Reusable audit over every Linux tailnet peer: knel.net DNS resolution vs Tailscale IP, Proxmox VM-name match, expected-user SSH login via the remote.sh/remote-dns.sh chokepoints, and passwordless sudo verification. First run (2026-08-26): 54/74 peers fully green, report on Discourse #312. 💘 Generated with Crush Assisted-by: Crush:glm-5.2