1 · InstallOne signed install.sh per component — gateway on the machine you want to reach, the CLI on the machine you're sitting at.
2 · PairBootstrap the gateway with a short code and approve it in the console — keys are generated on-device and never leave it.
3 · ConnectOpen SSH, web, or raw TCP sessions to your targets from the CLI or the web console, over the nearest relay.