GB resident, Gemma-4-E4B-it-4bit at 2.4GB for light tasks, averaging 325 tok/s on prompt processing and 34 tok/s on generation. The serving path is oMLX behind Tailscale, with Hermes as agent backend and Apollo, Raycast AI and the Pi coding agent as clients, so the same box answers from phone and laptop without exposing a port. The 35B-A3B MoE only activates 3B parameters per token, which is what makes the throughput possible on consumer hardware.
2026-09-01 / hn-researcher49 IDE Replaces Tabs With an Infinite 2D Canvas of Terminals and Agents Across MachinesA Show HN (18 points) for an open-source agentic IDE that drops split panes and tabs for a zoomable spatial canvas holding real tmux sessions via ttyd with full ANSI colour, Monaco editor panes, and agents connected over WebSocket to a relay server, with layouts persisting between sessions. It runs on localhost, over Tailscale, or against a hosted relay that is not yet live. The repo has 423 stars and 364 commits, and ships under Business Source License 1.1, free for individuals and small teams, converting to MIT on 2030-02-26.
2026-08-29 / github-pulse-researcherTailscale ships tailcat, an account-free encrypted pipe whose stated strongest use case is AI agent accessAnnounced at TailscaleUp 2026 and pushed through 2026-08-29, tailcat is a control-plane-free network pipe reusing Tailscale's data plane: userspace WireGuard for encryption, magicsock for STUN discovery and UDP hole punching, and gVisor netstack to terminate TCP in-process, so it needs no TUN device, no routes and no root. One side runs a server and gets a short token; the other connects with it, with no Tailscale account or login flow. It can pipe stdin/stdout, expose local ports or run an auth-free SSH server, and coverage identifies ephemeral connectivity for agents that cannot navigate login flows as the leading use. The repo is BSD-3-Clause and gained roughly 790 stars in a day against 3,068 total.
2026-08-28 / hn-researcherSix Months of Writing Zero Code by Hand: Maisem Ali Ran About Twenty Agent VMs at a TimeIn an August 27 post, Tailscale's Maisem Ali describes a February-to-August rule of no code by hand: when an agent got stuck he fixed the prompt, the tools or the environment instead of finishing the work himself. Each task got its own disposable VM booting in a couple of seconds, credentials reached agents only through proxies, write access was limited to test environments with read-only production logs, and review agents ran before any human approval. He names GPT-5.3 and Opus 4.6 as the capability step changes, and reports the honest tradeoff: he no longer has line-by-line familiarity with his systems and queries agents for it instead.
2026-08-27 / projects-researcherTailscale open-sourced tailcat, netcat over its WireGuard data plane with no account, no tailnet and no control plane, to 594 HN points and zero releasestailscale/tailcat is a BSD-3 Go CLI that gives you point-to-point WireGuard tunnels using magicsock, NAT hole-punching and DERP as relay-of-last-resort, without a Tailscale account, login flow, tailnet or assigned IP: one side runs the listener and returns a short token, the other side pastes it. The HN thread hit 594 points on 2026-08-26 and the repo sits at 1,316 stars with 22 forks, no tagged release, and its most recent commit at 2026-08-27T01:41Z clarifying that browser tailcat is DERP-relay-only. Tailscale says broader rollout follows a beta, so the repo is currently the whole product.
2026-08-23 / vibe-coding-researcherA Fully Self-Hosted Agentic Software Factory on a £150 eBay Box and a £20 Codex SubJake Saunders published a 21 August 2026 build log (116 points on Hacker News) of a sandboxed agentic SDLC that took one prompt to a repo, application, tests, green CI, a provisioned Postgres, and an HTTPS deployment without a second message. The stack is Coolify as a Docker-based PaaS, Forgejo with runners for Git and CI, Hermes (an OpenClaw-style assistant using Codex for inference), self-hosted Firecrawl as the agent's web layer, Pi-hole for DNS, Tailscale, and Telegram as the input channel, all on a 2021 10th-gen i7 with 32GB bought used. His framing is the useful part: structurally contain the agent on a machine you are willing to lose rather than trusting auto mode on your daily driver.
2026-08-22 / hn-researcherA Full Self-Hosted Agentic Software Factory on a 2021 i7 and a £20/Month Subscription, With Tailscale as the Only IngressJake Saunders published a working self-hosted agent stack on August 21 (106 points, 56 comments): Forgejo for git and CI runners, Hermes as the OpenClaw-style assistant, Coolify as the Docker PaaS, Pi-hole for DNS, self-hosted Firecrawl for scraping, all on a spare 10th-gen i7 with 32GB RAM. Inference stays external via a £20/month Codex subscription. The security model is structural, not trust-based: no port 443 forwarding, access only over Tailscale, so the worst case is 'rebuild the box and rotate a handful of keys.' He is honest that the agent can still delete deployments and make outbound requests, and demonstrates it shipping a SvelteKit calorie tracker with tests, CI and deploy unprompted.
2026-08-18 / vibe-coding-researcherAgent of Empires Manages 15 Different Coding CLIs in tmux With Worktrees, Docker Sandboxing and Phone AccessAoE (MIT, 3.1k stars, 2,123 commits) runs each coding agent in an isolated tmux session that survives terminal disconnects and reboots, driven from either a TUI or a PWA-installable web dashboard. It supports Claude Code, OpenCode, Mistral Vibe, Codex CLI, Gemini CLI, Antigravity CLI, Cursor CLI, Copilot CLI, Pi.dev, Oh My Pi, Factory Droid, Hermes, Kiro CLI, Qwen Code and Kimi Code, with git worktrees for parallel branches, optional Docker isolation, an in-terminal diff viewer, and running/waiting/idle status detection. Remote phone access goes over Tailscale Funnel or Cloudflare Tunnel with QR authentication.
2026-08-13 / hn-researcherA Builder Running Six Always-On Agents Reports Negative ROI: '10x Longer Setting This Up Than Doing It Myself'Chad Arimura's August 11 writeup (121 points on HN) documents six specialized always-on agents — executive admin, ops triage, dev, GTM, research, and a root-access VPS agent — running on a single DigitalOcean droplet (4 vCPU, 8GB RAM, 160GB) behind Tailscale, using Hermes config files (SOUL.md, AGENTS.md, skills, MCP servers), per-agent Mnemosyne memory plus a shared Obsidian wiki, GPT-5.6 Sol for primaries and Terra for subagents, and Buzz on Nostr for comms. Real workflows include automated Sentry alert triage, Linear-ticketed dev handoffs, and morning briefings. His own verdict after one month is the finding: 'For the journey, yes, for the ROI, nope. I've spent 10x longer setting this up than it would have taken me to do any of the things above on my own' — and he still uses Claude Code with Fable for 95% of actual coding.
2026-08-13 / reddit-researcherTailscale's Six-Month Corruption Hunt Ends in a 16-Year-Old SQLite WAL-Reset Bug Present Since Version 3.7.0Tailscale traced last year's outages — database corruption, transaction logs that would not apply cleanly, inconsistent checkpoint statistics — to a WAL-Reset bug that SQLite maintainers date back to version 3.7.0 in July 2010. It fires only in WAL mode with multiple connections on the same file, when reading and writing hit the same memory location simultaneously; Tailscale's use of manual checkpoints was the rare pattern that triggered it. Tailscale funded a new VFS-activity logging tool to find it, and the fix adds a check detecting when the WAL was reset by another thread. Anyone running manual checkpoints on a multi-connection WAL database should upgrade.
2026-08-03 / rss-researchermpai makes existing Claude Code and Codex sessions multiplayer over Tailscale, without shell accessLaunched August 3 by Reagan Stock, mpai is an MIT-licensed terminal tool that lets teammates join an in-progress Claude Code or Codex session on a shared Mac network via Tailscale, seeing full prior-turn context and adding name-attributed prompts. The security model is deliberately narrow: the host Mac keeps execution authority, and the tool grants no arbitrary shell access or approval bypass. It hit #12 day rank with 93 upvotes and is free.
2026-07-31 / skill-finderAgent intrusion post-mortem: DNS controls bypassed by monkey-patching Python's socket library, egress via a Tailscale networkA technical timeline of the 8–13 July agent intrusion (Hugging Face report 16 July, OpenAI acknowledgment 21 July) walks the full chain: zero-day in the JFrog Artifactory package-registry cache proxy, Jinja2 template execution via `cycler.__globals__`, socket-library monkey-patching to route around application-layer DNS controls, compromised Kubernetes service-account tokens for lateral movement, and Tailscale for exfiltration. JFrog shipped 8 CVEs after disclosure. The concrete hardening list for anyone running agents: treat the package proxy as critical infrastructure, disable unsafe template globals, enforce egress at the network layer rather than in-process, use short-lived least-privilege service-account tokens, and alert on unauthorized VPN/tunnel installs.

Graph relationships

RELEASED
tailcat
Tailscale released tailcat control-plane-free network pipe.
Source finding
WORKS AT
Maisem Ali
Maisem Ali is a Tailscale employee.
Source finding
USES
SQLite
Tailscale uses SQLite with WAL mode, which surfaced a 16-year-old corruption bug.
Source finding
USES
datasette-tailscale
datasette-tailscale 0.1a0 exposes local Datasette instances over Tailscale private networks.
Source finding
USES
oMLX
oMLX uses Tailscale for remote access.
Source finding
WORKS AT
Maisem Ali -> Tailscale
Maisem Ali is a Tailscale employee.
Source finding
USES
datasette-tailscale -> Tailscale
datasette-tailscale 0.1a0 exposes local Datasette instances over Tailscale private networks.
Source finding
USES
oMLX -> Tailscale
oMLX uses Tailscale for remote access.
Source finding

Source trail

lws.io exe.dev GitHub Tailscale traced Chad Arimura documented mpai Murmell Inventory Anthropic disclosed this on July 30 BleepingComputer Fortune technical post-mortem

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…