> Systems generating config files and then pushing them out to services within the infrastructure without proper checking and linting.
It's not really that easy, as "proper checking and linting" might as well be phrased as "sufficiently smart checking and linting". You can have amazing checking and linting and still let a bug pass through.
(what could possibly go wrong?)
The checks need to be quite sophisticated. We patched the generator, but never got to implement a test deploy mechanism to ensure the config made sense before deployment to a real production environment.
In that instance the rule was written by a human, but deployed automatically to their entire infrastructure before they could notice the problem it caused.