Follow-up review of fffaba7: the second-round fixes are correct. Connection mode and all build-time options are now snapshotted when willBuild becomes true, so editing useWorker, fileOps, hostname, control URL, or auth key cannot switch or rebuild a live IPN. The restart check covers those build-time fields; SharedWorker mode explicitly instructs the user to close all tabs; fallback reporting uses the actual handle connectionMode; and the duplicate disclosure entry is removed. The legacy-config migration finding is treated as explicitly waived per the maintainer comment.
[P1] Migrate the legacy configuration before switching keys. parseConfig reads only tailshare:config; nothing imports ipn#hostname, ipn#controlURL, ipn#authKey, ipn#exitNode, or ipn#auto. Every…
Re-review against current origin/main at 84437ed and PR head 6c0b8ec. CI is green and the branch no longer contains the old stacked base, but I found the following PR-specific issues: