lockfile

Terraform: upgrade a provider without uncontrolled drift

A production runbook for qualifying a Terraform provider upgrade with a lockfile, baseline plan, canary, operational evidence and an explicit rollback.