D01-TS: No

Rationale

The selected standard Linux TUN deployment runs tailscaled as a privileged daemon. An ordinary application using its tunnel does not remove that runtime helper.

Assessment method

Official implementation and installation documentation review

Source context

Tailscale Linux installation and open-source component inventory

Outstanding qualification

Selected standard Linux TUN and managed-control profile only. Headscale, tsnet and userspace proxy mode are different compositions. Documentary assessment, not a runtime test.

Public sources

https://tailscale.com/docs/install/linux

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

round584.html
round584-sources.json