Kubernetes operational intelligence

Know the impact
before you execute.

propt wraps kubectl transparently and analyzes live Kubernetes state before mutating commands are allowed to execute.

propt — powershell
PS C:\cluster> propt kubectl delete pod payment-api-85648675fb-6bj46
IMPACT: HIGH POTENTIAL IMPACT
deployment/payment-api: available replicas (5) below desired (6)
consequence: capacity reduction may propagate through deployment → replicaset → service
Execute? [y/N]
01 / HOW IT WORKS

Kubernetes operations,
with context.

propt doesn't replace kubectl. It sits in front of it, analyzes the proposed mutation, explains the potential consequences, and leaves the final decision to the engineer.

The execution path
01
kubectl command Your original command
02
Parse change Build a common change model
03
Query cluster Inspect real live state
04
Infer impact Graph + operational signals
05
Human decision Execute? [y/N]
What propt protects against
example / mutation
# dangerous command
propt kubectl delete pod payment-api-85648675fb-6bj46

# propt checks:
deployment → replica availability
ownerReferences → resource relationships
selectors → service relationships
Popeye → operational findings
metrics-server → resource utilization
02 / CORE

Built around
real cluster state.

No giant command-to-risk lookup table. No invented relationships. No opaque risk score.

KG

Live dependency graph

Builds relationships from actual Kubernetes ownerReferences and label-selector matching. The graph reflects the cluster that exists now.

!

Impact inference

Combines resource relationships, operational findings and optional resource metrics to explain what a mutation could affect.

>_

Transparent kubectl

Read-only commands pass directly through. Mutating commands are analyzed before the original kubectl command is executed.

✓

Human in the loop

propt does not silently change infrastructure. It presents evidence and asks the engineer whether the command should proceed.

S3

Auditable decisions

Every proposed change, evidence, consequence and execution decision can be recorded as structured JSON in Amazon S3.

0

Graceful degradation

Missing optional signals are reported instead of fabricated. AWS audit failures never block the underlying kubectl workflow.

03 / ARCHITECTURE

One command.
Multiple signals.

propt keeps the analysis pipeline explicit and inspectable from command parsing to final execution.

kubectl command
        │
        ▼
Common Change Model
        │
        ▼
Live Resource Graph
        │
        ├────────────── ownerReferences
        │
        ├────────────── label selectors
        │
        ▼
Impact Inference Engine
        │
        ├────────────── cluster state
        ├────────────── Popeye findings
        └────────────── metrics-server
        │
        ▼
Evidence-based Explanation
        │
        ▼
Execute? [y/N]
        │
        ├──────────► YES ──► original kubectl command
        │
        └──────────► NO  ──► command cancelled
                         │
                         ▼
                  AWS S3 Audit Record
04 / SIGNALS

Real signals.
Not guesses.

propt uses existing Kubernetes and operational tooling rather than creating a fictional model of your cluster.

kubernetes

Python client for live resource discovery.

networkx

Dependency graph construction and traversal.

Popeye

Operational cluster findings.

metrics-server

Optional real CPU utilization data.

kubectl

Original Kubernetes command interface.

boto3

AWS S3 audit integration.

Amazon S3

Queryable decision history.

Python

Core implementation and CLI tooling.

05 / AUDIT

Infrastructure decisions
shouldn't disappear.

Every analyzed mutation can produce a structured audit record containing the command, target, evidence, consequence and engineer decision.

✓ Timestamped decision records
✓ Evidence and impact level
✓ Execution decision
✓ Stored as JSON in Amazon S3
decisions / 2026-09-20.json
{
  "command":
    "delete pod payment-api-85648675fb-6bj46",

  "target":
    "pod/payment-api-85648675fb-6bj46",

  "impact_level":
    "HIGH",

  "evidence": [
    "available replicas below desired"
  ],

  "executed":
    false
}
06 / PHILOSOPHY

What propt
deliberately doesn't do.

The hackathon scope stays intentionally focused.

×

No hardcoded risk table

Risk is derived from live cluster state and operational signals rather than a static command-to-risk mapping.

×

No fabricated metrics

If metrics-server isn't available, propt says so instead of inventing a utilization number.

×

No autonomous remediation

propt explains the potential impact and lets the engineer decide whether to continue.

Make the decision
before the mutation.

Explore the implementation, run the demo, and see how propt turns Kubernetes operations into evidence-based decisions.