Plugboard — an outreach agent that physically cannot send without a signed human
Plugboard turns a founder's paragraph into a ranked shortlist of creators, drafts the outreach, tracks the deals that come back - and cannot send a single message on its own.
Brief. A founder writes plain text ("launching a Solana wallet for first-time users, 300 USDC, want honest walkthroughs"). Plugboard extracts goal, audience, budget, deliverables, tone and red lines into a structured brief you can edit before anything runs.
Match. Deterministic and arguable, not a black box: seven weighted dimensions summing to 1.0 (audience overlap, topic fit, engagement quality, price fit, format fit, recency, reliability) and six HARD filters that exclude rather than downrank (budget, language, platform, brand-safety, disclosure history, do-not-contact). Every row carries one sentence of reasoning a founder can argue with, plus the data source behind it.
Outreach - the part that matters. Approval is a cryptographic act. Approving signs an HMAC over the exact subject and body; send() recomputes it before anything leaves the machine. Edit one character after approval - a bug, or a prompt injection hidden inside a creator's reply - and the send dies. There is no "approve all", no auto-send path, and the drafting model never holds the signing key.
Track. Deliverables, deadlines and results per deal, with an optional hash of the agreed terms anchored in an SPL Memo on Solana devnet, so neither side can rewrite what was agreed.
What is real: the brief parser, the full matching engine with its seven dimensions and six filters, the HMAC approval gate and its tamper test, the deal tracker, the devnet memo anchor, a seeded creator dataset, and the test suite (all green, pytest -q).
What is mocked: creator profiles are a seeded dataset, not scraped from any platform, and nothing was emailed to a real creator - the demo sends to a local sink. No handles, no addresses, no API keys in the repo.
Pre-hackathon work is marked in the README: the mail engine and the click-to-approve queue come from our own ops stack; the brief parser, matcher, HMAC approval gate, tracker and the devnet anchor were built for this hackathon.
Voting opens Sep 30, 1:07 PM UTC

