# zicula-social-proof-kit — free sample

Three real files from the full kit (21 files), each **trimmed to taste** — enough
to judge the quality, not enough to launch:

- `playbook-14d-excerpt.md` — Days 1–6 of the 14-day rollout playbook
  (`PLAYBOOK-14D.md`), complete: pipeline live, display policy, placement +
  pace, and the conversion baseline. Every day keeps its done-when criterion.
  Days 7–14 (the evidence page, the second source, the load check, the
  going-forward cadence) and the agency setup-service section are summarized
  at the end so you know what the full playbook adds.
- `compliance-ftc-excerpt.md` — from `COMPLIANCE-2026.md`: the complete US
  section — FTC 16 CFR Part 465, the rule that makes fake activity popups a
  legal risk, with the primary-source link — plus self-audit checks 1–4 of 10.
  The EU Omnibus and EmpCo sections, the architecture map, the copy-paste
  disclosure text and checks 5–10 stay in the full kit.
- `widget-excerpt.js` — the trusted core of the 15 KB embed widget
  (`widget/social-proof.js`): the data-* config contract, 2 of the 7 UI
  languages, the HTML escaper and honest-timestamp helpers, and the feed
  sanitizer that refuses malformed events. The popup renderer, Shadow-DOM CSS,
  pacing and auto-init are annotated in place, not included.

What the full kit adds (the other 18 files):

- Product code: the complete widget (7 UI languages, Shadow-DOM isolation,
  4 corners, light/dark themes, pace + count caps, per-session dismiss memory),
  the single-file feed worker (Shopify + Stripe HMAC-verified webhook
  receivers → D1 audit log → public JSON feed + audit API) and the zero-request
  config/audit dashboard. No dependencies, no build step, no `Math.random`
  anywhere.
- Worker config: `wrangler.jsonc` bindings (D1, SITE_CONFIG, MASTER_TOKEN) and
  the one-table `schema.sql` whose UNIQUE dedupe key makes webhook replays
  harmless.
- Integrations: step-by-step Shopify and Stripe webhook setup guides (secret
  flow, curl tests, event mapping) and the drop-in Shopify theme snippet with
  settings for feed URL, language, position and pace.
- Knowledge: `SETUP.md` (zero → first verified popup in ~30 minutes, with a
  troubleshooting table), the complete `COMPLIANCE-2026.md` (FTC 16 CFR 465 +
  EU Omnibus + EmpCo + dark-pattern guidance + the 10-point self-audit + the
  disclosure paragraph), `CUSTOMIZE.md` (every widget option and the privacy
  mapping), and the full 14-day playbook with the agency setup-service framing.
- Commercial: `pitch-and-pricing.md` (per-visitor SaaS comparison + agency
  pitches), `LICENSE.txt`, and the start-here README-buyer.

One-time purchase $39 · free updates for v1.x · 30-day full refund.