Abstract: Techniques and technologies that enable automated device recovery without physical access are disclosed. For example, a device may include a processor and a memory configured to perform operations including: operating a user configuration that includes a user application and an application operating system; detecting a triggering condition during operation of the user configuration indicative of an erroneous operating condition; upon detecting the triggering condition, writing at least some data indicative of an operating state of the user configuration to a shared secure filesystem; rebooting in a recovery operating system, the recovery operating system being configured to boot by default one or more verified components that could not have caused the erroneous operating condition; and operating one or more verified components booted by the recovery operating system to diagnose a cause of the erroneous operating condition using least some data indicative of the operating state of the user configuration.