What is the default behaviour of dynamic resources with regards to the

__provider

input? Should I be checking this in

diff

when I want to force a replacement when it’s changed?

Yes the system doesn't do any checking of

__provider

changes itself, it mostly just tries to pass in the latest version it can. But if you change provider but return no diff then the system won't run update to save the new provider code.