Challenge

Cross-Plant OT Infrastructure Modernization Agent with Google ADK and Amazon Bedrock

Legacy OT network migration across multiple factory sites involves dangerous configuration drift and downtime risks. Build a cross-plant modernization agent using Google ADK and Amazon Bedrock models to orchestrate network subnet updates and PLC endpoint mapping. Achieve zero unhandled configuration rollbacks and 100% network policy validation across 5 simulated plant sites.

EngineeringHosted by Vera
Challenge brief

What you are building

The core problem, expected build, and operating context for this challenge.

Orchestrate multi-plant OT migration workflows using Google Agent Development Kit (ADK) connected to Amazon Bedrock hosted model pipelines.

Delivery guide

How work is evaluated

Evaluation

Evaluates multi-plant OT topology migration script generation and IEC 62443 network zone compliance.

Datasets

Shared data for this challenge

Review public datasets and any private uploads tied to your build.

Evaluation rubric

How submissions are scored

These dimensions define what the evaluator checks and which criteria separate a passable run from a strong one.

Dimensions
2 scoring checks
Binary
2 pass or fail dimensions
Ordinal
0 scaled dimensions
Dimension 1

zero_ip_conflict

Ensure zero IP range overlap across site subnets

Binary check

This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.

Dimension 2

zone_compliance_rate

Percentage of generated subnet rules satisfying ISA/IEC 62443 boundaries • target: 1 • range: 0-1

Binary check

This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.

Learning goals

What you should walk away with

  • Build a multi-plant OT migration orchestrator using Google ADK framework abstractions

  • Connect Amazon Bedrock model APIs (Anthropic Claude 3.5 / Titan) as dynamic reasoning engines

  • Validate zero IP conflict and zero security zone violations across simulated site migrations

Resources and assets

Reference links and supporting material

Dataset notes

Network topology configurations and VLAN routing logs from 5 simulated global factory sites.

How this agent runs

Evaluates multi-plant OT topology migration script generation and IEC 62443 network zone compliance.

Challenge input

JSON containing current multi-site IP topologies and safety rules

Google ADK

Robust structural orchestration layer for enterprise agent workflows.

Amazon Bedrock

Provides scalable inference endpoints for state-of-the-art foundation models.

Evaluated output

JSON migration plan with zero IP overlap or zone violation flags

Checks for
  • Ensure zero IP range overlap across site subnets
  • Percentage of generated subnet rules satisfying ISA/IEC 62443 boundaries • target: 1 • range: 0-1
Proof of success
  • Benchmark: OT Network Infrastructure Security Suite (OT-NET-2025)
  • Zone Compliance Rate target: 100%
  • 1 public reference case
Runtime evidence
  • Python execution harness
  • Python sandbox (unavailable on Versalist)
View technical recipe

Configured tools

Action Space
  • Amazon Bedrock · Required
  • Google · Optional
  • Google ADK · Optional

Evaluation contract

  • zero_ip_conflict · Weight 1
  • zone_compliance_rate · Weight 1

Recipe state

This is a preview. The configuration can change before the evaluation recipe is locked.

Frequently Asked Questions about Cross-Plant OT Infrastructure Modernization Agent with Google ADK and Amazon Bedrock