Yamcha

Umbra diagnoses broken Kubernetes configuration. Meta's Muse Spark reads the cluster through read-only tools and proposes a fix. Code, not the model, decides what is safe: deterministic gates check allowed fields, secrets, access scope, dry run, a separate sandbox and a verifier. Each result produces a signed-by-key-holder receipt chain that shows tampering. Simple cases run with no model at all. Built during the hackathon, open source (Apache-2.0).