← Compliance hub
Configuration baselines & drift
Known-good infrastructure posture tracked as code.
Automated drift detection maturity evolves with automation investment.
Baseline sources
wrangler.jsonc routes, bindings, compatibility dates.
- Versioned SQL migrations for D1.
- Repository-reviewed changes for Worker logic.
Goals
- Detect unintended Worker/trigger edits vs reviewed merges.
- Alert on new privileged bindings or unexpected origins lists.
Playbook: docs/compliance/CONFIG-BASELINE.md