Status: OUT
Node configuration is both delivered through the immutable pipeline and protected against drift, with the MCO marking drifted nodes as Degraded — but only when API-level validation catches all invalid values before they reach nodes.
depth-3 gate — extends node-config-delivery-fully-validated by adding drift detection; validation gap still blocks full confidence
Depends on (SL): node-config-immutable-delivery-pipeline, config-drift-marks-node-degraded
Unless: kubeletconfig-no-api-validation