F05-TS: Yes
Rationale
Persistent tailnet policy binds permitted sources and destinations independently of individual WireGuard session keys and physical attachment. New sessions apply the retained authorization policy.
Assessment method
Primary documentation and explicit architectural inference; no runtime test
Source context
Tailscale service model and WireGuard protocol
Outstanding qualification
Policy may expire or be revoked; this does not credit participant control of the hosted coordinator.
Public sources
- https://tailscale.com/docs/features/access-control
- https://tailscale.com/docs/features/access-control
- https://tailscale.com/docs/concepts/tailscale-ip-addresses
- https://tailscale.com/docs/concepts/control-data-planes
- https://tailscale.com/docs/reference/connection-types
- https://tailscale.com/docs/features/site-to-site
- https://www.wireguard.com/protocol/
- https://www.wireguard.com/
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round585.html
- round585-sources.json