The platform
Collection, analysis, and reasoning are separate systems with separate jobs.
Each one hands the next a verified artefact rather than a guess.
The human-forward principle
NalaOps flags, explains, and generates. It never pushes a change to a live
network device. Every remediation and every generated design is reviewed by
an engineer before a single command runs, and higher blast-radius changes -
routing protocol selection, new security feature placement - require documented
engineer rationale at approval, not just a click.
This is a design decision, not a limitation we intend to remove. The approval
step is where engineering judgement gets built, and it is the reason the corpus
is trustworthy in the first place.