Tailscale is expanding from a network you configure into a platform you build with and on. The tsnet Go library lets applications embed Tailscale connectivity directly, giving each app its own tailnet identity, MagicDNS name, and automatic TLS certificates without opening ports or managing proxies. A tailscale-rs library is in pre-alpha, promising bindings for Rust, Python, Elixir, and C. On the automation side, the Tailnets API lets teams provision isolated tailnets on demand for per-customer or per-test isolation, and the same APIs power a new admin console so ACL updates, key rotation, and provisioning can be scripted rather than clicked. A new Declarative Node Sharing feature turns manual cross-tailnet sharing into GitOps-managed policy, currently available via waitlist.