name: openvpn-deployment-drift-detection description: >- Use when repo, build artifact, and live host may be out of sync. Trigger on: "drift", "inconsistent deploy", "artifact mismatch", "works locally not on EC2".
OpenVPN Deployment Drift Detection
Objective:
- Detect and explain drift across source, artifact, and runtime host.
Workflow:
- Compare source-of-truth at three layers: repo, artifact, live host.
- Produce mismatch table with risk and impact.
- Propose smallest safe reconciliation sequence.
- Include rollback per reconciliation step.
Rules:
- Read-only comparison before any write.
- Prefer minimal blast-radius reconciliation.
Output:
- Drift map
- Root cause of drift
- Reconciliation plan with rollback