Link-level DNS from DHCP and Tailscale takes priority over global nameservers in systemd-resolved. Use domain routing (~mcp.metacircular.net) so resolved sends only internal zone queries to rift's CoreDNS. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>