What problem does it solve? Network outages and connectivity complaints are hard to triage because failures can occur at any layer—link, DNS, routing, TLS, or application. This Skill provides a layered diagnostic workflow that isolates the failing layer with evidence instead of guesswork, avoiding risky broad firewall or routing changes. ## Core Features & Use Cases - Layered Diagnosis: Systematically tests link/IP configuration, DNS resolution, transport reachability, TLS certificate validity, and application response to pinpoint the failing layer. - Symptom-to-Evidence Matrix: Maps common symptoms (no IP, DNS failure, VPN failure, certificate warnings, intermittent slowness, single-site outages) to the exact evidence to collect. - Safe Change Governance: Enforces rules against any/any firewall rules, TLS weakening, or unapproved production changes, requiring scope, rollback, and verification for every modification. - Use Case: A user reports "no internet" on VPN. The Skill guides checking client IP configuration, split-horizon DNS, tunnel routes, and proxy settings, then correlates VPN and firewall logs in the same time window to identify the failing layer and propose a minimal, reversible fix. ## Quick Start Diagnose why users on the office Wi-Fi cannot reach the internal application at app.contoso.com and identify the failing network layer.