We only have the linters passing on the sysadm diffs.
So it's up to the sysadm updating puppet, vagrant, terraform or whatever to prove its change is ok.

But nothing double checks it. Technically a reviewer could do it but it'd challenging to ask for such process.
It'd be neat if we could have something that does the double checking.

suggestions:

• puppet -> octocatalog-diff on the impacted profiled node
• terraform -> terraform plan output
• vagrant -> vagrant up ok