Reconciliation
Reconciliation compares expected state against observed state and attempts to repair drift when policy allows.
Common drift
Section titled “Common drift”Drift includes credential mismatch, missing account state, unexpected resource status, or policy bindings that no longer reflect ownership.
Reconcile accounts
Section titled “Reconcile accounts”Some resources require a dedicated reconcile account with enough authority to inspect or correct state. Treat these accounts as highly sensitive.
Review
Section titled “Review”Reconciliation is logged, reviewed, and connected to the resource history.