diff --git a/.ctx/HANDOFF.md b/.ctx/HANDOFF.md
new file mode 100644
index 0000000..3ea22b3
--- /dev/null
+++ b/.ctx/HANDOFF.md
@@ -0,0 +1,17 @@
+# Handoff — notfiles (2026-04-17)
+
+**Branch:** main | **Build:** clean | **Tests:** passing
+Added notnet crate with YubikeySource and threaded Tailscale into notstrap; Tailscale
+integration design spec written.
+
+## Items
+
+| ID | P | Status | Title |
+|---|---|---|---|
+| - | - | - | No open local handoff items |
+
+## Log
+
+- 2026-04-17: Added notnet crate with YubikeySource and threaded Tailscale into notstrap; design spec complete [c7c074d, dfdd9ca]
+- 2026-04-15: Hardened bootstrap and hook-state failure handling, made notfiles FileStore usage real, and fixed copy-drift safety coverage [67f20ee]
+- 2026-04-15: Pruned completed items from handoff; GitHub issues plus doob are now the source of truth for active work
diff --git a/.ctx/HANDOFF.notfiles.notfiles.state.yaml b/.ctx/HANDOFF.notfiles.notfiles.state.yaml
new file mode 100644
index 0000000..a8d4d59
--- /dev/null
+++ b/.ctx/HANDOFF.notfiles.notfiles.state.yaml
@@ -0,0 +1,10 @@
+updated: 2026-04-17
+branch: main
+build: clean
+tests: passing
+notes: Added notnet crate with YubikeySource and threaded Tailscale into notstrap
+touched_files:
+  - .ctx/HANDOFF.notfiles.notfiles.yaml
+  - Cargo.toml
+  - crates/notnet/src/lib.rs
+  - crates/notstrap/src/lib.rs
diff --git a/.ctx/HANDOFF.notfiles.notfiles.yaml b/.ctx/HANDOFF.notfiles.notfiles.yaml
index 503c68d..d9943da 100644
--- a/.ctx/HANDOFF.notfiles.notfiles.yaml
+++ b/.ctx/HANDOFF.notfiles.notfiles.yaml
@@ -1,13 +1,18 @@
 project: notfiles
 id: notfile
-updated: 2026-04-15
-branch: refactor/formalize-ports
+updated: 2026-04-17
+branch: main
 state:
   tests: passing
   build: clean
   notes: Handoff is now ephemeral; track active work via GitHub issues synced through doob.
 items: []
 log:
+- date: 2026-04-17
+  summary: Added notnet crate with YubikeySource and threaded Tailscale into notstrap; design spec complete
+  commits:
+  - c7c074d
+  - dfdd9ca
 - date: 2026-04-15
   summary: Hardened bootstrap and hook-state failure handling, made notfiles FileStore usage real, and fixed copy-drift safety coverage
   commits: