If a target application supports automated fulfillment IG should be able to do automatic verification without a collection/publication cycle.
For example, if a group membership is added/removed in AD by IG, IG should be able to query the target object in AD to see if the action was performed, i.e. if the membership reflects the action IG performed, or IG could just rely on the outcome of the LDAP modify operation (success/failure).