# Step 2 — Validation results

These checks are defined for pre-deployment execution. They intentionally do not provision cloud resources.

- Terraform formatting: **defined** by `terraform fmt -check -recursive`.
- Terraform configuration validation: **defined** by `terraform init -backend=false` followed by `terraform validate`.
- Dry-run deployment check: **defined** as an opt-in `RUN_PLAN=true` execution of `terraform plan -refresh=false`; it requires a project and credentials and is not run by default.
- Repository artifact tests: **defined** by `python3 -m unittest discover -s tests -v`.

Generation environment limitation: the repository was created without filesystem, Terraform binary, provider download, or Google Cloud credentials. Consequently, execution results are `not_run`, not a claim of pass. Run `bash scripts/validate.sh` in CI before approval.