SKILL.md
Terraform Release and Provisioner Safety
Prevent a valid-looking Terraform workflow from publishing unvalidated bytes or widening a change's blast radius. Keep the user's business outcome and the actual mutation surface ahead of plan counts, green wrappers, or process completeness.
Route the task
- Release, shared gateway, saved plan, staging receipt, or production promotion: read release-safety-and-environment-parity.md and pre-deploy-validation.md before approval or mutation.
- Environment isolation, including cached initialization, environment retirement, shared data backend, DNS ownership, state, or snapshots: read multi-env-isolation.md.
- Pre-deploy checks or a validator: read pre-deploy-validation.md.
- Fresh instance or empty data disk: read zero-to-deploy-checklist.md.
- One known provisioner symptom: use the matching pattern below.