diff --git a/.crush/active-ticket b/.crush/active-ticket
index a5941da..f4462de 100644
--- a/.crush/active-ticket
+++ b/.crush/active-ticket
@@ -1 +1 @@
-#385
+#454
diff --git a/playbooks/cmdb_drift_report.yml b/playbooks/cmdb_drift_report.yml
new file mode 100644
index 0000000..4402f5c
--- /dev/null
+++ b/playbooks/cmdb_drift_report.yml
@@ -0,0 +1,22 @@
+---
+# cmdb_drift_report.yml — run the nightly GLPI drift reconcile on demand [#801/#705]
+# Runs as root on the workstation, then as reachableceo (HOME + creds live there).
+- name: CMDB drift report (inventory seed vs live GLPI)
+  hosts: ultix-streaming
+  gather_facts: false
+  tasks:
+    - name: run reconcile report as reachableceo
+      ansible.builtin.command:
+        cmd: >
+          bash {{ ansible_env.HOME }}/projects/KNEL/OAM/inventory/scripts/reconcile-report.sh
+          --out /var/log/glpi-reconcile/report-manual-latest.md
+      become: true
+      become_user: reachableceo
+      become_method: su
+      register: drift
+      failed_when: drift.rc not in [0, 3]
+      changed_when: false
+
+    - name: show drift summary
+      ansible.builtin.debug:
+        msg: "{{ drift.stdout_lines[:6] }}"