Agreed on the split — let the model plan, let a deterministic engine execute. That's the honest read of where LLMs are actually reliable right now, and 'the hundredth build has to match the first' is exactly the right acceptance test for infra automation. Keeping the human gate on the risky steps is the part most teams quietly skip.