Note

No apply button in a web UI

A convenience feature that mutates production is a blast-radius decision wearing a convenience costume.

ARCH generates Terraform and deliberately does not apply it. The output goes into a pull request, the pipeline plans it, a human approves it.

An apply button in the canvas would be a better demo and a worse product. It collapses the review step, puts credentials capable of mutating production behind a web session, and moves the audit trail from Git history into an application log.

The tool proposes. The pipeline enforces.