◧◨
NetTwin
Every firewall change is proven on a disposable twin before it touches production.
1
Change request
Baseline ruleset (current production)
· optional, uses topology variables
Plan tests
2
Test plan
+ Add probe
Run on twin
3
Twin runs
Live log
Containment checks
· prove the sandbox, every attempt
Evidence
4
Result
Diff
· baseline → proposed
Full proposed ruleset and rationale
Approve
Download .nft
Download report.md