Architecture of a Safe Multi-Vendor Network Automation Platform

This technical report presents the architecture of a lab-based hybrid control plane for safer multi-vendor network and cloud automation. The platform unifies heterogeneous network operating systems and AWS networking workflows through a common visual workflow and control-plane model. The architecture follows an intent → render → preview → approve → dry-run → execute → verify → rollback pipeline and emphasizes safety-by-default through soft-preview and simulation paths, ticket-bound authorization, explicit live gates for cloud mutation, pre-deployment digital-twin, risk and compliance signals, and first-class rollback. The implementation covers multi-vendor network automation and AWS security group, VPC route, and NACL workflows while treating network and cloud execution as peer domains within a common change-control model. A source-verified standards-alignment appendix maps selected NIST and CISA guidance to demonstrated lab capabilities without asserting certification or production compliance. The work is presented as a lab/research implementation and architecture study rather than a production SLA, certification, or sector attestation.