Manage Terraform Infrastructure Drift

Scenario

You're working in an environment where infrastructure is managed through Terraform, but changes can still happen outside the normal workflow. You want a clear way to detect drift, review it, and bring resources back to the declared state without disrupting delivery.

Question

How would you manage infrastructure drift in a Terraform-managed environment?