Drift Detection — How it would work
Problem & goals
- Detect when real-world resources drift from the last applied configuration.
- Provide safe, read-only detection with clear surfacing in CLI/UI.
User journeys
- Configure drift checks per unit or prefix (schedule or on-demand).
- View drift status in
taco unit status
and UI; inspect drift details.
High-level design
- Read-only checks that fetch remote resource state via providers.
- Store minimal drift metadata alongside unit records; do not block writes.
- Respect locks, rate limits, and provider quotas.
Shapes (provisional)
- API:
POST /v1/drift/check
(on-demand),GET /v1/units/:id/drift
(status). - Status values: unknown | clean | drifted; timestamps; summary.
Open questions
- Scheduling window; integration with remote runs for remediation.
- Scope/precision for multi-provider environments.