Config drift

Config-as-data drift from the as-provisioned baseline. A pure read over the append-only log — the earliest value is the baseline, the latest is now.