Hub
iac-plan-review
One role, one pipeline and two skills for infrastructure change review that refuses to review a plan it did not produce, and treats the plan itself as code execution because on this domain's facts it is.
Install
Staged first, the resolved commit pinned in .arcturn-install.json, then linked into the roots Arcturn scans. Nothing is linked before the pin.
To see the table below derived from the package itself rather than from this entry, run arcturn inspect sitharaj88/arcturn/kits/iac-plan-review — it stages exactly as an install would, links nothing, and prints what it would add.
Source
- Repository
- sitharaj88/arcturn/kits/iac-plan-review
- Maintainer
- Sitharaj Seenivasan
- Contents
- 1 role · 1 workflow · 2 skills
Usage
What you would type
Every command this package adds, in the form you would run it. A slash command is invoked by its own name; a pipeline goes through /workflow.
/plan-explainExplains a plan from the plan file alone, every sentence carrying a verbatim resource address; a resource it cannot classify as stateful is unknown, never assumed stateless, and it never concludes safe or no downtime./drift-reportAttributes drift only to a quoted audit-log record with an event id, time and principal; everything else is unattributed. It proposes no state surgery and reads exit code 1 as an error, never as no drift./workflow iac-change-review5 stages, up to $18.
Disclosure
What this would add to your machine
Read in the same vocabulary the installer uses: derived lanes, declared tools, stage counts, budgets, and whether any of it is executable code.
Agent roles
1
A role’s lane is derived from the tools it declares — from what it can do, never from what its description claims about itself.
terraform-plan-reviewer
Laneexec
Tools
readgrepgloblsbash
| Role | Lane | Tools |
|---|---|---|
| terraform-plan-reviewer | exec | readgrepgloblsbash |
- exec
- Isolated worktree so it can run things; its diff is always discarded.
Workflows
1
A workflow spends money. The budget is the file’s own ceiling, enforced by the engine — the run aborts when the total reaches it.
iac-change-review
Stages5
Budget$18
| Workflow | Stages | Budget |
|---|---|---|
| iac-change-review | 5 | $18 |
Skills
2
- /plan-explain
- /drift-report
No executable code disclosed
This entry declares no extensions/. Verify it against the package itself with arcturn inspect — and note that the installer would confirm-gate executable code either way, whatever a listing says.