Not sure why you'd vibe-code a new VPN protocol, double ratchet or otherwise, when you can just take WireGuard and make a new transport for it.

WireGuard by itself is not a stealth VPN, but the things that make a VPN "stealthy" are all things you'd layer on top of a WireGuard design, not thread through the middle of it. A datagram-based protocol can run under any obscured transport.

We did this at Fly.io when we discovered that, for one reason or another, 5% of our users simply couldn't reliably use UDP. It was a one-day project to run it under WebSockets instead, and that was before coding agents.

> We believe privacy should be proven, not promised

Then instantly gives you a shell script that it pipes to `sudo bash`. The irony isn't lost here.

There's only 4 mentions of Rust on the landing page. Are we sure this is memory safe enough?