Atlantis

and atlantis definitely does not have a feature like that

We have a script as part of our custom apply workflow that checks if the plan has `helm_release` in it and fails if plan is older than an hour. In our case this is because gke credentials are part of plan and live only for an hour and helm provider doesn't feel well when `helm_release` fails.. I guess you can do the same with looking for whatever "codewords" you are interested in and check local server time to define if it's ok to apply it or not?