| name | use-tailscale |
| description | Safely reach and operate a remote computer over Tailscale and SSH. Use when a task requires private-network remote access or when diagnosing Tailscale and SSH connectivity. |
Use Tailscale
Read references/connections.md for the generic connection workflow. Read the encrypted references/machines.md when selecting a target or resolving any machine-specific value. Never copy details from the encrypted reference into unencrypted files, logs, commits, or responses.
Workflow
- Determine whether remote access is necessary.
- Select the least-privileged appropriate target using only the encrypted machine reference.
- Check reachability when connectivity is uncertain.
- Connect with the SSH configuration recorded in the encrypted machine reference.
- Start with read-only inspection.
- Explain and obtain any required approval before destructive commands, privilege escalation, service disruption, package installation, or changes outside the user's stated scope.
- Report relevant work without revealing private network or machine details.
Guardrails
- Treat private network configuration, endpoint values, machine metadata, authentication material, and encrypted references as secret.
- Never commit decrypted private-network or machine information.
- Never weaken host-key checking.
- Do not assume elevated access or authorization to alter a remote system.
- Do not probe systems unrelated to the task.
- Stop and report the failing connection layer without exposing private values.
