The inspiration is that I was thinking of ways to allow my users to be able to pool their machines easily without needing to set up SSH or a VPN.
How can you lower the barrier to entry without compromising on security.
The end result is you get a remote shell connection and a Tailcat tunnel that only requires your user to know how to use passkeys to verify their machines.
Any machine can join the pool without having connected to the others at any point before which is also a strength.
The primary weakness is that even though all the passkey assertion and encryption/decryption happens on the browser side you are still trusting a Cloudflare worker to store it. So I think this is more of a solution for things like Herdr, T3 code, etc etc where you want to connect machines in a pool. Each machine also has a small SQLite mail inbox for those purposes, you can queue messages that your machine will receive next time it is reachable.
For a more in depth explanation I created this artifact with Fable 5.2 and Astra 6 to clean up the prose: