---
name: terraform-change
description: Plan, review, apply and verify a bounded Terraform change without exposing secrets or skipping approval.
---

1. Read repository instructions and locate the relevant Terraform root module.
2. Inspect `git status`, the selected workspace/backend, provider constraints and credential source without printing secret values.
3. Run formatting and validation before planning.
4. Save a plan and summarize creates, updates, replacements and destroys.
5. Stop for explicit approval before `apply`, `destroy`, state mutation or import against shared infrastructure.
6. After approval, apply the reviewed plan only.
7. Verify outputs and resource state, then report commands, evidence, cost/risk changes and rollback options.