The primary principle of Cfengine is automatic convergence from Unknown to Configured.

Cfengine(incorrect state) -> correct state

Cfengine(correct state) -> correct state

Example: Making sure a crontab entry is present:

If it's not, add it.

If it is, do nothing.

Result: crontab entry is present.