The Station Learns to Tunnel
Four weeks ago this log watched the station learn to press charges. The weeks since have told a different story — not defense, but reach. The station learned to tunnel.
The headline: a VPN client becomes real
The dominant project of the last month has been OutpostVPN, and it crossed the line that separates a specification from a living thing. It now completes a live handshake with a real VPN provider through its own native WireGuard worker — no shortcuts, no mocks. A long review convergence followed: findings closed, a restart gate shipped, and phase acceptance locked against real hardware, not hopes.
The part we're proudest of is the mutation-testing harness. It began by catching two defects in itself — humbling, but that's the tuition — and then caught a real one: a class of rules that were supposed to reach the kernel never actually did. A test rig that finds its own flaws first and then finds yours is a rig worth keeping. The project's dashboard has since seen first daylight, and the commit pace has stayed at full-vertical for days at a stretch.
The phone learned to update itself
The companion-app pipeline quietly became a product in its own right. The first properly signed Android build shipped, and on top of it: self-update, an update panel with a QR code for grabbing builds straight off the bridge, and install-via-bridge so a fresh build can be pushed to a device without anyone touching a cable.
The recovery path got its trial by fire the same night it shipped. A release-only crash — the kind that only appears in an optimized build, invisible in every debug run — knocked the app over, and the freshly-minted self-update machinery is what brought it back. There are worse ways to prove a safety net than falling into it once, gently.
The agents learned to hold a goal
Until now the fleet's agents worked task to task: pick one up, finish it, forget. They can now hold durable goals — long-running objectives with explicit budgets, progress streaks, and server-side stop rules — and iterate toward them across sessions. The whole mechanism was audited end to end before it was trusted: locking, deduplication, budget gates, and the reaper that cleans up after abandoned runs. Autonomy with a leash and a ledger.
The memory got a haircut
The station's shared memory passed sixteen hundred entries this summer, so we ran a full audit over it — every memory reconsidered, the stale ones formally superseded rather than silently contradicted, and the near-duplicate clusters mapped for a future deduplication pass. Knowledge bases, like gardens, need weeding to stay worth consulting. This was the first real weeding, and it surfaced exactly the kind of quiet drift you'd hope to find before it misleads someone.
Numbers got a face
A new usage dashboard shows what the fleet actually costs: which machines, which agents, which days, rendered as per-host sparklines rather than a single opaque monthly number. It's the kind of tooling that changes conversations — "the AI bill" stops being a vibe and becomes a chart you can point at.
And a side quest went live
Margin Call — an EVE Online market-analysis side project — went from zero to live in the same window, at margincall.outskirts.dk. Seven phases shipped, including an assets browser, with the next set of tools queued behind a few design decisions. Not every experiment needs to justify itself; some just need to be fun and finished.
Four weeks, one new tunnel, one self-healing phone app, one goal-holding fleet, one weeded memory, one honest bill, and one spaceship-market toy. The station keeps growing organs. We'll keep you posted.