Document digest drift on the Blueprints page (trigger, unverified
outcome, Enforce pinned repair that fails closed) and add a drift
taxonomy reference covering the seven drift classes and the policy
domains.
The Drift tab now renders an expected vs observed digest line per
GitOps target with a matches, diverged, or unverified verdict. A
target without an approved digest or without exact/qualified runtime
evidence reads as unverified with the reason, never as matching.
Add an e2e spec that places an Inline Blueprint, induces digest drift,
and verifies Enforce repairs from the pinned digest and reconverges.
Refs SEN-652
Claude
52e78d662e