What changed
FACT (per cited signals): Meta's @-mention image generation lets anyone generate AI images from a person's/business's public Instagram photos without per-use consent (Reddit r/smallbusiness thread); Gemma 4 12B provides cheap local multimodal image understanding; Fortress ships an MCP stealth browser that evades bot detection on sites like Instagram.
Why now
The exposure (Meta @-mention generation) is new and being discussed by small-business owners now; local likeness-matching just became near-free (Gemma 4 12B); and agent access to bot-blocked Instagram just became packaged (Fortress MCP). HYPOTHESIS: the outrage window is temporary — Meta will likely ship native visibility/controls, which would gut the product.
Converging signals
1) Platform exposure: Meta @-mention AI generation from public IG photos (reddit.com/r/smallbusiness). 2) Access: stealth Chromium + MCP (tilion.dev, HN 48854467) enables automated Instagram scanning despite anti-bot measures. 3) Cheap inference: Gemma 4 12B open multimodal model for local face/brand likeness matching (deepmind.google).
Customer pain
FACT: at least one visible r/smallbusiness complaint thread about IG photos becoming AI training/generation material by default. HYPOTHESIS: creators and SMBs feel exposed and would want alerts + guided opt-out. NOTE: no demand_evidence array was provided in the input — there is no HIRING/SPEND evidence and no FORCED BUYER mandate. Pain here is anxiety/outrage, not a budgeted line item or legal obligation.
Who pays
HYPOTHESIS: creators, influencers, boutique agencies, and image-conscious small businesses (photographers, salons, coaches). No evidence in the input that any of them currently pay for this; the proven payers for likeness/brand protection today are celebrities and enterprises (Loti, Doppel, BrandShield) — a different buyer than a solo founder can reach without those signals.
Solved today
Manual: owners toggle Meta AI settings themselves (free), occasionally search their own name, and file reports to Meta. Enterprise/celebrity tier: Loti, Doppel, Red Points, BrandShield do likeness and brand-abuse monitoring. Creator tier: DMCA-takedown services (Rulta, Ceartas) handle adjacent stolen-content pain.
Why current solutions are bad
Opt-out settings are confusing and shift as Meta iterates; individuals have no way to know when their likeness has been generated. But 'bad' ≠ 'paid': the opt-out is a one-time 10-minute fix, which supports a one-off audit product more than recurring monitoring SaaS.
Proposed product
A likeness-exposure audit + monitor: client connects/name-drops their IG handle → system captures reference photos, periodically scans Meta AI surfaces and IG for AI-generated lookalikes via local Gemma matching, alerts on hits, and provides a guided, always-current opt-out/settings checklist. Entry product: a one-time $29–49 'AI Exposure Audit' report; upsell $10–19/mo monitoring.
MVP version
1-2 weeks: a landing page + manual-behind-the-curtain audit. Scripted stealth-browser capture of the client's public grid, Gemma 4 12B similarity matching against a sample of Meta AI-surface outputs, and a PDF report with screenshots + step-by-step opt-out instructions. No dashboard, no automation polish.
30-day build
Ship the audit report product; post genuinely useful free content ('exact steps to opt your business out of Meta AI', with screenshots) into r/smallbusiness, r/Instagram, creator Discords; run 10 free audits for testimonials; validate that anyone pays before building monitoring.
60-day build
If ≥20 paid audits: automate the scan pipeline (queue + scheduled MCP browser runs + Gemma matcher), add email alerts, convert audit buyers to monthly monitoring. If <20 paid audits: kill — the pain was outrage, not budget.
90-day revenue plan
HYPOTHESIS: 50-100 audits at $39 plus 20-40 monitors at $15/mo ≈ $2.5k-5k cumulative — only if conversion from free content is real. There is no evidence-based floor here because no spend evidence was provided.
Distribution path
Complaint-mining and content: answer the exact threads where this outrage lives (Reddit, X, creator FB groups) with a free settings guide gated by the paid audit. No enterprise sales. Risk: this is a one-spike outrage topic; distribution decays as news cycle moves on.
Pricing hypothesis
$29-49 one-time exposure audit; $10-19/mo monitoring; $99 'agency pack' for social-media managers auditing 10 client accounts (the most plausible actual payer, since they can bill it through).
Technical difficulty
Moderate but fragile: Gemma likeness matching is genuinely feasible locally (FACT re: model availability; HYPOTHESIS re: accuracy on stylized AI images — false positives/negatives on AI-generated faces are a known hard problem). The fragile part is sustained stealth scraping of Instagram: account bans, IP blocks, layout changes, and an arms race Meta is motivated to win.
Legal / regulatory risk
Real: automated scraping via anti-bot evasion violates Meta ToS (civil risk, account termination; CFAA exposure is contested but nonzero for logged-in scraping). Also, storing and matching customers' facial data triggers biometric-privacy laws (BIPA in Illinois, GDPR biometric rules) — 'heavy compliance' territory the founder explicitly avoids.
Platform dependency
Extreme — the product exists only inside Meta's walls, its data access violates Meta's rules, and Meta can neutralize it either by blocking scraping or by shipping native 'see how AI used your photos' controls. This is the single strongest kill factor.
Founder fit
LOW for Charles despite the AI-workflow overlap. This is not the proven ELDT shape: there is NO regulation compelling anyone to file anything, no government portal, no per-filing wedge — the 'compliance' is voluntary settings hygiene on a hostile private platform. It is a consumer-ish social-media-adjacent SaaS with platform-policy risk and biometric-data handling, all on his explicit avoid list.
Breakout potential
If AI-likeness rules become law (e.g., state likeness statutes with disclosure duties), a monitoring layer could ride a genuine mandate. HYPOTHESIS only — no such mandate is in the provided signals. Watch for regulation; that would convert this from outrage-ware into his proven forced-filer shape.
Final recommendation
KILL as a monitoring SaaS. The only defensible slice is a near-zero-build one-time 'Meta AI opt-out audit' info-product/service to test whether outrage converts to dollars (cap effort at 2 weeks and ~$0 spend). Do not build the scraping/monitoring pipeline: ToS-violating access, biometric-data compliance, total Meta dependency, and absent spend evidence make recurring revenue implausible. Redirect energy toward mandate-shaped opportunities matching the proven ELDT pattern.
Next action
Spend one afternoon posting a free, screenshot-level 'opt your business out of Meta AI' guide into the cited r/smallbusiness thread and two similar threads with a $39 done-for-you audit offer; if fewer than 5 paid conversions in 14 days, close the file.