Cairn scans your Terraform locally for security, cost, reliability and governance in a single pass. When a cost fix and a security risk hit the same resource, it tells you which to do first - then writes the patch. No account, no upload, zero network calls. MIT.