Distillation

Date: June 11, 2026

• 🟡 (22:06) Log evidence confirmed: after EditPrefs: MaskedPrefs{AdvertiseServices=["svc:opencode"]} at 22:06:00, control immediately issued c2n: GET /vip-services at 22:06:05 — control is polling the node for hosted services, confirming control-side awareness of the advertisement
• 🟡 (22:06) Assistant concluded: node-side is 100% correct and persistent; control polls correctly but does not promote to VIP host — root cause definitively identified as autoApprovers.services policy syntax mismatch
• 🟡 (22:06) User fetched wrong Tailscale doc: landed on "Viewing the list of endpoints on your network" (endpoint collection / alpha feature, tailscale.com/docs/features/services) — not the Tailscale Services VIP/auto-approver config doc
• 🟡 (22:06) Assistant identified correct doc target: Tailscale Services configuration at tailscale.com/kb/1589 — needed for exact autoApprovers.services policy syntax
• 🟡 (22:06) Tailscale endpoint collection doc content noted (alpha feature, unrelated to VIP services): endpoints = network-exposed ports (port + protocol); enabled via admin console Services → Discovered tab; not stored in DB, live monitoring only; supports SSH/VNC/RDP/HTTP/HTTPS launch shortcuts