Userspace WireGuard tunnels for Caddy: named-tunnel app, reverse_proxy transport for intranet forwarding, and caddy-anytls outbound (wireguard-go + gVisor netstack, no kernel module or root)
A KQL-lite query engine for JSON/NDJSON and plain-text logs: KQL-style pipelines, multiple input formats, grep-style context, and terminal charts. Single static Go binary.