Product features
This section intentionally mirrors engineering docs—nothing here promises futures that GA builds do not expose.
Sections
Tunneling workflow
Policies gate short-lived credential bundles for OpenVPN; see `public.v1.yaml` POST `/v1/nodes/{id}/credentials` for TTL guidance.
Governed UI shells
`/v1/me/capabilities` toggles banners, VPN entry points, ads eligibility, etc. The marketing stack never originates tunnels.
Pricing truth
`/v1/subscription/plans` + storefront SKUs mirror what users can actually buy in-app.