Review exported cloud configuration and rendered workloads for IAM, storage, RBAC and workload policy weaknesses.
Add bounded artifact inspection, synthetic correction fixtures and portable playback.