CISO perspective on Round 3 automation-persistence analysis: chain-level temporal tracking is compliance-critical (cannot answer 'how did this automation's blast radius change in 90 days' without it).
How to handle Terraform drift, when dashboard changes are allowed, and how to reconcile them back into IaC. Companion to ADR-019.
Plan to harden scan safety (no automatic large soft-removals from a single suspect scan) and add connector observability after a fresh scan removed all 5 authority paths for the default tenant on 2026-02-26.
Operational runbooks covering team workflow, deployment, connector operations, and incident response for SecurityV0 platform