The cloud maintainer opens PRs on other people's repos — the one surface a stranger actually sees. It just opened its first one, end-to-end. So every PR carries a footer: a human-merge attestation, and an invite. See the fix, want one, onboard in three commands, and now your team's PRs recruit the next. The loop closes itself.
A benchmark reaches the people who read benchmarks. A proven PR on your own repo reaches every teammate and every drive-by who opens it. That reach is the growth engine — so the PR footer is the front door.
A dev sees the bot's proven PR on their repo. The footer invites them. They onboard in three commands with their own Claude sub and GitHub App. Now the maintainer opens PRs on their repo — each one carrying the same footer to the next team. No shared keys to hand out; the loop scales itself.
Benchmarks are tired. A screenshot of a gate saying no is not. Every card below is emitted by a real Heimdall run — the moment the watchman blocks a placeholder, slams the bridge shut, kills a mutant, or trims the fat. Post the receipt, not the claim.
--no-verify can't reopen it.
Seven plays, each mapped to a concrete Heimdall move. The through-line: Heimdall generates the shareable asset for free — every run is a receipt.
YC play: more launches = more eyeballs. Ship on every platform, at least 3×.
Launch on Product Hunt, Hacker News, Peerlist, Indie Hackers, Devhunt, BetaList — minimum 3× each. Lead every listing with the BIFRÖST CLOSED deny-clip, not a feature list.
YC play: get listed everywhere your competitors are listed — then make a better listing.
Get Heimdall into every directory that lists Cursor, Copilot, and Claude Code tooling — AI-dev roundups, awesome-lists, tool comparisons. The angle they can't match: a verification layer with a published proof.
YC play: capture the 99% who saw the content but never came inbound.
Scrape the engagers on each viral receipt post, ICP-fit check (ships AI-written code, feels the trust gap), then a personal message — reference the exact post they liked. Automate the pipeline, keep the message human.
YC play: a bench of creators making native, in-feed clips.
Sign 20–30 dev-tool UGC creators on TikTok / X at $15–30 a clip plus performance incentives. The brief writes itself: dare your agent to cheat, film Heimdall catching it.
YC play: video out-performs image and text roughly 10×.
The hero video is the kill clip: "I dared Claude to fake it → Heimdall blocked it → BIFRÖST CLOSED." Cut use-case shorts on top and post them across X and LinkedIn.
YC play: go to the rooms your customers already sit in.
AI-coding Slack / Discord communities, dev newsletters, podcasts, r/LocalLLaMA, and paid shoutouts. Show, don't pitch — drop a receipt when it's on-topic.
YC play: attach to whatever is already moving this week.
Track the weekly X AI-coding trend and fold Heimdall in. Quote-tweet the viral "is AI coding even real / it hallucinated again" posts with a receipt — the reply is the demo.
Framework adapted from YC's first-100 playbook — mapped to what a verification tool can uniquely do.