Become an operator
Lend a vantage point
Three ways in, depending on how much you want to manage. Every path enforces the same contract: attribution tagging and coordinated rate limits run before any probe leaves your node.
Path A · easiest
Request hardware
We ship a pre-flashed Raspberry Pi 5 to your site. Plug in power and Ethernet — it registers itself.
- Native 1 Gbps Ethernet
- Recent Linux kernel
- Globally available resellers
Path B · your hardware
Flash an image
Download the signed node image and write it to a spare Pi or mini-PC. Same stack, your metal.
- Verified boot image
- Auto-enrolls on first boot
- Unattended updates
Path C · existing fleet
Install the agent
Run the agent on a Linux host or on Kubernetes. It self-enrolls and starts taking work.
- Linux or container fleets
- Elevated caps for fast-path (optional)
- Userspace fallback otherwise
Requirements
- A recent Linux kernel
CAP_BPF+CAP_NET_ADMINfor fast-path implementation (optional)- ≥ 1 Gbps egress, modest CPU & RAM
- Outbound to the Coordinator; no inbound needed
- Without elevated caps: userspace tagging still works, lower fidelity
The operator agreement
- You're semi-honest — you needn't be trusted, only run the stack
- Every probe is tagged and rate-limited before egress
- Target opt-outs are honored at your node automatically
- You can pause or drain at any time
- Abuse traces back to the debuglet, not to you