Why reviewing AI-generated Terraform plans is safer than reviewing agents

A developer building an infrastructure-as-code harness argues that the real risk from AI agents isn't bad code but the gap between reviewed plans and applied plans. They propose a structure where every change, human or agent, is evaluated at the same boundary and only a reviewed plan ships. The unit of trust becomes a specific plan, not the agent.