The problem with AI-written Terraform isn't bad HCL — it's that the plan you reviewed and the plan that applies can quietly diverge. Notes from building an IaC harness (as a private SDK/compiler) where humans, agents, and CI pass one gate, and only a fingerprinted, reviewed plan reaches prod.
You Can't Review an Agent. You Can Review a Plan.
