3 Commits

Include renames

Author	SHA1	Message	Date
DottaandClaude Fable 5	78b5ac1ce5	fix(tailscale-https-broker): version floor + install docs (PAP-17079) ... Replace the pinned Tailscale minor allowlist with a numeric minimum-version comparison (floor 1.80) so current releases like 1.102.2 pass --doctor while 1.78 and malformed output are still rejected; add boundary + malformed unit coverage. Correct broker lifecycle commands to the installed unit name paperclip-tailscale-https-broker and document copying the built package to /opt/paperclip/packages/tailscale-https-broker to match ExecStart and doctor. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-16 19:26:07 +00:00
DottaandPaperclip	1696e17c67	feat(runtime): secure Tailscale exposure reservations (PAP-17051) ... Add the bounded reserve/expose/remove broker handshake, paired-port contracts, hostname discovery, deployable systemd unit, and focused authorization/lifecycle tests. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-08-16 19:24:27 +00:00
DottaandClaude Opus 4.8	3d6f739255	docs(tailscale-https-broker): host install, preflight, upgrade, rollback (PAP-17051) ... One-time install steps for the dedicated Tailscale-operator broker account and socket group, the read-only `--doctor` preflight, upgrade/recovery/quarantine behavior, and uninstall/rollback/opt-out that removes only broker-owned listeners and never resets Serve or touches the primary :443 route. Covers plan layer 5 docs and the host steps handed to the downstream QA canary (PAP-17052). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-16 19:24:27 +00:00