Infrastructure changes

The user confirms every change to live infrastructure (Terraform, Pulumi, Kubernetes, Helm, CloudFormation), and state files are never edited by hand.

Set this profile

ccpp cpo profile set infra-changes

Inside Claude Code, prefix the command with ! to run it in the session. Downloading a profile needs a Builder or Team plan; listing them does not.

Policies

2 policies, grouped by what they guard.

Destructive actions 2

Deletions, overwrites and irreversible commands wait for the user or a scoped target.

infra-apply-confirmed
The user confirms commands that change live infrastructure
infra-state-files
Infrastructure state files are never written by hand