need some ideas concerning cfengine

[Hermann Biller]

dear cfengine community,

i'ld like to use cfengine for the following purpose:

part 1: detect changes in defined files
e.q.
all_machines: ( all_suns all_hps all_linux )
all_machines.checkfiles: ( /etc/hosts /etc/resolv.conf ... )
all_suns.checkfiles: ( /etc/vfstab /etc/dfs/dfstab ... )
on each host these files could be different. 
a change of content should be found out by checksum.
a change of permissions should also be monitored.
in case of a change a duty system administrator should be mailed.

part 2: reconfigure defined files
just do a cfengine job like append a line in /etc/services
if a change was done by a cfengine script the system should recognize
that it is a desired change and not inform the sysadmin about this change

part 3: log all changes of cfengine scripts in a cvs database
(trivial but neccessary)

is this plan realizable with cfengine? any recommendations?

thanks for help,
hermann