Policy-Consistent Change Provenance for Legitimacy Validation of Enterprise Configuration Modifications (IEEE Access, 2026)