Terraform repositories often contain many layers. A user may want to inspect only risky, changed, or nearby configs without changing the original directory pattern.
Interactive users can narrow the detected list at the moment of inspection. CI users can encode the same intent with deterministic include and exclude flags.
Keep selection before execution. Discovery remains broad, selection narrows the work list, and the existing worker pool receives only the final selected configs.
Validation uses unit tests for selection logic and picker behavior, plus example scans with include and exclude flags.
Selection changes which configs are scanned. It does not change Terraform plan behavior, status classification, or report formatting.