PolicyLint

PolicyLint is a web app that continuously validates SDN controller intent/policy against real network state and change history. It connects to common controllers (e.g., ONOS, OpenDaylight, Cisco ACI via APIs) and ingests flow rules, intents, ACLs, and topology snapshots. It then runs pre-deploy and post-deploy checks: unreachable segments, shadowed rules, asymmetric routing, policy drift between sites, and blast-radius estimates for proposed changes. The product is intentionally narrow: it doesn’t try to be a full controller or NMS. Instead, it acts like “CI for network policy,” producing actionable findings with exact offending rules, impacted endpoints, and suggested remediations. Teams can gate changes via GitOps hooks, require approvals for risky diffs, and generate audit-ready reports for compliance. Realistically, the hardest part is reliable integrations and keeping false positives low; the MVP should focus on 1-2 controllers and a limited set of high-signal checks.