Scope the critical flow, place manual work deliberately, and decide whether the product is ready for a first pilot.
A smaller feature list does not create a viable pilot. The product still needs to carry one customer from a realistic starting point to a result they can use.
Use this collection to define that critical flow, choose where manual work belongs, protect customer data and access, and prepare a first account for the test.
Draw the critical flow before you choose features
Write the shortest path from a customer's starting state to the outcome they came for. Name the input they provide, the transformation your product performs, the result they receive and the action they take with that result. If a step can disappear without breaking the outcome, it is outside the critical flow for this pilot.
Entry: the customer can start with the access, data and instructions they realistically have.
Core action: the product completes one coherent job without forcing the founder to explain missing steps in a call.
Result: the customer can recognise whether the output is usable, incomplete or wrong.
Recovery: bad input, failed processing and account problems lead somewhere clear.
Return: the customer knows what to do the next time the job occurs.
Scope rule
Protect the full loop before polishing any single screen. A narrow workflow that reaches a dependable result is more useful in a pilot than a wide product with gaps between its features.
Place the manual boundary on purpose
Manual work is acceptable when it helps you learn an uncertain step and the customer still receives the promised outcome. It becomes dangerous when it hides a reliability problem, creates an unspoken service obligation or cannot be performed within the pilot's expected pace.
Keep manual for now
One-off setup that reveals how customer data varies.
Review of an output whose quality rules are still being learned.
A small integration handoff that you can track and explain.
Support conversations that show where onboarding fails.
Resolve before the pilot
Security or permission steps handled differently each time.
Silent failures that only the founder can detect.
Core processing that depends on memory or late-night intervention.
Work the customer believes the product performs automatically.
Decide whether the product is ready for a pilot
A pilot does not require every edge case. It does require a named user, a defined job, safe access, a working critical flow, visible limits and a support route. Agree on what the pilot includes, what remains manual, how issues will be reported and what decision follows the test.
If an account is waiting, use “Write the pilot boundary in plain English” below. If the build has several competing paths, return to “Draw the critical flow before you choose features” on this page. If you are unsure what to automate, use “Place the manual boundary on purpose” above. The recoverable first-session article helps define the start, result and failure branch. The fictional security records expose missing recovery and access checks. If the reason to build is still uncertain, prepare a pre-build decision dossier.
Read fictional backup, restore, exposed-credential and access-log records to distinguish a completed job or deleted screenshot from a verified result.
Write the pilot boundary in plain English
Name the user, the job, the starting input, the promised result and the support window. List every manual step beside the person responsible for it. Then state what the pilot will not do. If you cannot describe the boundary without giving a product tour, the critical flow is still too hard to see.
Hypothetical pilot boundary; not a launched product or a PBT service commitment: a pilot user submits one sample CSV with fictional data for validation, manual review and export of approved rows. In this example, the pilot owner reviews flagged rows and handles recovery. Support is limited to one agreed review session on a weekday. Live customer data, integrations and reminder sending are excluded. Invalid rows or a failed job stop the export; the operator records the issue and restarts from the original sample only after checking the correction. No reminder is sent.
Run the flow once with realistic data.
Test how the product handles bad input or a failed job.