Self-validating Terraform imports: detecting regressions at plan time

How can a Terraform configuration prove — at plan time, before any apply — that importing an existing live resource does not change its behavior?