The Terraform Dependency Lock File Is Part of Your Reproducibility Boundary
required_providers constrains acceptable versions; .terraform.lock.hcl records the exact provider selections and checksums Terraform should install. Committing one without understanding the other creates false confidence.