# XPRIZE Evidence Plan

AI App Exposure Desk is designed for the Build with Gemini XPRIZE submission window that opened on May 19, 2026 and closes on August 17, 2026.

Official requirements tracked in this plan:

- New work after May 19, 2026.
- Use at least one Google Cloud product.
- Use Gemini API for at least one LLM call in the deployed product.
- Provide repository access for judging.
- Provide a public product URL or working demo.
- Provide a demo video under three minutes.
- Track revenue, monthly revenue, costs, marketing/customer acquisition spend, users, related-party revenue, customer feedback, and product-running evidence.

## Product Category

Preferred category: Small Business Services.

## Runtime Architecture

Cloudflare is the product runtime and storage layer:

- Workers for the agent API, scheduler, queue consumer, reply webhook, and operator dashboard.
- D1 for leads, findings, outreach messages, replies, tasks, audit events, and metrics.
- R2 for scan artifacts and inbound reply payloads.
- Queues for asynchronous lead triage.

Google Cloud is used for:

- Cloud Run discovery trigger.
- Cloud Scheduler recurring trigger.
- Cloud Logging run evidence.
- Secret Manager for the shared trigger secret where deployed.
- Gemini API for lead risk classification, outreach drafting, reply triage, and evidence summaries.

## Gemini Usage

Default production model: `gemini-3.5-flash`.

Gemini is used for:

- Structured risk classification from redacted scanner facts.
- Outreach draft generation.
- Reply classification and next-step routing.
- Paid report drafting.
- XPRIZE evidence summaries.

Deterministic scanners remain the source of factual findings. Gemini does not invent findings.

## Monthly Evidence

Runtime evidence is grouped by month in D1 metrics/audit tables and backed by Cloudflare R2 artifacts plus Google Cloud logs.

Each month should retain:

- Leads discovered.
- Leads triaged.
- Qualified public exposure signals.
- Outreach drafts and sent messages.
- Replies classified.
- Paid reviews.
- Revenue and monthly revenue.
- Costs excluding marketing.
- Marketing/customer acquisition spend.
- Customers and customer breakdown.
- Feedback and testimonials with sharing awareness.
- Gemini calls.
- Google Cloud usage.
- Reports generated.
- Demo artifacts.

## Demo Evidence

Capture:

- Cloud Run trigger call.
- Cloudflare Worker discovery run.
- Queue triage event.
- D1 lead/finding/outreach rows.
- R2 scan artifact.
- Gemini API usage evidence.
- Reply webhook triage.
- Operator dashboard.