Security monitoring for retail refrigeration controller fleets
Agentless monitoring and attack detection for supermarket refrigeration controllers (Danfoss AK/CC, Carel) so chains catch defrost-attack style intrusions before food spoils.
Ideas
Generated daily from Hacker News discussions, then put on trial. Most are killed.
PR triage gate for overwhelmed OSS maintainers
A CI gate that scores and filters low-effort/AI-dumped PRs before they consume open-source maintainer review time.
Self-hosted legal LLM for privileged matters
On-prem, open-weight legal LLM with jurisdiction adapters and citation verification for firms that can't send privileged files to US or Chinese clouds.
Cross-jurisdiction cancellation compliance auditor for subscription businesses
Continuously audited, jurisdiction-compliant cancellation flows for subscription businesses as click-to-cancel laws multiply.
Continuous escape testing for agent sandboxes
A test harness and CVE-watch service that continuously probes sandbox libraries (mxc, bubblewrap, gVisor) for escapes and misconfigurations before agent-tool vendors ship them.
Unified permission and audit layer for agent SaaS access
One control plane mapping an agent's identity to least-privilege scopes and full audit across Jira, GitHub, Slack and other SaaS, closing the OS-to-app permission gap.