Gary Larizza has put together a great article that covers setting up crankd and Puppet to automatically apply system updates to Mac laptops when they appear on the corporate network.
http://glarizza.posterous.com/using-crankd-to-react-to-network-events
This is exactly what Chris and I wrote it for initially, so it’s great to see this info out there.
Now I have somewhere to point Greg if he bugs me about it again. :)