We've been using etckeeper (/etc is a git repo so you can track changes) plus an after-commit hook to post to a chatbot.

We alert on uncommitted changes after one hour via nagios and track authors with GIT_COMMITTER_* env variables.

This is deployed to about 6000 machines. Works well.