Every idea had to show a paying buyer, evidence from the discussion and a real gap, then survive a red team trying to kill it.
Agentless monitoring and attack detection for supermarket refrigeration controllers (Danfoss AK/CC, Carel) so chains catch defrost-attack style intrusions before food spoils.
A CI gate that scores and filters low-effort/AI-dumped PRs before they consume open-source maintainer review time.
On-prem, open-weight legal LLM with jurisdiction adapters and citation verification for firms that can't send privileged files to US or Chinese clouds.
CodeRabbit, Greptile, and Graphite are all racing toward risk-tiered auto-merge with the same 2026 study as their pitch deck, making this a crowded feature war with no durable differentiation.
AI-plus-fixed-fee-lawyer contract review is exactly Robin AI's (and LawGeex's, and a dozen legal-services startups') model, and one HN user redlining his own vendor contracts in Claude is not a market.
vLex Vincent already covers small jurisdictions with verified citations and Lexis+ AI ships hallucination-checked citations, so the 'incumbents ignore small jurisdictions' gap is mostly asserted rather than demonstrated.
No compliance lead is yet asking auditors 'who vouched for this agent's intent' — the evidence is philosophical comments about accountability, and SLSA/in-toto provenance plus a CODEOWNERS checkbox covers what buyers will actually accept.
The demand evidence is a single commenter wishing for this product, and a UL-certified dual-leg power-electronics hardware launch is a capital-heavy bet EcoFlow or Anker can flank from their existing lines at will.
Tosibox and carrier private-APN offerings already sell managed OT remote access, and the strongest evidence in the thread is a sarcastic comment explaining why the exact buyer won't deploy or pay for this.
The evidence is two comments about CRS mistakes; geospatial correctness linting is an open-source pyproj/geopandas companion library, not something analysts at utilities will pay $50-200/seat/mo for.
Buyers expect this guidance free from kit retailers and nonprofits like Bright Saver, making this an SEO affiliate-content site with a $20 report nobody pays for, not a product.
All the evidence is one HN thread of power users who already solved this with free DIY tools (docker, bubblewrap, srt), and Anthropic's own sandbox-runtime plus vendor changes will absorb the demand before anyone pays $10-25/dev/mo for a wrapper.
Asset inventory plus model-to-CVE mapping is a Shodan query and a runZero feature request away, so this is a thin feature the incumbents add the moment the vertical looks interesting.
This is endpoint inventory/policy, which Jamf/Kandji and VSCode enterprise policy will extend to cover as a feature, and the entire evidence base is a handful of annoyed users in one thread rather than any security lead asking to buy it.
Curated CLAUDE.md/Cursor rules are free markdown maintained by the same staff engineers who'd be the buyer, and rule-linting is a feature Cursor or the agent vendors ship themselves.
The named buyer is a Nix/dotfiles hobbyist who by definition hand-rolls this for free and will never pay $5-15/mo, making this a dotfiles plugin rather than a company.