Changelog Master Feed From Tailnet to platform (Changelog Interviews #679)
9 snips
Mar 11, 2026 
David Carney, co-founder and Chief Strategy Officer at Tailscale, explains next‑gen platform work. He covers TSIDP for clickless OIDC logins, TSNet apps that make services appear as network nodes, multi‑tailnets for isolation, and Aperture, a private AI gateway for API key management, observability, and securing agent calls.
AI Snips
Chapters
Transcript
Episode notes
TSNet Turns Apps Into Network Nodes
- TSNet is a Go user-space networking stack that lets you embed Tailscale identity and connectivity into applications so they appear as nodes on a tailnet.
- Aperture itself is a TSNet app, meaning any TSNet binary gets an IP, ACLs, and policy like a device.
Put API Keys Behind A Private Gateway
- Consolidate API keys inside a private AI gateway so individual developers and agents never hold raw provider keys.
- Carney describes routing all coding-agent traffic through Aperture to tie every API call to a Tailscale identity and logs.
Gateway Unlocks AI Observability And Control
- A gateway creates one place for observability, control, and real-time policy over AI usage, including logs, token metrics, and tool-call analysis.
- Tailscale already associates identity with traffic, so Aperture logs per-user model inputs/outputs and groups them into sessions for review.