Suede Prospecting

Suede Prospecting

Suede Prospecting turns an approved ICP into a source-backed, scored lead sheet across B2B SaaS, general B2B, local business, and early demand-signal motions. Every candidate carries qualification evidence, disqualification logic, and a compliance-aware handoff before outreach begins.

IRON LAW: every row carries a source URL and the date it was captured,
or it does not ship. No exceptions, no "verify later," no placeholder rows.

That single rule is what makes the downstream GDPR / CAN-SPAM lineage real. A row without it is not a low-confidence lead: it is not a lead.

Before Starting

Check for product marketing context first: If .agents/product-marketing.md exists (or .claude/product-marketing.md, or the legacy product-marketing-context.md filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.

Pick the Branch

Prospecting motions differ enough that the workflow forks at intake. Pick one branch based on who the user is selling to:

Before using any named platform or vendor, discover what is currently callable, authenticated, authorized, and permitted by its terms. If no research connector or browser is available, give the user a manual source checklist and work from URLs, exports, screenshots, or source text they provide.

If the user describes a hybrid motion (e.g., "SMBs that are also SaaS"), pick the dominant branch and pull in qualification signals from the other. If the user is early-stage and needs their first customers or design partners (evidence of demand over list coverage), use the Demand-signal branch.

For the branch-specific deep dives:

• SaaS → see references/saas-prospecting.md
• B2B → see references/b2b-prospecting.md
• Local SMB → see references/local-prospecting.md
• Demand-signal (find your first customers) → see references/demand-signals.md

Shared Framework (all branches)

Every prospecting engagement follows the same five phases. Tools and qualification signals change per branch; the phases don't.

Phase 1: Define the ICP

Pull from product-marketing.md if available. Otherwise, gather:

1. Firmographic fit: industry, company size, revenue band, geography, business model
2. Technographic fit (SaaS branch): what tools they already use, what they're missing
3. Buying signal: why now? (trigger event, funding, hiring, new initiative, dissatisfaction with current vendor, recent move/expansion)
4. Decision-maker profile: role, seniority, what they care about
5. Disqualifiers: what makes a prospect a clear "skip"

Output the ICP as a one-paragraph statement plus a checklist of pass/fail criteria. Don't move to discovery without this.

Phase 2: Build the candidate list (discovery)

Start at 2-3x the requested output count, adjusted down for thin source access or review capacity. Expand only when the observed disqualification rate shows another batch is needed, and cap expansion at 3 rounds. At the cap, stop sourcing: report the disqualification rate you observed and hand back a narrower ICP proposal rather than grinding through more sources.

• SaaS / B2B: cross-check material claims across available first-party, public, or licensed sources. Named vendors are candidates only after access, freshness, terms, and cost checks.
• Local SMB: use an authorized research connector or manual public-source review, then cross-check listing claims against the business's own site or another current source.

A smaller evidence-complete list is preferable to padding the output with unverified candidates. Don't start qualification until every candidate has its source URL captured.

Phase 3: Qualify each candidate

Score every candidate against the ICP checklist. Add evidence (a source URL or two) for each qualification: never assert without backing.

Confidence levels (used across all branches):

• High: confirmed by at least two independent sources or official business page
• Medium: one credible source plus consistent search evidence
• Low: incomplete or ambiguous evidence: flag what remains uncertain

For email contacts, discover whether an authorized validator is callable and read its current result semantics before use. If none is available, label the address unverified, keep it out of send-ready exports, and provide a user-operated validation checklist. Never claim that validation guarantees delivery. Don't move to scoring until every candidate carries a confidence level.

Phase 4: Score and prioritize

Apply this rubric for the SaaS, B2B, and Local SMB branches. The Demand-signal branch scores differently: 0–100 demand-fit, not Hot/Warm/Cold. See references/demand-signals.md.

Branch-specific signals refine the scoring: see each reference file. Let the evidence determine the number in each label; never force a Hot/Warm/Cold quota. No row leaves this phase labeled Hot without both a buying signal and a verified contact: downgrade it to Warm instead.

Phase 5: Output the lead sheet

(SaaS / B2B / Local SMB. The Demand-signal branch ships an evidence report instead: see references/demand-signals.md.)

Default to a markdown table in chat. Switch to CSV when the list is >25 rows or the user explicitly asks for a file.

After the table, add "Priority review candidates" when the evidence supports one or more: a bounded set ranked by current signal strength, with one sentence on what was verified and what still needs review.

Columns vary by branch (see reference files), but every lead sheet includes:

• score, business/company name, contact (where applicable), why-it's-a-prospect, source(s), confidence, last verified date

The sheet is not deliverable until it also carries the search parameters used and the open questions left unresolved.

Compliance Guardrails

These apply to every branch. Read first, every engagement.

1. No bulk scraping of LinkedIn, Google Maps, paywalled sites, or rate-limited APIs. Browser is an assisted research tool, not a scraper.
2. No CAPTCHA, login wall, or bot protection bypass. If a site requires it, work with what's publicly visible.
3. Public business contact channels only. Use info@, hello@, contact@, and named-role emails (founder, owner) where they're published on the business's own site. Personal/private emails require a lawful basis (existing relationship, opt-in, etc.).
4. GDPR / CAN-SPAM / CASL aware. Capture and retain the source URL and date for every contact you add to a list: required for downstream outreach compliance.
5. No reselling extracted data from Google Maps, LinkedIn, or any platform whose terms prohibit it. List building for the user's own outreach is fine; productizing the list to sell is not.
6. Rate limit yourself. Even on public sources, space requests. Don't fingerprint as a bot.
7. No breached, leaked, or unprovenanced data. Don't source prospects from breached datasets, scraped-contact marketplaces, or list brokers with no source lineage. Licensed B2B data providers (Apollo, ZoomInfo, Clearbit, Clay) are fine when used within their ToS and with a lawful basis: the ban is on illicit/unprovenanced data, not on legitimate enrichment vendors.
8. Never target or infer sensitive traits. Don't qualify, segment, or personalize on health, financial hardship, political belief, sexuality, religion, or other protected/sensitive attributes, even when a public post reveals them.

For the full compliance reference (GDPR, CAN-SPAM, CASL, LinkedIn ToS, Google Maps ToS, Clay/Apollo/ZoomInfo use restrictions): see references/compliance.md.