Direct Answer
Cody Schneider demonstrates two useful marketing-agent patterns: use a fresh intent signal to prioritize outbound research, and turn approved internal conversations into a recurring organic content loop. The architecture is stronger than the headline. Deterministic code collects and cleans data; an LLM makes narrow judgment calls; a person controls contact, publication, and commitments; results return as structured evidence for the next run.
The first demo also exposes a serious implementation gap. Its source signal comes from scraping LinkedIn reactions and comments, then enriching those profiles and automating email and LinkedIn messages. LinkedIn's current agreement prohibits scraping and unauthorized automated messaging. Purchased contact data does not automatically establish consent or another lawful basis. The responsible build therefore keeps the signal idea but changes the default sources and permissions.
Watch the Full Episode
Video and framework credit: Greg Isenberg and the Startup Ideas Podcast; guest Cody Schneider. Follow Cody on X. This article uses the supplied transcript as the demonstration record and independently checks current product pages, platform terms, and official regulatory guidance as of 6 August 2026. It is operational guidance, not legal advice.
The Two Agents at a Glance
| System | Input | Judgment | Output | Primary risk |
|---|---|---|---|---|
| Signal outbound | Recent category interest plus an approved prospect source | ICP fit, relevance, reply intent | Reviewed contact brief, draft message, CRM task | Platform terms, privacy, unwanted contact, deliverability |
| Organic content | Approved calls, interviews, notes, and transcripts | Insight extraction, angle selection, adaptation to author voice | Reviewed post, scheduled publication, performance memory | Confidentiality, invented claims, employee impersonation |
They share the same control pattern: source, normalize, decide, draft, review, act, measure, learn. The difference is what leaves the system. Outbound creates a private contact decision. Organic creates a public statement attributed to a person. Both need provenance and approval.
Agent Versus Automation: Put the Model Only Where Judgment Lives
Cody's cleanest technical point is that an agent can be ordinary code running on a schedule with an LLM attached only where interpretation is needed. There is no benefit in asking a model to do a deterministic job badly.
| Stage | Use code or rules for | Use an LLM for |
|---|---|---|
| Collection | Approved API calls, timestamps, rate limits, source receipts | Nothing unless a document needs semantic extraction |
| Data quality | Schema checks, deduplication, validation, suppression, retention | Explaining ambiguous records for review |
| Qualification | Hard exclusions, geography, role, company-size rules | Evidence-based fit score and reason |
| Drafting | Required disclosures, footer, opt-out, field limits | Relevant first draft grounded in approved evidence |
| Action | Permissions, daily caps, idempotency, audit log | Recommend an allowed action, not bypass the policy |
| Learning | Event joins, metrics, experiment IDs | Summarize patterns and propose the next test |
Agent One: What the Signal-Based Outbound Demo Actually Does
The episode begins from a sensible observation: a recent like or comment on a relevant category post can reveal more current interest than static firmographics. Cody recommends monitoring roughly 10 to 20 creators or company pages in a category, which he describes as enough to cover much of its visible conversation. Treat that as his practitioner estimate, not a published market benchmark.
In the live workflow, API Maestro actors on Apify retrieve posts, reactions, and comments. A Claude Code script accepts a post URL, collects the records, and deduplicates public profile URLs. The demonstration returns 63 raw engagers from one post. Those URLs then enter a waterfall of enrichment providers, email verification, a sending platform, and an agent that interprets replies.
Creator or company post
-> reactions and comments actor
-> deduplicate profile records
-> ICP fit check
-> email / phone enrichment waterfall
-> email verification
-> cold email + automated LinkedIn DM
-> reply agent
-> meeting
This is a useful description of the demo, not a recommended production default. Apify labels the reactions actor as community-maintained. Technical access, public visibility, and a purchasable API are not the same as platform authorization, lawful processing, or permission to contact someone.
Where the Demonstrated Pipeline Crosses a Line
| Claim or action | What the current source says | Operational decision |
|---|---|---|
| Scrape LinkedIn profiles, reactions, or comments | LinkedIn User Agreement section 8.2 prohibits software, scripts, robots, and similar methods used to scrape or copy profiles and other data. | Do not make scraped LinkedIn engagement the default source. |
| Automate LinkedIn DMs or engagement | The same agreement prohibits bots or unauthorized automated methods used to send messages and create engagement. | Use native/manual outreach or an explicitly approved LinkedIn product and current permission scope. |
| Buy a work email and add it to a newsletter | Data availability does not create consent or purpose compatibility. UK guidance says GDPR still applies to personal data in B2B marketing, while electronic-marketing rules vary by subscriber type and jurisdiction. | Keep newsletter enrollment opt-in. Document source, purpose, lawful basis, notice, objection, and retention for any prospecting data. |
| Rely on CAN-SPAM as permission | FTC guidance applies to commercial email, including B2B, and requires truthful identity, non-deceptive subjects, a postal address, opt-out, timely suppression, and vendor oversight. | Treat CAN-SPAM as a US compliance floor, not global consent or a quality standard. |
| Enrich mobile numbers and automate contact | US telephone and robotext rules can require prior express written consent for marketing to wireless numbers, with additional state and international rules. | Exclude mobile outreach from the default build. Add it only after channel-specific legal review and documented consent. |
A Safer Signal-Based Outbound Architecture
Start from signals the business owns or is clearly authorized to use: a demo request, webinar registration with a disclosed follow-up purpose, newsletter reply, product-qualified event, event attendee list with appropriate notice, referral, inbound conversation, or a CRM record with a documented source. Public social activity can inform manual account research without becoming an automated contact list.
Approved first-party signal
-> source receipt + purpose + jurisdiction
-> suppression and previous-contact check
-> deterministic ICP exclusions
-> LLM fit score with cited evidence
-> optional minimum-data enrichment
-> verification and confidence labels
-> draft one relevant message
-> human review and send decision
-> reply classification
-> automatic opt-out suppression
-> human-owned next step
-> outcome written back to CRM
| Gate | Required evidence | Stop condition |
|---|---|---|
| Source | Where the record came from, when, and for what disclosed purpose | Unknown, prohibited, or incompatible source |
| Relevance | One current problem or intent signal tied to the offer | Only generic industry fit |
| Permission | Jurisdiction and channel rule recorded; counsel-approved policy where needed | Unresolved legal or platform basis |
| Suppression | No unsubscribe, objection, complaint, customer exclusion, or active thread | Any suppression match |
| Message | Accurate identity, evidence-backed relevance, no fabricated personalization | Unverifiable claim or sensitive inference |
| Send | Named reviewer, approved channel, daily cap, complete audit record | No owner or cap exceeded |
Waterfall Enrichment: Useful Mechanics, Narrow Data
Cody's proposed sequence moves from cheaper providers to more expensive fallbacks: GitLeads first, Apollo second, then Origami or Prospeo. LeadMagic appears as an additional mobile-number source, and MillionVerifier checks email status. In his illustrative walkthrough, 50 profile URLs produce 32 emails at the first step, 10 more at the second, and the remainder continue down the waterfall. That is an example calculation, not a measured coverage benchmark.
| Stage | Purpose | Control to add |
|---|---|---|
| Provider 1 | Try the lowest-cost approved source | Store provider, timestamp, confidence, and permitted use |
| Provider 2+ | Fill only the fields still required | Stop after the minimum useful data; do not enrich by default |
| Verification | Estimate deliverability and catch-all risk | Do not translate "valid" into "permitted" |
| Normalization | Deduplicate person, company, and active conversations | Use stable IDs and a cross-channel suppression table |
| Retention | Keep only what is needed for the documented purpose | Expiry date, deletion job, access log, correction process |
Phone enrichment should be a separate, disabled-by-default branch. It raises a different consent and intrusion profile than a business email and should not run simply because another provider returned no address.
The $200 per Month Figure Is Infrastructure, Not Unit Economics
Cody estimates roughly $100 per month for dedicated sending infrastructure capable of around 10,000 emails, plus Instantly's roughly $97 plan: about $200 per month. That is a creator-reported snapshot of one configuration. It excludes several costs that determine whether the system is economically or reputationally sensible.
| Cost layer | Included in the headline? | What to measure |
|---|---|---|
| Sending platform and inbox infrastructure | Mostly | Monthly platform, domains, mailboxes, placement tests |
| Source collection and enrichment | No | Cost per approved, usable record |
| Verification and data cleanup | No | Cost per non-suppressed, deliverable address |
| LLM and workflow execution | No | Cost per reviewed draft and classified reply |
| Human research and approval | No | Minutes per accepted contact and response |
| Privacy, legal, security, and vendor review | No | Policy ownership and recurring audit cost |
| Reputation and opportunity cost | No | Complaints, blocks, negative replies, lost relationships |
Do not optimize for emails sent. Report cost per accepted prospect, qualified conversation, meeting held, opportunity created, and customer won, alongside objection, complaint, bounce, and suppression rates. A cheap system that creates distrust is expensive.
A Reply Agent Should Draft, Classify, and Stop
| May do automatically | Requires human approval | Must suppress or escalate |
|---|---|---|
| Classify positive, neutral, objection, referral, out-of-office, unsubscribe | Send an external response | Unsubscribe, stop, not interested, complaint |
| Draft a short response from approved facts | Commit price, timeline, scope, refund, or legal position | Sensitive data, threat, regulator, journalist, legal request |
| Suggest the next CRM stage and owner | Book a meeting or add another person | Wrong person, deceased person, protected or vulnerable context |
| Apply an approved suppression rule immediately | Override suppression or contact through another channel | Ambiguous intent below the confidence threshold |
Every classification should preserve the original message, model version, chosen label, confidence, policy result, and reviewer correction. Those corrections become the evaluation set. Raw reply volume is not the learning loop; reviewed decisions are.
Agent Two: The Organic LinkedIn Content Engine
The second architecture is more durable. Cody starts from conversations that already contain real expertise: weekly employee interviews, sales calls, podcast transcripts, approved Slack discussions, Notion documents, or a codebase. The system extracts specific observations, drafts posts for each team member, sends them through an approval workflow, schedules them in Ordinal, and reads performance back.
Approved conversation or transcript
-> source ownership and consent check
-> redact confidential and personal data
-> extract claims, examples, and quotable insights
-> preserve evidence links and speaker identity
-> propose angles for the right author
-> draft in that author's reviewed voice
-> factual, legal, and brand review
-> author approval
-> authorized scheduler or native publish
-> post-level analytics + qualified conversations
-> reviewed learning memory
-> next topic or responsible remix
Ordinal currently documents account authorization, scheduling, approvals, and analytics for personal and company LinkedIn profiles. LinkedIn also exposes official post APIs, although some marketing permissions are restricted to approved users. Use the permissioned path supported by the current account and provider; do not assume every automation feature is allowed forever.
Cody describes recycling winning ideas on roughly a 90-day cadence. That can work when the insight remains accurate and the new version adds context. Blindly reposting the same claim is not a learning system. Store why the original worked, what changed, and which audience response justified the adaptation.
The Organic Agent Needs a Source Policy, Not Just a Style Prompt
| Control | Minimum rule | Failure it prevents |
|---|---|---|
| Approved source list | Name the channels, projects, calls, and owners the system may read | Turning private work into training or marketing material without permission |
| Participant awareness | Explain recording, transcription, reuse, retention, and opt-out | Surprise publication and trust loss |
| Redaction | Remove customer identifiers, credentials, contracts, private HR, health, and financial data | Confidentiality and privacy breach |
| Claim provenance | Link every number, quotation, result, and product claim to its source | Confident fabrication |
| Author approval | The named person approves the final text and media | Employee impersonation |
| Learning memory | Store approved themes and reviewer corrections, not unrestricted raw conversations | Permanent sensitive-data accumulation |
| Performance review | Measure qualified replies, profile visits, assisted pipeline, and corrections | Optimizing for outrage or empty reach |
Cody provocatively says the social media manager is dead. A better conclusion is that the role moves upward. Source governance, editorial taste, claim review, author coaching, channel judgment, and learning design matter more when drafting becomes cheap.
A 14-Day Pilot for Both Systems
Days 1-3: define sources and permissions
- Choose one owned signal source for outbound and one approved transcript source for organic content.
- Write the allowed purpose, jurisdiction, retention period, owners, approval points, and stop conditions.
- Create one suppression table shared across every outbound channel.
Days 4-6: run read-only
- Have the outbound system produce five prospect briefs without contact or phone enrichment.
- Have the content system extract five candidate insights with source quotations and confidentiality labels.
- Score factual accuracy, relevance, source quality, privacy, and reviewer time.
Days 7-10: permit drafting
- Draft at most one message for each accepted prospect; do not send automatically.
- Draft one post for each participating author; require tracked edits and explicit approval.
- Turn reviewer corrections into a small evaluation set.
Days 11-14: run a bounded live test
- Use a tiny, counsel- and policy-approved outbound sample with named human sends.
- Publish one approved post through a current authorized path.
- Review qualified conversations, corrections, objections, suppressions, publication time, and any negative signal.
- Expand only the stage that met its acceptance threshold without a control failure.
Copy-Ready Operating Contracts
Signal-based prospecting contract
Objective:
Prioritize a small set of relevant, approved prospects for human review.
Allowed sources:
[first-party form, CRM, event, referral, product event]
Required fields:
source, date, disclosed purpose, jurisdiction, company, role,
relevance evidence, suppression result, confidence, reviewer
Model tasks:
1. Score fit only from supplied evidence.
2. Cite the evidence for every score.
3. Draft one message only after the record passes all gates.
4. Mark unknowns; never infer sensitive traits or fabricate context.
Disallowed actions:
Scrape platform data, automate social messages, enrich mobile numbers,
add anyone to a newsletter, bypass suppression, or send externally.
Success:
Accepted prospect briefs and qualified human-approved conversations,
with zero unresolved source, suppression, or identity failures.
Source-backed content contract
Objective:
Turn approved expert material into reviewable posts without impersonation.
Allowed sources:
[named calls, transcripts, documents, channels, owners]
Before drafting:
1. Confirm the source is approved for marketing reuse.
2. Redact private, customer, credential, HR, health, and financial data.
3. Extract claims with source locations and confidence.
Draft rules:
- Preserve the author's actual point of view.
- Do not invent stories, numbers, quotes, or customer outcomes.
- Label uncertain claims for review.
- Use one clear idea and one evidence-backed example.
Publication rule:
The named author must approve the final copy and media.
Learning rule:
Store reviewer corrections, approved themes, and post outcomes.
Do not retain unrestricted raw conversations as a permanent memory.
Video Chapters
| Time | Topic |
|---|---|
| 00:00 | Marketing agent overview |
| 02:27 | Agent one: cold outbound |
| 04:26 | Finding category creators on LinkedIn |
| 09:09 | Apify and API Maestro actors |
| 10:59 | Extracting engagers in Claude Code |
| 12:59 | Agent versus automation |
| 15:45 | GitLeads, Apollo, Origami, and Prospeo waterfall |
| 17:13 | Compliance and data-broker claims |
| 21:40 | MillionVerifier and LeadMagic |
| 25:38 | Sending infrastructure and costs |
| 28:33 | Software factories and marketing as code |
| 31:41 | Agent two: organic LinkedIn content |
| 39:34 | Earned media and distribution |
| 42:31 | Closing thoughts |
Bottom Line
The episode's strongest idea is not "send more." It is marketing as a measured software system: fresh evidence enters, deterministic stages keep it clean, the model makes bounded judgments, a person controls consequential action, and outcomes return as memory.
For outbound, replace scraped engagement and automated multichannel contact with authorized signals, minimum-data enrichment, suppression, and human sends. For organic content, protect the source material, prove every claim, preserve the author's agency, and learn from qualified response rather than vanity reach. Those changes make the agents less theatrical and far more usable.
Sources and Tool Map
- These AI Marketing Agents Get You Customers - original Greg Isenberg and Cody Schneider episode.
- API Maestro on Apify and its LinkedIn reactions actor - the collection layer shown in the demo; actor listing is community-maintained.
- LinkedIn User Agreement - current prohibitions covering scraping, unauthorized bots, automated messages, and engagement.
- LinkedIn Share on LinkedIn documentation - official OAuth publishing path for supported applications.
- FTC CAN-SPAM compliance guide - requirements for US commercial email, including B2B.
- ICO B2B marketing guidance - UK GDPR and PECR boundaries for business marketing.
- FCC consent guidance for automated calls and texts - a useful US starting point for the higher-risk mobile branch; obtain channel-specific advice for the actual campaign.
- LeadMagic and MillionVerifier - enrichment and email-verification tools mentioned in the episode.
- Instantly documentation - sending, warm-up, lead, and agent functions mentioned in the infrastructure discussion.
- Ordinal for LinkedIn and its account-connection guide - approvals, scheduling, and analytics for the organic agent.
- JQ AI SYSTEMS: How to Build a Marketing Agent That Learns From Revenue - Cody's paid-media feedback-loop architecture.
- JQ AI SYSTEMS: Claude Code + Clay Lead Generation - a related reviewed-outreach workflow with waterfall, cost, and compliance controls.