Motivation: - avoid config drift - make security rules reviewable - GitOps-friendly workflow
Looking for feedback from SRE / Platform engineers.