Feature
Tailnet only
The bus listens only on loopback or the host’s own Tailscale address. There is no override.
The bind guard accepts loopback or an address printed by tailscale ip, and fails closed when tailscale is missing. Any other bind address exits with refusing to bind.
B1, the default, keeps the bus on 127.0.0.1:47910 and exposes it with tailscale serve on HTTPS port 8443. B2, the fallback, binds the tailnet address directly on port 47910. Tailscale Funnel is never used.