Configuration Drift Is a Production Incident With a Long Fuse

A hand-edited setting saved an incident and never went back into the repo. Months later a restart erased it. Here is how I detect drift and stop it.