Architecture

• How It Works: diagrams of the whole system: components, enrolment, config push, relays and published services, OTA, login and authorization.
• Components: what each component owns, how it authenticates, and the environments.
• Config Lifecycle: versions, statuses, the 60 s rollback, the payload and the NAT rule model.
• Gateway Enrollment: bootstrap tokens, holding zone, identity.
• Device Lifecycle: logical versus physical devices, claim, clone, replace.
• OTA Agent Updates: signed releases, channels, promotion, watchdog.
• Agent Update Progress: live phases of an update.
• Remote Shell: the audited root console.
• Relay Architecture: relayd, assignment, DNS, the transport ladder.
• Published Services: public URLs for LAN hosts, access codes, withdraw.

Remote reimage, meaning an OS reinstall started from a running gateway, is not built yet.