Skip to content
Network automation & operational assurance

Automation you can audit. Changes you can defend.

OperiProof builds assured network automation: pre-change analysis, exact-change approval, controlled execution, declared live observations, workflow-specific recovery, and evidence your team can verify.

OperiProof · Lafayette, Louisiana · Serving operators nationwide
The problem

Small carriers should not need a national operator's headcount to automate network changes safely.

01

Does our documented inventory match what is actually deployed?

02

When someone makes a production change, what is checked before it goes in?

03

If a change caused an outage tonight, how long until we knew, and how long to unwind it?

Teams generally know the answers are uncomfortable. What they lack is a defensible picture of how bad it is and what fixing it is worth — which is exactly what makes it impossible to get budget for.

The deliverable

We build assured network automation.

The automation does the work. The assurance makes the work defensible. The configuration that runs is bound by digest to the exact configuration your approver reviewed — a one-byte difference is refused before anything reaches the network. The evidence records what was proposed, validated, approved and executed, and what the declared post-change observations found. Its conclusions are limited to the stated workflow, controls, models, observations and protected invariants.

  • Approved bytes and executed bytes bound by digest — a one-byte difference refuses
  • SHA-256 manifest over every artifact
  • Machine-readable data, with a generated human-readable report
  • Cryptographic signature where a record must be verified outside your systems
FRR REFERENCE · FAIL-FIRST GATE
› parse      baseline and proposal ........ ok
› model      service route ................. reachable
› protect    management path ............... failed
proposed static route removes protected reachability
› refuse     CHANGE BLOCKED before credentials or device access
› retain     modeled refusal evidence · hashed
What we do

How an OperiProof engagement works.

01 · FIVE OR TEN BUSINESS DAYS

Qualification or Full Assessment

Start with one candidate workflow. Expand to three only when broader authority, source, risk, and architecture discovery is needed. Both end in a build, narrow, defer, or no-go decision.

Usable with or without us.

02 · TWO–SIX WEEKS

The Implementation

One qualified workflow engineered end to end, with pre-change validation, exact approval, controlled execution, declared post-change observations, workflow-specific recovery, evidence, and runbooks.

One workflow at a time. Never a platform rewrite.

03 · AFTER ACCEPTANCE

Ongoing Assurance

Compatibility review, evidence review, recovery rehearsal, and bounded improvements after a real workflow establishes support demand.

Optional. Not a 24/7 NOC.

Read the full offering →
How it is delivered

Your infrastructure. Your credentials. Your repositories.

Production automation is designed to run inside the customer security boundary. Access, credentials, support sessions and outbound destinations are customer-controlled, explicitly scoped and auditable.

Customer-specific work product, framework rights, offboarding and continued-operation terms are stated explicitly in the engagement agreement. The operating objective is customer custody, independent verification and no forced operational dependency.

Delivery~90% remote
Commercial modelfixed scope, not hourly
Intent sourceyour authoritative data; Git-controlled data can start
Reference executionNornir · Scrapli · FRR 10.2.1
Offline analysisBatfish
Reference topologycontainerlab reproducible acceptance workflow
Initial focus

Small rural and regional fiber carriers and ISPs.

Operators with lean engineering teams, recurring manual changes, active buildout, and workflows where one bounded automation improvement can show operational value quickly. OperiProof starts in Louisiana and the Gulf South and serves operators nationwide.

Lean network teams

Where senior engineers still carry repetitive operational work because broad platform programs are too large or risky.

Rural fiber growth

Where buildout, service activation, change volume, and evidence obligations are growing faster than engineering capacity.

Visible first workflow

A recurring change with a named owner, measurable outcome, protected behavior, and credible recovery path.

Customer-contained delivery

Automation, credentials, approvals, evidence, and operating knowledge remain inside the operator's boundary.

When a change goes wrong in production, how do you find out — and what does it cost to unwind it?

Thirty minutes, no charge, no deck. If the answer is comfortable, we will say so and there is no assessment to sell.

Start the conversation