apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "DriftDetectionGapProofReceipt"
metadata:
  name: "driftgap-20260621-1mdk"
spec:
  observedAt: "2026-06-21T19:02:30.758Z"
  result: "watch"
  claim: "cub-scout `compare three-way --dry-from` detects desired-vs-live drift (replicas/image, with cause attribution manual-edit) — but it MISSES a container env-var change. A Deployment whose env is drifted on the live cluster is reported as AGREED / 0 mismatches. Drift detection works but has incomplete field coverage: a real drift can pass as no-drift."
  legs:
    replicasDrift:
      field: "spec.replicas (1->3)"
      detected: true
      expect: "detected"
    envDrift:
      field: "container env FOO (bar->DRIFTED)"
      liveDriftConfirmed: true
      detected: false
      expect: "detected"
      gap: true
  run:
    rig: "driftgap-20260621-1mdk"
    cleanup:
      result: "pass"
  conclusion: "Confirmed: cub-scout detected the replicas drift but MISSED the env-var drift (live env change verified). Drift detection has a field-coverage hole — extend it to container env (and audit other pod-spec fields), or a drifted env passes as no-drift."