← Compliance hub

Configuration baselines & drift

Known-good infrastructure posture tracked as code.

Automated drift detection maturity evolves with automation investment.

Baseline sources

wrangler.jsonc routes, bindings, compatibility dates.
Versioned SQL migrations for D1.
Repository-reviewed changes for Worker logic.

Goals

Detect unintended Worker/trigger edits vs reviewed merges.
Alert on new privileged bindings or unexpected origins lists.

Playbook: docs/compliance/CONFIG-BASELINE.md