DRIFT.

24 policy documents tracked against current practice. 8 say one thing; the system enforces another. 2 reference roles that no longer exist on the org chart.

The policy and the reality are both real. They're just different.

PD-017 · MFA enforcement DELTA

Policy: MFA required all admins. Reality: 4 admins MFA-off.

Enforce MFA on those 4 today, or re-write the policy.