A computer-implemented method, implemented by a network assurance appliance, comprising: querying a leaf node in a network fabric for a plurality of hardware level entries associated with each concrete level network rule in a set of concrete level network rules implemented on the leaf node, wherein the plurality of hardware level entries are stored in a memory at the leaf node; for each concrete level network rule in the set of concrete level network rules, identifying a logical level network intent implemented on the leaf node, wherein the logical level network intent is identified based on a logical model for the leaf node and is associated with the concrete level network rules; identifying a set of logical level components of the logical level network intent; and attributing the plurality of hardware level entries to their associated logical level components; wherein the concrete level network rules represent the actual in-state configuration of the leaf node; the logical level network intent represents a logical rendering of policies implemented by a network operator; and wherein the set of logical level components are parts of the logical level network intent specific to the leaf node; the method further comprising: generating, by rendering the logical level components of the logical model into a concrete model able to be run on the leaf node, a set of reference concrete level network rules; and determining whether the concrete level rules implemented on the leaf node are correctly implemented by comparing the concrete level rules implemented on the leaf node with the reference concrete level network rules; whereby a mismatch between the concrete level rules implemented on the leaf node and the reference concrete level rules indicates that the concrete level rules implemented on the leaf node are misconfigured. querying a leaf node in a network fabric for a plurality of hardware level entries associated with each concrete level network rule in a set of concrete level network rules implemented on the leaf node, wherein the plurality of hardware level entries are stored in a memory at the leaf node; for each concrete level network rule in the set of concrete level network rules, identifying a logical level network intent implemented on the leaf node, wherein the logical level network intent is identified based on a logical model for the leaf node and is associated with the concrete level network rules; identifying a set of logical level components of the logical level network intent; and attributing the plurality of hardware level entries to their associated logical level components; wherein the concrete level network rules represent the actual in-state configuration of the leaf node; the logical level network intent represents a logical rendering of policies implemented by a network operator; and wherein the set of logical level components are parts of the logical level network intent specific to the leaf node; the method further comprising: generating, by rendering the logical level components of the logical model into a concrete model able to be run on the leaf node, a set of reference concrete level network rules; and determining whether the concrete level rules implemented on the leaf node are correctly implemented by comparing the concrete level rules implemented on the leaf node with the reference concrete level network rules; whereby a mismatch between the concrete level rules implemented on the leaf node and the reference concrete level rules indicates that the concrete level rules implemented on the leaf node are misconfigured. generating, by rendering the logical level components of the logical model into a concrete model able to be run on the leaf node, a set of reference concrete level network rules; and determining whether the concrete level rules implemented on the leaf node are correctly implemented by comparing the concrete level rules implemented on the leaf node with the reference concrete level network rules; whereby a mismatch between the concrete level rules implemented on the leaf node and the reference concrete level rules indicates that the concrete level rules implemented on the leaf node are misconfigured.