An architectural sketch of the platform shape I keep building for managed OpenWrt device fleets — admin portal, signed-config provisioning API, MQTT telemetry, Vault-backed secrets, and a Docker-isolated flasher with a safety flow operators actually trust.
