Standards and workflows for building secure, well-structured Terraform modules, including planning gates, validation steps, and implementation guidance.
82
84%
Does it follow best practices?
Impact
80%
1.77xAverage score across 5 eval scenarios
Passed
No known issues
Escalation flagged
0%
0%
RDS identified as high-risk
0%
0%
No silent completion
0%
0%
Stateful replacement risk named
0%
10%
terraform-plan gate obligation stated
0%
50%
Cannot-run terraform acknowledged
0%
40%
Stop trigger correctly applied
0%
0%
Secrets not exposed
0%
20%
Smallest viable diff principle
100%
87%
Escalation specifics listed
0%
0%
Correct directory
0%
100%
Filename date format
100%
100%
Task title field
75%
100%
All 10 required fields
40%
100%
Sensitive values redacted
100%
100%
Gates summary present
30%
100%
Validation-Waivers-Gates aligned
80%
100%
Change classes field populated
0%
100%
Files changed field populated
66%
100%
Why field populated
100%
100%
Change classified first
25%
62%
Reads docs indexes first
70%
70%
Minimal change applied
100%
100%
Index updated
100%
100%
Task log created
0%
100%
Task log has required fields
0%
100%
Completion summary gate recap
0%
87%
Links verified
0%
100%
No scope broadening
100%
100%
Gate passed before completion
0%
75%
Summary concise with gate
0%
100%
Change class correct
0%
100%
terraform version pre-flight
100%
100%
AWS session pre-flight
0%
100%
Pre-flight stops on failure
100%
100%
Plan directory: examples/test_app
100%
100%
Init command flags
100%
100%
Plan command flags
40%
100%
JSON show command
100%
100%
Uses tfplan.json not stdout
100%
100%
Cleanup step
100%
100%
Zero-change = FAIL when diff expected
60%
100%
No-errors != PASS
100%
100%
Resource summary on pass
100%
100%
Correct classification A
100%
100%
Correct classification B
66%
100%
Correct classification C
66%
100%
Mixed union gates
75%
83%
terraform-module gate commands
60%
60%
example-terraform gate commands
62%
100%
Exit code 0 = no diff PASS
0%
100%
Exit code 2 = diff conditional PASS
0%
100%
Waiver structure
100%
100%
Gate summary format
0%
75%
docs-only gates
37%
100%
Init before validate/plan
0%
100%