Docs · Validation plan
Timbro Validation Machine — runbook
The validation machine is how we find out if anyone wants Timbro, without cold outreach, selling, or a personal brand. It's an inbound funnel: proof, in plain English, with a door to knock on.
The pieces
| Piece | Where | What it does |
|---|---|---|
| Flight recorder | site/demo/index.html | Visual timeline of 3 real protocol runs: clean deal, dispute + referee, appeal + reversal |
| Demo generator | demo/run_demo.py + demo/render_flight_recorder.py | Runs the scenarios against a fresh DB, narrates them, renders the timeline |
| Signup API | POST /v1/early-access (public), GET /v1/early-access (API key) | Stores design-partner signups in the DB |
Everything is served from the API itself: app.mount("/", StaticFiles(...)) in main.py. One process, one deploy — the form posts same-origin.
Operating it
# Regenerate the demo (after protocol changes):
PYTHONPATH=src .venv/bin/python demo/run_demo.py
PYTHONPATH=src .venv/bin/python demo/render_flight_recorder.py
# Run the whole machine locally:
PYTHONPATH=src TIMBRO_API_KEY=<key> .venv/bin/uvicorn timbro.main:app --port 8471
# → landing page: http://127.0.0.1:8471/
# → demo: http://127.0.0.1:8471/demo/
# Read signups:
curl http://127.0.0.1:8471/v1/early-access -H "X-API-Key: <key>"The playbook (faceless, no cold outreach)
1. Deploy the machine to a public URL (one uvicorn process + a domain). 2. Share the proof, not a pitch. Faceless short-form videos and posts built around the analogies: "AI agents are about to do business with no trust layer", the lockbox, instant replay. Same muscle as the Holiday Goldmine content plan. Point everything at the landing page. 3. Let them come to us. The early-access form is the only CTA. No DMs, no cold email, no calls. 4. Measure one number: qualified signups per week. Goal: 10–20 design partners (agent builders) in conversation. 5. Talk to them. One friendly conversation each: what would your agents trade? What breaks today? Feed answers back into the roadmap.
What converts a visitor into a believer
- The demo is *real* — every event on the flight-recorder page came from the
- The analogies do the heavy lifting — never explain escrow without the
- Honest content only: no fake testimonials, no inflated claims. The page
actual API, including the probation ("learner's permit") moment. Say so.
lockbox, or appeals without instant replay. (docs/ANALOGIES.md)
makes no claim the protocol can't demonstrate.
Still needed from the founder
- A public URL + domain when ready (then: webhook-style real deployment).
- Stripe test keys when we wire the live-rail demo (secure vault, flagged
- Warm intros to anyone building AI agents, if they exist.
- The go-ahead before anything goes public under a brand.
at the right moment — same pattern as LaunchProof's sandbox).