Vol. I · 2026.05 · Preprint

WaterfallReach: An AI Agent for Cost-Aware Contact Enrichment via a Five-Tier Cascade

The WaterfallReach Research Team
Submitted MMXXVI · Open access · arxiv:wr.2026.0001

Abstract

We introduce WaterfallReach, an AI agent for verified contact enrichment that descends a five-tier waterfall of progressively more expensive data sources, exiting the moment a candidate is verified. The agent uses a large language model as a judge (not generator) to fuse twenty-plus weak signals from public records into a single ranked candidate, and as a router to arbitrate between six LinkedIn data sources. A per-domain memory layer caches verified patterns, allowing successive enrichments on the same domain to skip expensive tiers.

Empirically, the system resolves the majority of test inputs at the free first tier and exhibits monotonically decreasing per-row cost as domain memory accumulates. We argue this architecture provides a meaningful alternative to single-vendor enrichment, particularly for compliance-sensitive verticals such as healthcare.

1.Introduction

The standard approach to contact enrichment couples a vendor API to a CRM pipeline and bills per row regardless of resolution path. We observe that a non-trivial fraction of enrichments are recoverable from public-records signals at zero marginal cost — yet vendors do not expose this option. We propose a waterfall cascade that performs cost-aware tier selection, with an AI agent acting as both signal-fuser and exit-criterion judge.

2.Method

The cascade comprises five tiers T0…T4, ordered by ascending marginal cost. Each tier produces a candidate set and a confidence distribution; the AI judge fuses these and decides whether to exit the cascade or descend to the next tier.

  ┌──────────────┐    seed     ┌────────────────────────┐
  │  Input row   │ ──────────→ │  T₀ Free signals (20+)  │
  └──────────────┘             └────────────┬────────────┘
                                            │
                              candidate · confidence c
                                            │
                       ┌── exit if c ≥ τ ───┴───────────────┐
                       ▼                                    │
                  ┌─────────┐         else descend           │
                  │ verify  │                                ▼
                  └─────────┘                       ┌─────────────────┐
                                                    │  T₁ … T₄        │
                                                    └─────────────────┘
Fig. 1. The waterfall cascade. Tier T₀ runs free signals fused by an AI judge; subsequent tiers fire only when the confidence threshold τ is not met.

2.1 The AI Judge

We use an LLM as a judge over heterogeneous signals (permutation candidates, IRS Form 990 disclosures, CommonCrawl mentions, MX fingerprints, GitHub commits, NPPES taxonomy, certificate transparency logs, archive.org snapshots, and others). The judge is explicitly not tasked with generating contacts; it ranks and arbitrates only. Prompt caching keeps cache-read ratio above 90%, materially reducing inference cost.

2.2 Domain Memory

On successful verification, the agent persists the resolved pattern (e.g., first.last@domain) to a per-domain memory layer. On future invocations matching the same domain, the cascade short-circuits past Tier 2 onward. This monotonically reduces blended cost as workload size increases.

"The system gets cheaper as you use it — domain memory ensures successive enrichments on a previously resolved domain skip the expensive tiers entirely."

2.3 Adversary-Aware SMTP

Tier 1 (SMTP verification) is sensitive to security gateways (Proofpoint, Mimecast, Barracuda, Cisco) that produce false-positive 250 responses for unknown mailboxes. We mitigate via MX fingerprinting and a catch-all probe that walks the MX priority chain.

3.Compliance Posture

Each emitted email carries a four-class source-risk label {T0, T1, T2, T3} indicating the legal-disclosure category of its underlying source. Customers cap the maximum allowable class per workspace, enabling configuration-level rather than code-level compliance posture.

4.Conclusion

An AI agent that judges weak signals, learns domains, and exits cheaply provides a credible alternative to single-vendor enrichment. We release the system as a public API with a free tier for evaluation.

References

  1. NPPES Provider Directory · National Plan and Provider Enumeration System, CMS.gov
  2. IRS Form 990 · Annual return for tax-exempt organizations, IRS.gov
  3. SEC EDGAR · Electronic Data Gathering, Analysis, and Retrieval system, SEC.gov
  4. Certificate Transparency · crt.sh public log monitor, Sectigo Inc.
  5. Reacher · Self-hosted SMTP validation, github.com/reacherhq

Request research access.

Pilot access is open. Bring a test set; the AI agent will return per-row tier-exit traces and confidence scores.