Lead list building

Apply ../00-lead-generation-guardrails/SKILL.md first. This skill builds the recipient list — the exact point where a non-compliant recipient set first gets created — so the compliance matrix must be resolved before running the search/export/verify chain below, never after a list already exists. "Build the list, then check compliance" is not a smaller version of this skill; it is the failure mode this skill exists to prevent.

What this skill assumes is already decided

This skill consumes skill 01's niche and ideal-customer-profile output where available: the ICP band, the specific niche, and the jurisdiction(s) that niche's businesses sit in. If no niche/ICP has been selected yet, halt and run skill 01 first rather than guessing at filters here.

The same list-building mechanism below also serves source-material stage 9 (the client-onboarding-driven variant): when skill 08's intake populates this skill's filters from client-supplied answers instead of agency research, the chain — jurisdiction gate, contact_search, bulk_export, email_verification — runs identically. Only the origin of the filter values changes; the compliance gate is never skipped because the filters came from a client instead of agency research.

Data-provenance honesty (this skill's application of the guardrail)

Every contact record this skill produces must be traceable to a real, checkable source: a specific provider, a specific query/filter set, and a specific date the record was pulled or last verified. Never present a list, a row count, or a "verified" status as fact when it is actually an estimate, a stale pull, or an unverified guess — state the actual verification level (see each provider's capability.json) next to the data, the same honesty principle ../00-lead-generation-guardrails/SKILL.md applies pack-wide once its own provenance gate lands (see issue #3). A contact record with no traceable source and pull date is not a deliverable; it is a guess wearing a spreadsheet.

Step 0: resolve jurisdiction before touching the chain

Before calling any provider: