Author and operate HCL infrastructure-as-code using OpenTofu 1.8+ (the 2026 default — Linux Foundation fork of Terraform, drop-in compatible) or HashiCorp Terraform 1.9+. Includes module layout, remote state with encryption + locking, `tflint` + `checkov` + `infracost` in CI, and Atlantis for PR-driven plan/apply.
