# WG starter kit · wg10 · revision 4

Read README.md, then protocol/wg10.md. This is a public JMPKit resource kit,
available in the catalogue, Kit Tree, and Megabundle. Do not publish app
management keys or peer private keys.

- One network per app; administered by its full app management key.
- Each peer generates a keypair locally. Send only the public key to JMPKit.
- Registration returns server-assigned addresses. Fetch the standard config,
  substitute the local private key, and import using your device's WireGuard client.
- Route only the supplied app subnets. Never add 0.0.0.0/0 or ::/0.
- Peer and app expiration apply. Network disable permanently revokes its peers.
- A network is not a general-purpose Internet exit, LAN router or public ingress.
- This API is app-scoped: https://APP.jmpkit.app/api/wg10.

## Included

- protocol/wg10.md: complete routes, authority, lifecycle and boundaries.
- samples/join.mjs: Node-based local key generation, registration and config saving.
- samples/manage.sh: curl-based inspect/revoke/expiry examples.
- samples/register.py: Python standard-library peer registration from a public key.
- examples/private-http.mjs: an actual HTTP server reachable through the network.
- examples/clients.md: Linux, macOS, Windows, Android and iOS setup.

No internal server host credentials, control bearers, relay private keys or app
management keys belong in this kit. Keep it independent of the operator deploy
scripts in resources/wg/deploy.