duroapp

Hi HN, I'm Logan. After watching Replit's agent delete a production database, Claude Code wipe a user's home directory, and Amazon Kiro cause a 13-hour AWS outage, I built the tool I wished existed.

AvaKill intercepts AI agent tool calls — file writes, shell commands, API requests, and evaluates them against a YAML policy file before they execute. No ML, no API calls, no latency. Deterministic policy evaluation in under 1 millisecond.

Three enforcement paths:

- Hooks: Direct integration into Claude Code, Cursor (in testing), Windsurf, Gemini CLI, Codex, Kiro, Amp

- MCP Proxy: Transparent proxy between any MCP client and server (in testing)

- OS Sandbox: Kernel-level enforcement via Landlock (Linux), sandbox-exec (macOS), AppContainer (Windows)

`pipx install avakill` — you're protected in under a minute.

demo video: https://avakill-demo-video.b-cdn.net/avakill_demo.mp4

Hey Hacker News! I'm Logan, co-founder at Duro.

After traveling for work for years, I got fed up with how challenging it is to book a day pass at a gym. Gabriel, Duro's other co-founder & I decided to solve this by creating a simple marketplace for gyms to sell passes, classes and other on-demand services.

We're different in that we enable customers to pay as they go instead of getting another membership.

We recently launched our MVP for web with four gym partners in Los Angeles and we applied to YC W24. (duroapp.com)

What do you think of this idea? Does this product offer what you would need it to? If not, please give us your feedback.

We've also made our application to YC public.

Check it out: https://www.notion.so/duroapp/Duro-Y-Combinator-W24-Applicat...