NetOps Copilot by gokunguru

Network changes are still typed by hand from tickets, and one wrong ACL can cut a site off. NetOps Copilot turns a request, typed or a screenshot of a ticket, into a validated multi-vendor change (Cisco IOS, Huawei VRP). Muse Spark reads the ticket, plans, and writes the config. Then deterministic layers decide what is safe: a schema-validated intent, a safety gate, a dry-run on each vendor's config model, and a policy guard against versioned policies. An independent reviewer on Muse Spark Open, in a separate session with read-only tools on the running and candidate config, can only escalate to the human. Nothing is applied without approval, and every change ships with a rollback proven to restore the original, Ansible playbooks, and a hash-chained journal. Benchmark on 22 requests, 11 of them unsafe (including a prompt injection hidden in an image): 22/22 correct, 0 unsafe change left auto-approvable. Validated end-to-end on a real Cisco IOS XE router (pushed, verified on the running config, rolled back). Bonus prizes: Best Build on Meta Open Weight Models (the independent reviewer, or the whole pipeline with --provider baseten, runs on Muse Spark Open served by Baseten) and Best Agentic Use-Case (an agent that investigates the network with read-only tools before proposing a change). What existed before: a 329-line scaffold committed a few hours before kickoff. As the rules require, it is not part of this submission: the parts still in use were rewritten during the event and the history was squashed, so no pre-kickoff code remains. Everything shown in the video was built during the hackathon (details in the README). Live demo (no sign-up): https://gokunguru--netops-copilot-demo-web.us-east.modal.run