The Verification Stack
We do not "scrape" codes. We adjudicate them. Our system is designed around a principle borrowed from distributed systems: Byzantine Fault Tolerance (BFT) — the assumption that any single source may be lying, malfunctioning, or mistaken.
Truth emerges only when independent verification nodes converge.
Our verification stack has three layers, each operating independently, each producing evidence that feeds into the final verdict.
Layer 1: Automated Code Testing
We operate automated verification systems that simulate real checkout sessions across our merchant network. These are not scrapers. They are headless browsers that navigate to real merchant storefronts, add products to carts, apply codes, and capture the results — exactly as a human shopper would.
We run tens of thousands of automated tests every day across our merchant coverage.
Tiered Intelligence
Different merchants require different approaches. We deploy a tiered system that selects the most efficient verification method for each merchant:
Platform Adapters. Major e-commerce platforms share semi-standardized checkout structures. For these, we build deterministic adapters that know exactly where the promo field lives, how to read the cart response, and what success or failure looks like. This covers a large portion of online retail because thousands of merchants run on a handful of platforms.
Heuristic Pattern Matching. For merchants on custom or less common platforms, the system uses heuristics: scan the page for common checkout patterns, locate input fields near words like "promo" or "coupon," diff the page after application to detect price changes or error messages. This approach exploits the fact that while every checkout is different, most follow common UX conventions.
AI-Powered Navigation. For truly custom checkouts where heuristics fail, the system uses an LLM to read the page as a human would. The bot captures the checkout DOM and asks the model: "Where is the promo code input? What changed after application? What error appeared?" This agentic layer can navigate arbitrary checkout flows without pre-built adapters.
The tiering is what makes the system tractable. We are not building one universal bot. We pick the cheapest, most reliable method for each merchant and fall back to more expensive intelligence when needed.
The Test Pipeline
Each test follows a structured pipeline:
- Session Initialization. A headless browser launches targeting the merchant's storefront with realistic browser fingerprints.
- Product Discovery. The bot navigates to a product page and adds an item to cart.
- Cart Simulation. The bot navigates to checkout and locates the promo code input field.
- Code Application. The bot applies the code using multiple strategies — typing and pressing Enter, submitting forms, clicking adjacent buttons. Different merchants require different approaches.
- Result Validation. The bot parses the page for success or failure indicators — discount applied, error messages, or ambiguous states.
- Evidence Capture. A screenshot is taken as proof of outcome. The result is logged with full diagnostic metadata.
The Failure Taxonomy
When a test fails, we do not simply record "failed." We diagnose why:
| Failure Mode | Meaning | System Response |
|---|
| Bot detection | Cloudflare, CAPTCHA, or similar blocked access | Route to human verification |
| Authentication required | Account creation or login needed | Flag as restricted access |
| Checkout UI changed | Promo field not found in expected location | Alert for adapter update |
| Code expired | Merchant confirmed code is dead | Confidence drops to floor |
| Promotion condition | Code exists but has scope constraints | See honest disclosure below |
What We Verify and What We Don't
Here is something competitors will not tell you. We will.
A code can return a product condition message and we still recognize it as functional. Why? Because the code exists and the merchant accepted it — it just does not apply to the test cart. Our automated tests reliably answer "Does this code exist and function in the merchant's system?" They do not yet answer "Will it work for your specific cart?"
This is a known limitation. A code can display a healthy confidence score but fail for users with sale items. We are actively building contextual applicability modeling to address this gap — more on this in Part V. We mention it here because transparency about limitations is part of our architecture, not a weakness to hide.
There is a related limitation worth stating plainly: we verify existence, not arithmetic. Confirming that "20% off" actually produces a 20% discount on your specific cart total is harder than it sounds. Merchants calculate discounts differently, display results differently, and sometimes the numbers do not add up the way a customer expects. We catch existence and function. Arithmetic verification is an active area of development.
One more: merchants actively resist verification. Some merchants make automated testing deliberately difficult through bot detection, CAPTCHAs, dynamic checkout flows, and anti-automation defenses. We measure this resistance — both system friction (network latency, blocking) and UX friction (confusing flows, soft blocks). When verification is hard, that itself is a signal about a merchant's posture toward transparency. When automated testing is blocked entirely, the multi-layer architecture catches what bots cannot.
Layer 2: Human Verification Network
Bots can simulate checkouts, but they cannot reason about edge cases. For that, we maintain a global network of human verifiers — a community of tens of thousands of trained contributors producing millions of monthly verification actions.
This is not a contractor pool. It is a reputation economy. Contributors accumulate trust scores based on their verification accuracy over time. Their earnings and status depend on precision. Long-tenured, high-accuracy verifiers carry more weight in consensus than new or inconsistent ones.
The Consensus Protocol
Verifiers operate under blind voting — they cannot see each other's assessments until consensus is reached. This prevents herding behavior and ensures independent verification.
Negative Consensus (Invalidation). Multiple independent "No" votes within a short window are required to kill a code. This prevents a single bad actor or mistaken user from poisoning the database.
Positive Consensus (Validation). A single high-trust verifier with strong evidence (a valid screenshot showing the discount applied) can boost a code's confidence significantly. The threshold is lower for positive signals because false positives are self-correcting — users encountering dead codes will quickly submit negative votes.
Trust Weighting
Not all votes carry equal weight. Our system assigns trust tiers based on each verifier's historical accuracy, consistency, and tenure:
- Administrative verifiers have authoritative override capability
- High-trust contributors carry amplified weight based on proven track records
- Standard contributors carry baseline weight
- New or inconsistent contributors carry reduced weight
- Anonymous signals carry minimal weight
All verification submissions require screenshot proof. The screenshot must show the cart, the discount applied (or error message), and identifiable merchant branding. This evidence becomes part of the code's audit trail.
Structured Data Capture
Our internal verification team uses specialized tooling that transforms verification from subjective judgment into structured data capture. Rather than simply asking "did it work?", the tooling forensically parses the checkout DOM to capture full cart context — items, prices, subtotal, merchant response text. It packages this structured data into what we call a sensing event that feeds directly into the verification pipeline.
This transforms a subjective observation into auditable, machine-readable evidence. The system architecturally separates the witness (what was observed during code application) from the judge (the downstream system that computes truth from accumulated observations). Witnesses capture evidence. Judges issue verdicts. These roles never blur.
Layer 3: The Signal Fleet
When a real user with our browser extension successfully checks out, that is the gold standard signal. It is not a simulation — it is ground truth.
What We Capture:
Cart composition at moment of code application. Exact discount applied. Merchant response. Success or failure state. Timestamp and session metadata.
The Flywheel:
More users generate more real-time signal. Better signal produces more accurate confidence scores. More accurate scores build more trust. More trust attracts more users. Each rotation makes the moat deeper.
This is the moat that cannot be purchased. A competitor can build bots. They cannot conjure years of accumulated real-world transaction signal.
Three layers. Independent signals. Convergent verdicts. That is the machine. Now — how does it reach a conclusion?