Aglet

Investigate configuration drift without exposing secrets

Investigation should locate where intended configuration diverged from runtime use and whether that divergence explains the behavior. Work from revisions, digests, classifications, and controlled examples; never use raw credential or secret material as evidence.

Build a useful investigation brief

  1. Build a safe configuration map

    List setting names, redacted revisions or hashes, source records, environment, service, and load time. Mark values unavailable when a safe identity cannot be derived rather than copying sensitive content.

  2. Locate the first divergence

    Compare reviewed baseline, deployment context, runtime load record, and observed behavior. Check defaults, environment inheritance, stale workers, and delayed reloads as possibilities, recording evidence for each.

  3. Compare controlled paths

    Use matched requests, jobs, or cohorts that differ only in configuration exposure where possible. Capture outcomes and timing, then test whether code, data, or dependency changes could explain the same symptom.

What to carry forward

The brief should identify the first safe configuration mismatch, affected behavior, supporting records, and residual hypotheses. Conclude that drift explains the symptom, contributes alongside another change, or remains unproven; include only redacted identifiers. Compare source configuration, rendered configuration identity, reload timing, and runtime observation across the affected environment; never copy secret values into the investigation brief.

Keep the decision with the work.

Use a Work Item in Aglet to record the problem, the evidence you have, and the next decision. Add an owner and priority, then keep updates in the discussion so the next person can follow the reasoning.

Create an account See the product workflow