The server was perfect. Then someone logged in at 2 a.m. and changed it.
Immutable infrastructure promises servers that never drift. Every deploy is fresh, every environment identical. It ends the slow decay of systems caused by manual changes. But ad hoc access control is the final piece. Without it, anyone with access can still bypass your pipelines and leave invisible fingerprints in production.
Immutable infrastructure means your code, configurations, and environments are built once and never edited in place. If anything needs to change, you build it again. This stops configuration drift and forces every change through the same review process. But real-world operations still need fixes, checks, and emergency interventions. That’s where ad hoc access control becomes critical.
Ad hoc access control defines when, how, and by whom temporary exceptions can be made—without breaking immutability. It allows controlled, audited, and strictly time-limited accesses to environments that aren’t supposed to change. You can approve a session, perform what’s needed, and know it leaves a record. You can verify that the environment returns to its pristine state right after.