# Device registry and access routes

Treat addresses and availability as discoverable state. Refresh with `tailscale status --json` before relying on this registry.

| Fleet name | Platform and role | Tailnet identity | Access path |
|---|---|---|---|
| `lavender` | Kell's Mac laptop; Apple build and fleet control plane | `lavender.shrew-mimosa.ts.net`, `100.101.213.114` | Local shell when the agent runs here; otherwise OpenSSH as `kell` over Tailscale |
| `deltaisland` | Debian VPS; high-performance deployment host and Hermes runtime | `deltaisland.shrew-mimosa.ts.net`, `100.87.130.79` | From Lavender, prefer `ssh dit`; public fallback is `ssh di`; user `delta` |
| `indigo` | iPad; physical iOS/iPadOS deployment target | `indigo.shrew-mimosa.ts.net`, `100.84.181.82`; Apple device name `indigo` | Manage from Lavender with Xcode/CoreDevice after pairing; use Tailscale only for app/network traffic |
| `lilac` | iPhone; physical iOS deployment target | `lilac.shrew-mimosa.ts.net`, `100.118.12.90`; Apple device name `kellcd` | Manage from Lavender with Xcode/CoreDevice after pairing; use Tailscale only for app/network traffic |

## Stable access facts

- `dit` resolves to Delta's Tailscale address and uses `/Users/kell/.ssh/delta_ed25519` as the private key.
- `di` is the broader-internet SSH route to Delta. Treat it as a fallback, not the default.
- Lavender uses macOS OpenSSH enabled through launchd; the sandboxed macOS Tailscale app does not provide Tailscale SSH.
- Lavender credentials belong in an interactive credential source or scoped SSH key. No literal password belongs in this skill.
- A tailnet node being online proves IP reachability, not SSH authorization or Apple developer pairing.

## Discovery commands

Run from Lavender:

```sh
tailscale status --json
ssh -G dit | awk '$1 ~ /^(hostname|user|port|identityfile|proxyjump)$/ {print}'
ssh -o BatchMode=yes -o ConnectTimeout=8 dit 'hostname; uptime -p'
xcrun devicectl list devices
xcrun xctrace list devices
```

Observed on 2026-07-30: Lavender and all three peers were online under the `shrew-mimosa.ts.net` MagicDNS suffix. Both Apple devices were paired in the 2026-07-13 check, but `kellcd` changed availability between consecutive checks. Re-discover before every physical-device run.