# Quarterly Drift Control

## Identity

- Rotate high-value credentials and invalidate old material.
- Re-evaluate role scopes; remove privileges that became “default”.

## Backup reality check

- Perform a full restore drill of at least one critical system.
- Verify restore validation steps still match reality.

## Infra sanity

- Identify and remove orphaned resources (accounts, hosts, services).
- Confirm all critical infrastructure is reproducible from `ops/`.