Techniques for automated analysis and classification of network configurations are provided. Resource provisioning code used to provision resources in a network is received, and a set of constraints is generated based on the resource provisioning code, where the set of constraints define valid network configurations. A configuration tree for the network is received, and a set of candidates is generated for the network based at least in part on the configuration tree. Upon determining that a first candidate of the set of candidates does not fail any constraint in the set of constraints, the first candidate is recorded as a manual intent. The manual intent is integrated into an automated configuration system for the network.