Detect internal policy drift from policy age, source conflicts, process changes, owner gaps, and incident signals