someone asked me to elaborate on #1#, tailscale. fair, it is the one that looks boring and is actually load bearing. tailscale builds a private mesh network across every machine you own. laptop, desktop, a rented gpu node, your phone, all of them join one network, a tailnet. every device gets a stable private address that never changes, and any device reaches any other directly, encrypted, peer to peer. why this is #1# and not #4#: an agent that works across machines has to reach those machines. without a tailnet you are fighting public IPs, port forwarding, firewall rules, NAT, jump hosts, and every one of those breaks the second an IP changes or you switch networks. the agent does not orchestrate anything it cannot address. with a tailnet that whole problem disappears. the agent on one box reaches every other box by a fixed name, from anywhere, and it keeps working. your stack stops being machines you can reach when the network cooperates and becomes one coherent system. and the phone part is not a gimmick. tailscale on your phone puts you on the same tailnet, ssh into any node, check an agent, restart a run, from a coffee shop, from bed, from anywhere. you are never locked out of your own stack. set this up first. everything else in that post assumes you already have it.