In Puppet, a node agent will check in with the Master every so often and send facts about the node. The Master will then check these facts are what it should be and if they have become misaligned will revert them to the desired state.
For instance, say I want to be sure that no additional users have been created, any unwarranted users will be deleted.
How can Ansible achieve this given there is no agent? How can it gather facts remotely?