The 4th Digital Layer — Connect, Don't Compete
There are 3 digital layers: infrastructure, platforms, and tools.
Panda Factory IS the 4th layer — the one that CONNECTS them all.
Your tools stay the same. Panda operates behind the scenes via MCP Brain.
One SDK. Every layer. Zero infrastructure cost until you sell.
▶ Try Now • MCP Interactivity • Architecture • Thesis • Monetization • SDK • Roadmap • Contact
🔑 Demo:
user@panda.com/user(full MVP experience)
╔══════════════════════════════════════════════════════════════════════════╗
║ ║
║ LAYER 1 — INFRASTRUCTURE ║
║ AWS, GCP, Azure, Firebase, Cloudflare ║
║ They sell: compute, storage, network ║
║ Revenue: pay-per-use (CPU hours, bandwidth, storage) ║
║ ║
╠══════════════════════════════════════════════════════════════════════════╣
║ ║
║ LAYER 2 — PLATFORMS (Commerce + Distribution) ║
║ Hotmart, Kiwify, Shopify, Stripe, App Store, Steam ║
║ They sell: checkout, marketplace, payment rails ║
║ Revenue: transaction fee (% per sale) ║
║ ║
╠══════════════════════════════════════════════════════════════════════════╣
║ ║
║ LAYER 3 — TOOLS (SaaS Productivity) ║
║ ChatGPT, Canva, Notion, Zapier, Figma ║
║ They sell: individual productivity subscriptions ║
║ Revenue: seat-based SaaS ($XX/mo/user) ║
║ ║
╠══════════════════════════════════════════════════════════════════════════╣
║ ║
║ ★ LAYER 4 — THE FACTORY 🐼 ← PANDA FACTORY ║
║ Orchestration + Packaging + Distribution + Economy ║
║ We sell: the ABILITY to create, package, and monetize ║
║ using ALL layers below, without owning any of them ║
║ Revenue: co-production split (% per product sold) ║
║ Unique: we don't compete with L1-L3, we COMPOSE them ║
║ ║
╚══════════════════════════════════════════════════════════════════════════╝
| Criterion | Status | Evidence |
|---|---|---|
| Abstraction — hides lower-layer complexity | ✅ | SDK wraps Firebase, Gemini, TLDraw, Hotmart behind unified API |
| Composition — combines multiple lower services | ✅ | Single Panda.Store.publish() triggers L1 (storage) + L2 (checkout) + L3 (AI) |
| Economy — creates its own value exchange | ✅ | Panda Coin (PC), co-production splits, Medusa marketplace |
| Governance — self-regulating rules | ✅ | PAT Constitution (12 Articles), Panda Defend (kill switch) |
| Distribution — has its own network effect | ✅ | Medusa marketplace, P2P compute (BYOC), 5-tier mining |
| Identity — independent of any single lower service | ✅ | Works if you swap Firebase for Supabase, Gemini for GPT |
"There are 3 digital layers today: infrastructure, platforms, and tools. Each makes money by selling access to their layer. But no one helps you COMPOSE all three into a packaged product. Panda Factory is the 4th layer — an orchestration fabric with its own SDK, marketplace, and token economy. Developers publish products with one command, and we take a co-production split. No per-seat SaaS fee. We only make money when they make money."
Traditional Dev Journey vs. Panda 4th Layer
───────────────────── ──────────────────────
1. Buy hosting (L1) 1. Panda.Auth.login()
2. Set up payment gateway (L2) 2. Panda.Store.publish(manifest)
3. Learn 5+ SaaS tools (L3) 3. Panda.Brain.chat("Create a bot")
4. Write everything from scratch 4. Done — split active, store listing live
5. Handle billing, support,
updates, compliance...
Time: 3-6 months Time: 1 afternoon
Cost: $500-2000/month Cost: 0 upfront (co-production %)
Skills: Full-stack developer Skills: Domain knowledge + Panda SDK
Result: 1 product, 1 market Result: 1 product, Medusa + Hotmart + Kiwify
| Company | Claim | Reality | Why Panda Is Different |
|---|---|---|---|
| Zapier / Make | "Automation layer" | Connects APIs, doesn't create products | Panda creates products, not workflows |
| Bubble / Retool | "No-code platform" | Builds apps, doesn't distribute or monetize them | Panda packages AND sells via Medusa + Hotmart |
| Shopify | "Commerce layer" | Sells products that already exist | Panda is pre-commerce: creates the product first |
| Hugging Face | "AI model layer" | Hosts models, doesn't commercialize downstream | Panda wraps AI into sellable infoproducts |
No one is occupying the "4th Layer" position. First-mover advantage.
|
17 namespaces, one No SaaS subscription. No per-seat fee. Panda only earns when you earn. Up to 85% goes to you. Plus: you earn 40% every time someone USES your module — not just when they buy it. Infrastructure cost: $0/month until your first sale. Publish to the Panda Medusa Store with |
Every product ships with Gemini AI built-in. Flash for speed, Pro for depth, Think for strategy, Research for citations, Imagen for visuals. Module creators don't write AI code — it's already there. The 4th Layer governs itself. 14 security rules, Ed25519 cryptography, kill switch for compliance enforcement. Your product is protected at the orchestration layer — not at the mercy of lower layers. Social automation, prospecting bots, vertical CRMs, trading tools — markets too fragmented for BigTech to address. Panda gives you the SDK, AI, and distribution to own these verticals. |
Panda Factory runs on a FlexLayout-based window manager — a full IDE-like workspace where users can arrange their tools exactly how they work:
| Feature | What It Does |
|---|---|
| Tabs | Open CRM, Chat, Store side-by-side like browser tabs |
| Split Panels | Run AI Chat on the left, Canvas on the right — drag to resize |
| Floating Windows | Pop any panel out of the layout — drag freely over the canvas |
| Maximize | Any panel goes fullscreen with one click |
| Multi-Monitor | Dashboards can open in a separate window — drag to your second screen |
Use Case: A social media manager opens Instagram analytics on the left, AI Chat on the right writing captions, and the Canvas below for designing posts — all in one workspace.
Every plugin MUST have a panda.mcp.json manifest. The SecurityAgent validates it before the TentacleRegistry loads it:
┌──────────────────────────────────────────────────────────────────────┐
│ 🔌 MCP PLUGIN PIPELINE │
│ │
│ 1. Dev creates plugin with panda.mcp.json manifest │
│ 2. SecurityAgent validates: │
│ ✅ Required fields (name, version, author, permissions) │
│ 🚫 Forbidden permissions (filesystem:write:root, kernel:modify) │
│ ⚠️ Sensitive permissions warned (camera, microphone, network) │
│ 📝 Semver version format checked │
│ 🔐 Ed25519 signature verified (when on-chain) │
│ 3. TentacleRegistry.register(id, manifest, hooks) │
│ 4. Plugin runs in sandbox, communicates via SDK events │
│ │
│ Visual Editor: Built-in manifest editor with live validation │
└──────────────────────────────────────────────────────────────────────┘
This is NOT just another plugin system. Panda's MCP Brain actively watches what you're doing inside WebViews and suggests actions:
┌──────────────────────────────────────────────────────────────────────┐
│ 🧠 MCP BRAIN INTERACTIVITY — Live Example │
│ │
│ User opens Mercado Livre Seller Hub (WebView inside Canvas): │
│ │
│ ┌────────────────────────────┬──────────────────────────┐ │
│ │ 🌐 WebView: ML Seller │ 🧠 Brain Sidebar │ │
│ │ │ │ │
│ │ Anúncio: iPhone 15 Pro │ 💡 "Notei que este │ │
│ │ Preço: R$ 6.499 │ anúncio está R$300 │ │
│ │ Vendas: 3/mês │ acima da concorrência. │ │
│ │ Perguntas: 7 pendentes │ Quer que eu ajuste │ │
│ │ │ o preço?" │ │
│ │ ░░░░░░░░░░░░░░░░░░░░░░░ │ │ │
│ │ Painel normal do ML │ 🔔 "7 perguntas sem │ │
│ │ (nenhuma modificação) │ resposta — responder │ │
│ │ │ automaticamente?" │ │
│ └────────────────────────────┴──────────────────────────┘ │
│ │
│ HOW IT WORKS: │
│ 1. WebView loads external tool (ML, Instagram, Calendar...) │
│ 2. MCP Manifest extracts ONLY strategic data via API │
│ 3. Brain receives context → reasons across ALL connected services │
│ 4. Sidebar shows suggestions — user approves or dismisses │
│ 5. Panda executes via API Bridge (never touches the WebView DOM) │
└──────────────────────────────────────────────────────────────────────┘
| WebView Open | Brain Suggests | Cross-Platform Data |
|---|---|---|
| Google Calendar | "Você tem 2 clientes VIP agendados amanhã. Enviar lembrete por WhatsApp?" | CRM contacts → Calendar events → WhatsApp reminder |
| Instagram DMs | "Este lead perguntou sobre preço 3x. Criar proposta no CRM?" | Instagram context → CRM pipeline → Follow-up schedule |
| iFood Painel | "Estoque de mussarela está em 2.5kg (mínimo: 5kg). Pausar item no cardápio?" | iFood orders → Estoque alerts → Menu auto-pause |
| Bling ERP | "NF emitida para Cliente X. Atualizar status no CRM e enviar rastreio?" | Bling invoice → CRM update → WhatsApp tracking |
| Shopee Seller | "Este produto vendeu 15 unidades ontem. Reposição automática no fornecedor?" | Shopee sales → Estoque debit → Supplier alert |
The external tool is the HEAVY OPERATION interface. Panda's internal UI is the STRATEGIC CONTROL layer.
Each Tentacle has a JSON manifest that tells MCP exactly what data to extract:
{
"name": "mercadolivre",
"capabilities": {
"orders": { "read": true, "webhook": true },
"questions": { "read": true, "write": true }
},
"spine_mapping": {
"orders → estoque": "auto_debit",
"questions → crm": "auto_capture_lead"
}
}The
spine_mappingfield is the secret sauce — it declares how data from external APIs automatically feeds CRM, Calendar, and Estoque without any user action.
🧠 Gemini (Brain)
│
┌──────────────┼──────────────┐
│ │ │
📇 CRM 📅 Calendar 📦 Inventory
(Contacts) (Events) (Products)
│ │ │
└──────────────┼──────────────┘
│
SPINE (backbone)
(Native RTDB, auto-populated)
│
┌──────┬───────┼───────┬──────┐
│ │ │ │ │
WhApp Insta ML Shopee iFood
│
TENTACLES
(External APIs via JSON manifests)
│
📊 Visual Dashboard
(Canvas multiwindow, detachable)
| Layer | What | Where | Strategy |
|---|---|---|---|
| Spine | CRM + Calendar + Inventory | Panda's own RTDB | Always present, auto-populated by tentacles |
| Dashboard | 🎯 Fixed core icon in App Dock | Panda native (always on) | Aggregates ALL connected services — the moat |
| Tentacles | WhatsApp, ML, Shopee, iFood, Calendar... | External APIs via manifests | Panda connects — enhances, doesn't replace |
| WebViews | Borrowed UI (Google Calendar, Bling, ML...) | iframe/webview in Canvas | User sees the real tool, Panda operates behind |
Philosophy: "Connect, Don't Compete." — If the user already has a tool, Panda connects to it. If not, Panda offers a basic native module. Dashboard = core, not optional. Without it, Panda is just a browser with tabs. The Dashboard aggregates metrics from ALL connected services into one view.
Each template = a ready-to-run AI employee for a specific business type:
| Template | Tentacles | What the Panda Does |
|---|---|---|
| 🍕 Restaurant | WhatsApp + iFood + Sheets | Orders, menu, inventory, auto-reply |
| 🛒 E-commerce | WhatsApp + ML + Shopee + Bling | Questions, tracking, stock, complaints |
| 🏥 Clinic | WhatsApp + Calendar + Sheets | Scheduling, confirmation, reminders, follow-up |
| 🏠 Real Estate | WhatsApp + Instagram + Calendar | Leads, tours, follow-up, qualification |
| 🔧 Services | WhatsApp + Calendar + Sheets | Quotes, scheduling, billing |
Affiliate sells, client connects, Panda operates. Zero onboarding friction.
Real-time AI assistant with model switching and specialized personas (GEMs):
| Feature | Detail |
|---|---|
| 5 AI Models | Flash (fast) · Pro (deep) · Think (strategy) · Research (web) · Imagen (images) |
| 6 GEMs | Writer ✍️ · Analyst 📊 · Coder 💻 · Designer 🎨 · Planner 📋 · Researcher 🔬 |
| Context Injection | Auto-injects current canvas state, open panels, and user profile |
| Backend | GAS → Gemini API with energy cost tracking and context caching |
Full TLDraw v2 canvas as the foundation surface — not a gimmick, it's the UI itself:
- Drawing tools controlled from Panda's own dock (native TLDraw UI hidden)
- Theme-aware — follows system dark/light mode automatically
- Grid toggle — persistent grid visibility setting
- Persistence — saved to localStorage per room/session
- Welcome Overlay — guided onboarding when canvas is empty
- Plugin overlay — active plugins shown on canvas
In-app marketplace where users browse, install, and purchase extensions:
| Tier | What It Means | Examples |
|---|---|---|
| 🟢 OSS | Free, open-source | Panda CRM (AI contact management) |
| 🔵 Freemium | Free base, paid upgrades | Landing Pages (drag-and-drop + AI copy) |
| 🟡 BYOL | Webview → API Bridge to your existing service | Google Analytics, Meta Business Suite |
| 🟣 PRO | Paid Panda-built modules | Instagram, YouTube, Kiwify, Hotmart |
12 extensions already built — Social (Instagram, Facebook, YouTube, TikTok, Twitter), Ads (Google Ads, Meta Business), Commerce (Kiwify, Hotmart), Productivity (CRM, Landing Pages, Analytics)
This is the Shopify/Chrome Extensions model. Panda provides BYOL bridges (@panda/) as shared infrastructure. Third-party devs create modules ON TOP — dashboards, automations, integrations — consuming the bridges via MCP.
LAYER 1: BRIDGES (@panda/ — Managed by Panda Core)
├── @panda/youtube (WebView + API Bridge)
├── @panda/instagram (WebView + API Bridge)
├── @panda/canva (WebView + API Bridge)
├── @panda/whatsapp (WebView + API Bridge)
└── Dev and User CONSUME these without worrying about OAuth, rate limits, tokens.
LAYER 2: MODULES (Created by Devs — Published on Medusa Store)
├── 🎯 @panda/dashboard ← Panda native (default, fixed in App Dock)
├── @dev/restaurant-dash ← Dev built a dashboard for restaurants
├── @dev/ecommerce-dash ← Dev built a dashboard for e-commerce
└── Revenue: 70% dev / 30% Panda
Why devs choose Panda over building from scratch:
WITHOUT PANDA (~9 weeks): WITH PANDA (~2 weeks):
1. Integrate iFood API (2 wks) 1. useBridge('@panda/ifood') → ready
2. Integrate Instagram API (2 wks) 2. useBridge('@panda/instagram') → ready
3. Integrate WhatsApp API (3 wks) 3. useBridge('@panda/whatsapp') → ready
4. Build dashboard UI (2 wks) 4. Build dashboard UI (2 wks)
Total: ~9 weeks Total: ~2 weeks (78% reduction)
The bridges are the moat. Devs come to Panda because the integrations already exist. They don't need to solve OAuth, rate limits, or token refresh — the bridge handles it. They focus on what they do best: building niche dashboards and selling them in the Store.
Built-in security monitoring with plugin approval queue and compliance enforcement:
- Security Score — real-time threat assessment across all loaded modules
- Plugin Approval Queue — approve/reject/suspend plugins before they can execute
- Kill Switch — emergency shutdown with Ed25519 + PIN verification
- 14 Security Rules — Constitution compliance enforced at runtime
Two zero-barrier submission channels for developers:
| Channel | Audience | Flow |
|---|---|---|
| GitHub | Technical devs | git push → webhook → GAS validates → Firebase Colmeia → Store listing |
| Google Drive | No-code makers | Save to Drive folder → Drive API Watch → GAS → Store listing |
11 payment/distribution hooks: Kiwify · Hotmart · Eduzz · Stripe · PagSeguro · PIX (inbound) + PlayStore · Steam · itch.io · PWA · GitHub Pages (outbound)
- PC (Panda Coin) — internal credits for AI usage, marketplace transactions, and revenue share payouts
- Energy System — AI actions consume credits, visual energy bar tracks usage in real-time
- Transparent Billing — every transaction recorded, dev dashboards show revenue breakdown per module
Panda Factory is a Google-native platform. Every core service runs on Google infrastructure:
┌──────────────────────────────────────────────────────────────────────┐
│ 🟢 GOOGLE TECHNOLOGIES USED │
│ │
│ AUTH & DATA: │
│ ├── Firebase Authentication (Google, Email, Anonymous) │
│ ├── Firebase Realtime Database (live sync, user state) │
│ ├── Firebase Hosting (PWA deployment) │
│ └── Firebase Cloud Functions (serverless triggers) │
│ │
│ BACKEND & COMPUTE: │
│ ├── Google Apps Script (17 .gs files — backend engine) │
│ ├── Google Sheets (transaction ledger, off-chain database) │
│ ├── Google Drive (file storage, module submission channel) │
│ └── Google Workspace (Docs, Sheets, Drive — integrated via SDK) │
│ │
│ AI & INTELLIGENCE: │
│ ├── Gemini 2.0 Flash (fast chat, instant responses) │
│ ├── Gemini 2.0 Pro (deep analysis, complex reasoning) │
│ ├── Gemini 3.0 Think (multi-step strategy planning) │
│ ├── Gemini Research (answers with web citations) │
│ └── Gemini Imagen (AI image generation) │
│ │
│ MAPS & LOCATION: │
│ └── Google Maps API (integrated for location-based products) │
│ │
│ TOTAL: 13+ Google services · 5 Gemini models · 17 GAS scripts │
│ GOAL: Google Partner Program │
└──────────────────────────────────────────────────────────────────────┘
Why Google Partner matters: Panda Factory democratizes Google's AI and cloud tools for solo developers and small teams who can't afford enterprise licenses. Every product created on Panda generates Google API usage — Firebase calls, Gemini tokens, Drive storage, Maps queries. Panda turns Google's B2B-only tools into a B2C channel via co-production.
- Zero cloud bills — Panda uses GAS user-side quotas (your Google account's free tier)
- AI included — Gemini Flash, Pro, Think, Research, Imagen — all accessible via
Panda.Brain - No AWS/Azure needed — Firebase handles auth, database, hosting. No infra setup
- Enterprise tools, indie budget — Google Sheets as a transaction ledger? It works for 100K+ users
- Free hosting — Deploy to GitHub Pages or Firebase Hosting at zero cost
| Barrier | Google / Microsoft / Anthropic | Panda Factory |
|---|---|---|
| DNA | B2B enterprise ($50k+/year) | B2C co-production (zero upfront) |
| Channel | Sales reps, cloud marketplace | Hotmart + Kiwify (34M+ buyers) |
| Compliance | Can't sell "Instagram bots" | Art. 9 — Zero censorship |
| Revenue | $20-50/mo/user seat fee | Co-production % per sale |
| Conflict | 4th layer COMPETES with L1-L3 | Panda COMPOSES L1-L3 |
| Niche | Generic product for everyone | Module per vertical |
| Speed | 6-12 months per product | 4 weeks with SDK |
BigTechs can't build the 4th Layer because it competes with selling their own L1-L3 services. Our incentive is aligned with developers, not with extracting cloud fees.
Panda uses a co-production model: zero upfront cost, revenue split only when you earn. The more independent you are, the more you keep:
╔══════════════════════════════════════════════════════════════════════╗
║ 💸 PANDA REVENUE SPLITS — You Only Pay When You Earn ║
╠══════════════════════════════════════════════════════════════════════╣
║ ║
║ 🟢 STORE SPLIT — Selling modules on the Panda Medusa Store ║
║ 70% Dev / 25% Ops / 5% Platform ║
║ Best for: products distributed through the Panda marketplace ║
║ ║
║ 🔵 OWN HOOK — You bring your own audience ║
║ 85% Dev / 10% Ops / 5% Platform ║
║ Best for: established devs with existing traffic ║
║ (Panda's 15% = your entire backend + AI + payments infrastructure) ║
║ ║
║ 🟣 DISTRIBUTOR — Using Panda's affiliate army ║
║ 60% Dev / 35% Ops / 5% Platform ║
║ Best for: new devs leveraging Hotmart/Kiwify affiliates ║
║ ║
║ ⚡ USAGE SPLIT — Every time someone USES your module (NEW!) ║
║ 40% Dev / 55% Ops / 5% Platform ║
║ This is PASSIVE INCOME — you earn when users consume AI, ║
║ rendering, or compute inside YOUR module. No marketplace does this. ║
║ ║
╚══════════════════════════════════════════════════════════════════════╝
| Platform | Dev Gets | Fee Model | Usage Revenue? |
|---|---|---|---|
| Apple App Store | 70% | 30% commission | ❌ |
| Google Play | 70% | 30% commission | ❌ |
| Steam | 70% | 30% commission | ❌ |
| Chrome Web Store | 95% | $5 one-time + review | ❌ |
| Shopify Apps | 80% | 20% rev share | ❌ |
| Panda Store | 70% | Co-production | ✅ 40% |
| Panda Own Hook | 85% | Co-production | ✅ 40% |
Only Panda pays you when users USE your product — not just when they buy it.
┌─────────────────────────────────────────────────────────────────────────┐
│ SCENARIO: R$97 product on Kiwify (65% affiliate, Distributor path): │
│ │ Kiwify: R$11.21 │ Affiliate: R$55.76 │ YOU: R$30.03 │ │
│ ──────────────────────────────────────────────────────── │
│ 100 sales/mo = R$3,003/mo (your revenue) │
│ 500 sales/mo = R$15,015/mo (your revenue) │
│ │
│ SCENARIO: R$97 product, Own Hook (85% split, no affiliate): │
│ R$97 sale → YOU: R$82.45 │ Panda: R$14.55 │
│ 100 sales/mo = R$8,245/mo (your revenue) │
│ │
│ BONUS — Usage Revenue (40% of compute consumed by your users): │
│ If users consume R$500/mo in AI/compute → YOU earn R$200/mo passive │
│ │
│ 📦 UPSELL via internal Store → extra modules $4.99-$9.99 │
│ 💰 Margin ~95% (no affiliate, just gateway fee) │
└─────────────────────────────────────────────────────────────────────────┘
🏥 Real Scenario: CRM for Dentists (Dr. Patrícia, BH)
Dr. Patrícia installs the Panda Factory CRM module
→ AI imports 300 patients from Google Sheets (Panda.Google.Sheets)
→ Bot sends appointment reminders via WhatsApp (Medusa tentacle)
→ Dashboard shows patient return rate (Panda.Brain.analyze)
→ She pays R$97 once. No Salesforce. No R$200/mo.
Affiliate who referred her earns R$63 (65%). Dev earns R$30.
📱 Real Scenario: Instagram Automation (Coach Marcos, SP)
Coach Marcos buys the Social Automation module on Hotmart
→ Hotmart webhook fires → access activated (Panda.Auth)
→ Bot posts AI content on 3 networks (Medusa Social)
→ AI generates captions, hashtags and ideal posting times (Panda.Brain.chat)
→ 5x more engagement in the first month
He buys an extra "Landing Pages" module ($4.99) in Panda Store.
🏠 Real Scenario: Prospecting Bot (Carlos, Realtor, Curitiba)
Carlos buys Panda CRM + Prospecting Bot via Kiwify
→ Bot scrapes leads from real estate portals (Client-side)
→ AI classifies leads 1-10 by probability (Panda.Brain.analyze)
→ Hot leads get automatic WhatsApp message (Medusa tentacle)
→ 4 sales in the first month. ROI: 4000%
Google CAN'T offer this — it violates compliance. Panda can (Art. 9).
The SDK is the proof that Panda Factory is a real orchestration layer — every namespace wraps a lower layer:
| Namespace | Wraps | Layer |
|---|---|---|
Panda.Auth |
Firebase Auth | L1 Infrastructure |
Panda.Brain |
Gemini AI via GAS | L3 Tools |
Panda.Canvas |
TLDraw Editor | L3 Tools |
Panda.Store |
Medusa Marketplace | L2 Platform |
Panda.Wallet |
Ed25519 + GAS Ledger | L1 + L2 |
Panda.Google.Drive |
Google Drive API | L1 Infrastructure |
Panda.Google.Sheets |
Google Sheets API | L3 Tools |
Panda.Google.Colab |
GPU Compute | L1 Infrastructure |
Panda.Bridge |
Rust Agent + MCP | L1 Infrastructure |
Panda.Polyglot |
NLLB-200 + Whisper | L3 Tools |
Panda.Collab |
Yjs CRDT | L3 Tools |
Panda.Data |
React Query + Zustand | L3 Tools |
Panda.Storage |
File Upload/Download | L1 Infrastructure |
Panda.PAT |
Economic Toolkit | L2 Platform |
Panda.Governance |
Council Validator | L4 Self-Governance |
Panda.Validate |
Zod Schema | L3 Tools |
Panda.Dock |
FlexLayout Manager | L3 Tools |
Panda.Governanceis the only namespace that doesn't wrap a lower layer — it validates actions against Panda's own rules. This is the 4th Layer governing itself.
import Panda from "panda-sdk";
// Compose all 3 layers in 4 lines:
await Panda.Auth.login("google"); // L1: Infrastructure
await Panda.Brain.chat("Create a CRM for dentists"); // L3: Tools
await Panda.Store.publish({ name: "DentistCRM", price: 97 }); // L2: Platform
// → Product live on Medusa + Hotmart. Co-production split active.Every product ships AI-native via MCP (Model Context Protocol). Module creators don't need to write AI code:
| Model | Purpose | Speed |
|---|---|---|
| Gemini 3 Flash | Instant responses, quick tasks | ⚡ |
| Gemini 3 Pro | Deep analysis, complex reasoning | 🔬 |
| Gemini 3 Flash Think | Multi-step strategy, planning | 🧠 |
| Deep Research | Answers with web sources | 🌐 |
| Gemini 3 Pro Imagen | AI image generation | 🎨 |
| Category | What It Does | Examples |
|---|---|---|
| CRM by Vertical | Client management by niche | CRM Dentists, CRM Real Estate |
| Social Automation | Bots for Instagram, TikTok, LinkedIn | PostBot, HashtagGen |
| Prospecting | Scraping + AI for leads | LeadScorer, ProspectBot |
| Landing Pages | Drag-and-drop builder | PageForge, FunnelBuilder |
| Trading | Analysis and signal bots | GoldBot, CryptoScanner |
| Education | AI-powered course creation | QuizMaster, CourseBuilder |
Each Store module = recurring revenue. Upsell without affiliates = ~95% margin.
Panda Factory exists to serve developers — not to extract value from them.
╔══════════════════════════════════════════════════════════════════════════╗
║ ║
║ 1. YOU KEEP THE MAJORITY — Always. 70-85% on sales, 40% on usage. ║
║ ║
║ 2. ZERO UPFRONT COST — No subscription, no annual fee, no review ║
║ process that takes months. Publish with `git push`. ║
║ ║
║ 3. NO VENDOR LOCK-IN — Your code is yours. Export anytime. ║
║ Panda composes services, it doesn't cage you. ║
║ ║
║ 4. AI IS INCLUDED — Every module ships with Gemini AI. ║
║ You don't pay for AI APIs separately. ║
║ ║
║ 5. WE GROW TOGETHER — Panda only profits when you profit. ║
║ Our incentives are 100% aligned with yours. ║
║ ║
║ 6. GOOGLE-GRADE INFRA — Firebase, Gemini, GAS, Cloud Run. ║
║ Enterprise tools at zero cost to you. ║
║ ║
║ 7. GLOBAL DISTRIBUTION — Medusa Store + Hotmart + Kiwify. ║
║ 34M+ buyers through affiliate armies, 46 countries via Paddle. ║
║ ║
║ 8. BUILD FOR ANY NICHE — Including niches BigTechs won't serve. ║
║ Social automation, prospecting, trading, vertical CRMs. ║
║ ║
╚══════════════════════════════════════════════════════════════════════════╝
Every marketplace today takes 30% and gives you nothing in return except shelf space. Apple charges $99/year just to submit. Google Play takes 30%. Steam takes 30%. And none of them pay you when users actually USE your product.
Panda Factory flips this:
- Lower fees (15-30% vs 30% industry standard)
- Usage revenue (40% of compute consumed — unique in the industry)
- Zero gatekeeping (no app review, no approval queue, no censorship)
- Full AI stack included (Gemini 3.0 — not an add-on, it's built in)
We don't want to be your landlord. We want to be your co-founder.
┌──────────────────────────────────────────────────────────────────────────┐
│ PANDA FACTORY — 4TH LAYER ARCHITECTURE │
├──────────────────────────────────────────────────────────────────────────┤
│ │
│ 🖥️ FRONTEND (Browser) ☁️ BACKEND (Serverless) │
│ ├── React 18 (31 components) ├── Google Apps Script (17 .gs) │
│ ├── TLDraw (infinite canvas) ├── Google Sheets (database) │
│ ├── Glassmorphism dark theme ├── Google Drive (storage) │
│ └── PWA-ready └── Google Workspace (docs) │
│ │
│ 🧠 AI LAYER (L3 wrapped) 🔐 AUTH & SECURITY │
│ ├── Gemini Flash (chat) ├── Firebase Auth (L1) │
│ ├── Gemini Pro (analysis) ├── Firebase RTDB (real-time) │
│ ├── Gemini Think (strategy) ├── Ed25519 Cryptography │
│ ├── Gemini Research (web) └── Panda Defend (14 rules) │
│ └── Gemini Imagen (images) │
│ │
│ 🐙 MEDUSA ENGINE (L2 wrapped) 🦀 DESKTOP AGENT (Optional) │
│ ├── 15 distribution tentacles ├── Rust/Tauri native app │
│ ├── Webhooks Kiwify + Hotmart ├── GPU detection & mining │
│ ├── Stripe + PIX (MercadoPago) ├── License management │
│ └── 6 supported platforms └── P2P compute network │
│ │
│ 🔌 SDK (17 Namespaces) 📊 MONITORING │
│ ├── Panda.Auth (L1) ├── Gasometer (GAS usage) │
│ ├── Panda.Brain (L3) ├── TentacleMonitor (health) │
│ ├── Panda.Store (L2) ├── Circuit Breaker (failover) │
│ ├── Panda.Wallet (L1+L2) └── Heartbeat real-time │
│ ├── Panda.Governance (L4) │
│ ├── Panda.Polyglot (L3) │
│ └── +11 more namespaces │
│ │
│ 💰 ECONOMY (L4 native) 🏛️ GOVERNANCE (L4 self-regulation) │
│ ├── Panda Coin (PC) ├── PAT Constitution (12 Articles) │
│ ├── Co-production splits ├── Panda Supreme Council │
│ ├── 5-tier mining network ├── Panda Defend Kill Switch │
│ └── Medusa marketplace └── Ed25519 Verification │
│ │
└──────────────────────────────────────────────────────────────────────────┘
[Purchase on Hotmart/Kiwify via affiliate]
│
▼
[Webhook fires → GAS processes → validates HMAC → credits wallet]
│
▼
[User receives link → accesses Panda Factory]
│
▼
[LoginGate → creates account (Firebase Auth)]
│
▼
[Welcome Wizard → initial setup]
│
▼
[Purchased module activated automatically]
│
▼
[Internal Store → buy extra modules (PIX/Stripe)]
The repository uses a numbered taxonomy for instant navigation. This structure is the ground truth for MCP interactions:
Panda-Factory/
├── 00.credentials/ # Firebase keys, .env (gitignored)
├── 1.core/ # GAS backend (17 .gs files)
├── 2.system/ # System configs (Brain, SecurityAgent, TentacleRegistry)
├── 3.sdk/ # SDK source (17 namespaces)
├── 4.ui/ # CSS + shared UI components
├── 5.tentacles/ # Medusa tentacle modules (37 integrations)
├── 6.medusa/ # Medusa manifests (12 integration manifests)
├── 7.rust-agent/ # Rust/Tauri desktop agent (GPU, P2P, license)
├── 8.docs/ # Reference documentation (32 docs)
├── 9.tools/ # Dev tools, scripts, utilities
├── 10.assets/ # Images, pages, pitch decks
├── pf/ # React 18 application (Vite + pf/app/)
├── 12.sandbox/ # Experimental / playground
├── PF_MASTER_ARCHITECTURE.md # 📜 Master SSoT (architecture + roadmap)
├── README.md # ← You are here
└── index.html # Landing page (GitHub Pages)
Hub 11 was deprecated — the React app now lives in
pf/(withpf/app/inside).
| Document | Purpose | Location |
|---|---|---|
| PF_MASTER_ARCHITECTURE.md | SSoT — Architecture, Economy, Roadmap, File Registry | Project root |
| council_viability_report.md | Viability analysis, market positioning, risk assessment | 8.docs/ |
| PF_SDK_REFERENCE.md | SDK namespaces, API surface, usage examples | 8.docs/ |
| PF_UI_REFERENCE.md | Design system, components, CSS variables | 8.docs/ |
| PAT_Constitution.md | Governance rules, 12 Articles, Panda Defend | 8.docs/ |
Full roadmap lives in PF_MASTER_ARCHITECTURE.md §15 — this README shows the summary only.
┌──────────────────────────────────────────────────────────────┐
│ PANDA FACTORY — THE 4TH LAYER │
│ │
│ 📦 31 React Components 📄 32 Reference Docs │
│ 🎨 18 CSS Files 🔧 12 SDK Modules │
│ 🐙 37 Tentacle Modules 🔴 17 GAS Backend Files │
│ 🦀 8 Rust Modules 🛡️ 14 Security Rules │
│ 🧠 5 Gemini Models 💳 6 Webhook Gateways │
│ 💰 17 SDK Namespaces 🌐 15 Integrations │
│ │
│ ⚡ Phase 1: 95% Complete · UI Real · Backend 70% Written │
│ 🚀 Target: March 1st 2026 — Founder GTM Launch │
└──────────────────────────────────────────────────────────────┘
| Phase | Name | When | Focus | Status |
|---|---|---|---|---|
| 0 | Foundation | Jan 2026 | SDK, Backend (17 GAS), AI pipeline, Security core | ✅ Done |
| 1 | UI + Founder GTM | Feb 2026 | 31 components, Store, Login, i18n, Webhooks, first users | 🚧 95% |
| 2 | Bridge Infra + Monetization | Mar 2026 | @panda/ bridges (YouTube, Instagram, WhatsApp), Stripe + PIX live, first real sales |
⏳ Next |
| 3 | Dev Marketplace | Q2 2026 | Bridge Reuse API, first 3rd-party modules, Medusa Store public, affiliate program | ⏳ |
| 4 | Scale + P2P | Q3-Q4 2026 | P2P compute (BYOC), Rust Agent GA, 5-tier mining, Google Partner application | ⏳ |
📜 Full roadmap with task-level detail: see PF_MASTER_ARCHITECTURE.md §15
| Item | Priority | Status | Detail |
|---|---|---|---|
| Firebase Security Rules | P0 | RTDB rules need per-user read/write scoping | |
| CSP Headers | P0 | Content Security Policy for XSS prevention | |
| Ed25519 Kill Switch | P0 | 🟡 Partial | Crypto logic exists, real key pair not yet deployed |
| HMAC Webhook Validation | P1 | ✅ Done | Kiwify/Hotmart webhooks validate signatures |
| Panda Defend (14 Rules) | P1 | ✅ Done | Runtime constitution enforcement active |
See council_viability_report.md for the full risk analysis.
| Vertical | TAM | Why Panda Wins |
|---|---|---|
| AI Infoproducts (Hotmart/Kiwify) | $3.2B | Only orchestration layer with AI + channel + splits |
| CRM by Vertical (dentists, realtors) | $2B | BigTechs don't do niches — Panda does |
| Social Automation (Instagram, TikTok) | $4B | Violates BigTech compliance — Panda can |
| Prospecting Bots | $1.5B | Scraping + AI client-side = zero cost |
| Trading/Crypto | $8B | Regulation blocks BigTechs — niche is free |
Do I need to know React to build modules?
No. Modules can be pure HTML/CSS/JS wrapped in a panda.mcp.json manifest. The SDK handles everything: auth, payments, AI, distribution. React is used for the Panda shell, but your module code is framework-agnostic.
How do I get paid?
Revenue is tracked in Panda Coins (PC) and can be withdrawn via Stripe Connect, PIX (Brazil), or PagBank. Minimum payout: ~R$50. Revenue dashboard shows real-time earnings per module, per split type.
What if I already have an audience?
Use Path B (Own Hook) — you keep 85%. Panda handles auth, AI, payments, and hosting. Your 15% covers the entire infrastructure stack that would cost you $500+/month elsewhere.
Can I use my own payment gateway?
Yes. Panda supports Kiwify, Hotmart, Stripe, PIX, PagSeguro as inbound webhooks. You can sell on your own site and just use Panda for fulfillment and AI.
Is there an app review process?
No. Submit via git push or Google Drive. Security validation is automated (manifest + permissions check). No human gatekeeper, no weeks-long review queue.
What's the Usage Split?
When users consume AI, rendering, or compute inside YOUR module, you earn 40% of that usage. This is passive income — you don't need to sell anything extra. No other marketplace offers this.
Panda Factory is looking for developers who want to build and earn in the 4th layer:
| Channel | Link | Purpose |
|---|---|---|
| GitHub | @LucassVal/Panda-Factory | Code, issues, module submissions |
| Coming soon | Community, showcases, feedback | |
| Discord | Coming soon | Real-time support, dev chat |
- Build a module — Pick a niche, use the SDK, publish to the Store
- Report issues — GitHub Issues for bugs and feature requests
- Translate — Help expand i18n coverage (currently: 🇧🇷 PT-BR, 🇺🇸 EN, 🇪🇸 ES)
- Spread the word — Star the repo, share with devs who want to earn more
Lucas Valério — Founder & Solo Developer
- 🐙 GitHub: @LucassVal
- 📍 Brazil
- 📧 Open for co-production partnerships and module development
🐼 Panda Factory — The 4th Digital Layer
Where BigTechs sell services, Panda connects them into one invisible employee.
Spine + Tentacles + MCP Brain = the 4th layer in action.
We don't compete with Layers 1-3. We compose their APIs and orchestrate them.
Connect, Don't Compete.
v11.0 — 4th Layer · Spine + Tentacles Edition · February 2026