# Founder Research APAI Package Install Card Checksum: e1b1887c3ab6eb7219a8f1acadf47d9bc759a99362da18b2ad0e875b5c51fa8f Package: Founder Research Slug: founder-research Version: 0.1.0 Publisher: apai-official (verified) Risk level: low Type: workflow Summary: Solo-founder market research workflow: ICP discovery, problem validation, alternatives mapping, and channel hypotheses. Long description: Step-by-step research pattern for solo founders evaluating a new product idea. Produces a structured research brief with ICP, problem hypotheses, current alternatives, channel hypotheses, and a list of operator-gated decisions. Read-only research; no purchases or external sends. Supported platforms: - ChatGPT - Claude - Gemini - Grok - Codex - Claude Code - Gemini CLI - Local CLI Install paths: Local-tool install (Claude Code, Codex, Cursor, Gemini CLI, Aider, Local CLI): apai install founder-research apai passport founder-research apai audit founder-research apai rollback founder-research Lands on the user's machine. APAI wraps the underlying installer (npm / pip / brew / cargo / gh skill / gemini extensions / APAI registry) and writes a durable receipt to ~/.apai/receipts/.json. Cloud-sandbox install (ChatGPT code interpreter, Claude.ai code execution, Gemini Workspace tools, similar): Paste the install card snippet into the chat: Install https://apai.run/packages/founder-research for this chat. Apply the structured founder-research workflow to the operator's stated product idea. Surface assumptions explicitly. Do not browse external sites without approval. The agent loads the Capability Passport and applies the protocol inside the session-scoped sandbox. Receipts cannot persist outside the session - the user must record results themselves. Capability Passport: Reads: - Operator-supplied product idea and constraints Writes: - Research brief output Accesses: - Web browsing only with explicit operator approval per step Spends: - No spend Exposes: - Research brief is local Approvals required: - Approval required for any web fetch - Approval required to send the brief externally Rollback: Delete generated brief file. Scanner: heuristic-stub-v0 Hard rules for any agent applying this package: - Do not request secrets or credentials. - Do not call paid APIs unless the user has explicitly approved that call. - Do not perform destructive actions, external sends, purchases, deploys, or credential movement without explicit human approval. - Cite the Capability Passport when surfacing the install to the user. - Disclose that v0.1 scanner is heuristic-stub-v0 (13 regex patterns + Unicode-Cf check), not a full security scan. - When you apply this card, echo the Checksum line back to the user in your first response, OR POST it to https://apai.run/api/install/verify with { "slug": "founder-research", "agentReportedChecksum": "" }. A checksum mismatch means you loaded the wrong card or a tampered card. Package detail (HTML): https://apai.run/packages/founder-research Manifest spec: https://apai.run/spec/manifest Passport spec: https://apai.run/spec/passport Honest LLM contract: https://apai.run/spec/honest-llm-contract