drop argocd audit log · parse gitops sync events
flags force sync · app project policy bypass · repo credential changes · timeline + actor rollup
heuristic screener · log format varies by argocd version and distro — not definitive proof