Reviews on Deevnet IoTaaShttps://deevnet.github.io/deevnet-docs/docs/architecture/reviews/Recent content in Reviews on Deevnet IoTaaSHugoen-us2026-10 Rebuild and Accesshttps://deevnet.github.io/deevnet-docs/docs/architecture/reviews/2026-10-rebuild-and-access/Mon, 01 Jan 0001 00:00:00 +0000https://deevnet.github.io/deevnet-docs/docs/architecture/reviews/2026-10-rebuild-and-access/<h1 id="review-rebuild-and-access-october-2026"> Review: Rebuild and Access, October 2026 <a class="anchor" href="#review-rebuild-and-access-october-2026">#</a> </h1> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Date</strong></td> <td>2026-10-06</td> </tr> <tr> <td><strong>Scope</strong></td> <td>The Mobile Factory: substrate, tenants, and the accounts that build and run them</td> </tr> <tr> <td><strong>Criteria</strong></td> <td>Every part rebuilds cleanly from code; no rebuild depends on what it is rebuilding; infrastructure and configuration are code; accounts and access are practical and least-privilege</td> </tr> <tr> <td><strong>Method</strong></td> <td>A read of the inventory, the Ansible collections, the image factories, the Deevnet API and provider, the reference tenant, and every ADR, runbook and record. Findings cite the files they come from. Where a finding comes from reading code rather than running it, it says so.</td> </tr> <tr> <td><strong>Status</strong></td> <td>Responded. The operator answered all 26 findings by 2026-10-06 (A2 and T4 deferred); each response is under its finding. Each finding acted on becomes an ADR or a change record</td> </tr> </tbody> </table> <hr> <h2 id="summary"> Summary <a class="anchor" href="#summary">#</a> </h2> <p><strong>The substrate has no hard rebuild cycle.</strong> Every loop that looks circular, such as building a VM template with a token from OpenBao, which runs in a VM built from that template, falls back to ansible-vault. Certificates no longer depend on OpenBao at all ( <a href="https://deevnet.github.io/deevnet-docs/deevnet-docs/docs/architecture/decisions/substrate/0031-deevnet-pki/">ADR-0031</a>).</p>