Let the agent look, before it can touch anything
The prompt
Enable repository discovery, search, architecture inspection, test discovery, and Terraform plan/read operations only. Confirm the agent can analyze the project and produce a plan without mutating any protected resource.Why it's built that way
Exit criterion: the agent can analyze the project and produce a plan without mutating protected resources. This phase proves the agent's reasoning is useful before you trust it with any authority at all.
What to do with the answer
Have the agent produce a real plan for a real (small) change here, and review the plan itself — not just whether it eventually worked.