Terraform for AI agent side effects — review exact file and shell changes, approve the hash, then apply safely.