{
  "id": "workflow:gitops-config-drift-audit",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-devops-deep.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "GitOps Config Drift Audit",
    "workflowKind": "operational",
    "triggerType": "scheduled",
    "typicalCadence": "weekly",
    "complexity": "single-team",
    "description": "Audits the convergence state of GitOps-managed clusters and services --\ncomparing desired state in Git repositories against live cluster state,\nidentifying resources modified out-of-band (kubectl edits, manual console\nchanges), categorizing drift by severity and blast radius, auto-reconciling\nsafe drifts, escalating risky drifts for manual review, and tracking drift\ntrends to identify systemic process gaps. Excludes Terraform drift (covered\nseparately) and initial GitOps adoption.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "role:platform-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "role:devops-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "skill-area:gitops",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "skill-area:k8s-rbac",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "domain:devops",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "domain:cloud-infra",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "responsibility:terraform-state-mgmt",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "responsibility:runbook-authoring",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "org-unit:platform-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:gitops-config-drift-audit",
      "to": "org-unit:infra-engineering",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "stack-profile:gitops-deployment",
      "to": "workflow:gitops-config-drift-audit",
      "kind": "follows_workflow"
    }
  ]
}