Terraform Drift Detection Is Not the Same Thing as Drift Repair
A normal plan refreshes reality before calculating changes. Refresh-only mode updates Terraform's recorded view without changing infrastructure. The real decision is which side is authoritative.