It looks like Puppet supports compliance auditing and is build on top
of Puppet's "puppet inspect" subcommand, which was introduced in
2.6.5:
http://projects.puppetlabs.com/issues/4943
Puppet inspect manpage: http://docs.puppetlabs.com/man/inspect.html
Puppet Compliance Docs: http://docs.puppetlabs.com/pe/2.0/compliance_basics.html
- Brian Gupta