Trust But Canary: Configuration Safety at Scale — Blankdot