thumbgate 0.9.13 → 1.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "description": "ThumbGate — Make your AI coding agent self-improving. Every mistake becomes a prevention rule that physically blocks the agent from repeating it. Feedback-driven enforcement via PreToolUse hooks, Thompson Sampling for adaptive gates, SQLite+FTS5 lesson DB, and LanceDB vector search. Your agent gets smarter with every session.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -99,7 +99,7 @@
     "test:funnel-analytics": "node --test tests/funnel-analytics.test.js",
     "test:experiment-tracker": "node --test tests/experiment-tracker.test.js",
     "test:build-metadata": "node --test tests/build-metadata.test.js",
-    "test:context-engine": "node --test tests/context-engine.test.js",
+    "test:context-engine": "node --test tests/context-engine.test.js tests/context-manager.test.js",
     "test:hf-papers": "node --test tests/hf-papers.test.js",
     "test:marketing-experiment": "node --test tests/marketing-experiment.test.js",
     "test:seo-gsd": "node --test tests/seo-gsd.test.js",
@@ -115,7 +115,7 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/job-api.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
     "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
@@ -133,7 +133,7 @@
     "test:autoresearch": "node --test tests/autoresearch.test.js",
     "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/github-billing.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-webhook-route.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js",
+    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
     "test:gates-hardening": "node --test tests/gates-hardening.test.js",

package/plugins/amp-skill/INSTALL.md

@@ -13,7 +13,6 @@ Or from the npm package:
 ```bash
 npx thumbgate init
 cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/thumbgate-feedback.md
-cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/rlhf-feedback.md
 ```
 
 ## What This Does
@@ -27,17 +26,17 @@ After copying, restart Amp. The skill will appear in the active skills list.
 Then test:
 
 ```bash
-node .thumbgate/capture-feedback.js --feedback=up --context="amp skill install verified" --tags="install"
+npx thumbgate capture --feedback=up --context="amp skill install verified" --tags="install"
 ```
 
 ## Available Commands (via skill)
 
 ```bash
 # Positive feedback
-node .thumbgate/capture-feedback.js --feedback=up --context="..." --tags="..."
+npx thumbgate capture --feedback=up --context="..." --tags="..."
 
 # Negative feedback
-node .thumbgate/capture-feedback.js --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
+npx thumbgate capture --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
 ```
 
 ## Requirements

package/plugins/amp-skill/SKILL.md

@@ -1,6 +1,5 @@
 ---
 name: thumbgate-feedback
-name: rlhf-feedback
 description: Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability
 ---
 

package/plugins/claude-codex-bridge/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-bridge",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "description": "Run Codex review, adversarial review, and second-pass handoffs from Claude Code while keeping ThumbGate reliability memory in the loop.",
   "author": {
     "name": "Igor Ganapolsky",

package/plugins/claude-codex-bridge/.mcp.json

@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "thumbgate@0.9.13",
+        "thumbgate@1.0.0",
         "thumbgate",
         "serve"
       ]

package/plugins/claude-skill/INSTALL.md

@@ -13,7 +13,6 @@ Or from the published npm package:
 ```bash
 npx thumbgate init
 cp node_modules/thumbgate/plugins/claude-skill/SKILL.md .claude/skills/thumbgate-feedback.md
-cp node_modules/thumbgate/plugins/claude-skill/SKILL.md .claude/skills/rlhf-feedback.md
 ```
 
 ## What This Does
@@ -34,7 +33,7 @@ After copying, restart Claude Code and run:
 Then test it:
 
 ```bash
-node .thumbgate/capture-feedback.js --feedback=up --context="skill install verified" --tags="install"
+npx thumbgate capture --feedback=up --context="skill install verified" --tags="install"
 ```
 
 ## What You Get

package/plugins/codex-profile/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-profile",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "description": "ThumbGate for Codex: pre-action gates, skill packs, hallucination detection, PII scanning, progressive disclosure (82% token savings), and MCP-backed reliability memory.",
   "author": {
     "name": "Igor Ganapolsky",

package/plugins/codex-profile/.mcp.json

@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "thumbgate@0.9.13",
+        "thumbgate@1.0.0",
         "thumbgate",
         "serve"
       ]

package/plugins/codex-profile/INSTALL.md

@@ -31,7 +31,7 @@ The following block is appended to `~/.codex/config.toml`:
 ```toml
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
 ```
 
 The repo-local Codex app plugin ships the same runtime path through `plugins/codex-profile/.mcp.json`, so the manual config and plugin metadata stay aligned.

package/plugins/codex-profile/README.md

@@ -29,7 +29,7 @@ That profile launches:
 ```toml
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
 ```
 
 ## Why this exists

package/plugins/cursor-marketplace/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "thumbgate",
   "displayName": "ThumbGate",
   "description": "👍👎 Thumbs down a mistake — your AI agent won't repeat it. Thumbs up good work — it remembers the pattern.",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/plugins/opencode-profile/INSTALL.md

@@ -25,7 +25,7 @@ The portable profile adds this MCP server entry:
   "mcp": {
     "thumbgate": {
       "type": "local",
-      "command": ["npx", "--yes", "--package", "thumbgate@0.9.13", "thumbgate", "serve"],
+      "command": ["npx", "--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"],
       "enabled": true
     }
   }

package/public/blog.html

@@ -4,6 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>ThumbGate Blog — Agent Governance Engineering</title>
+    <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
     <meta
       name="description"
       content="Technical breakdowns, release notes, and agent governance insights from the ThumbGate team."

package/public/dashboard.html

@@ -8,7 +8,7 @@
 <link rel="canonical" href="https://thumbgate-production.up.railway.app/dashboard">
 <meta name="robots" content="noindex">
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <style>
   *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
   :root {

package/public/guide.html

@@ -5,7 +5,7 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>How to Stop AI Coding Agents From Repeating Mistakes — ThumbGate Guide</title>
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="The complete guide to preventing AI coding agent mistakes with pre-action gates, history-aware lesson distillation, and automatic prevention rules.">
 <meta name="keywords" content="AI agent mistakes, Claude Code force push, AI coding agent memory, MCP server guardrails, pre-action gates, vibe coding safety, PreToolUse hooks, ThumbGate, SpecLock alternative, Mem0 alternative">
 <meta property="og:title" content="How to Stop AI Coding Agents From Repeating Mistakes">

package/public/index.html

@@ -27,7 +27,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta name="keywords" content="ThumbGate, thumbgate, self-improving AI agents, AI agent self-improvement, AI agent learning, AI agent memory, pre-action gates, human-in-the-loop, MCP server, Claude Code, Cursor, Codex, Gemini, Amp, OpenCode, vibe coding safety, SpecLock alternative, Mem0 alternative, AI coding agent feedback loop, PreToolUse hooks, prevention rules, feedback enforcement, context engineering">
 
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 __GA_BOOTSTRAP__
 
 <script>
@@ -520,8 +520,8 @@ __GA_BOOTSTRAP__
 
 <section class="seo-pages" id="compare-guides">
   <div class="container">
-    <div class="section-label">Learn More</div>
-    <h2 class="section-title">How ThumbGate compares and when to use it</h2>
+    <div class="section-label">Popular Buyer Questions</div>
+    <h2 class="section-title">How buyers discover ThumbGate in search and AI answers</h2>
     <div class="seo-grid">
       <a class="seo-card" href="/compare/speclock">
         <div class="seo-kicker">Comparison</div>
@@ -547,6 +547,30 @@ __GA_BOOTSTRAP__
         <p>Why structured feedback memory matters more when it becomes a live gate that blocks your agent from repeating mistakes.</p>
         <div class="card-arrow">Read the integration guide →</div>
       </a>
+      <a class="seo-card" href="/guides/stop-repeated-ai-agent-mistakes">
+        <div class="seo-kicker">Problem Guide</div>
+        <h3>How to Stop AI Agents From Repeating Mistakes</h3>
+        <p>The shortest path from “I already corrected this once” to a pre-action gate that blocks the repeat before the next tool call lands.</p>
+        <div class="card-arrow">See the fix →</div>
+      </a>
+      <a class="seo-card" href="/guides/cursor-agent-guardrails">
+        <div class="seo-kicker">Cursor</div>
+        <h3>Cursor Guardrails That Block Repeat Failures</h3>
+        <p>Why Cursor users need more than prompts when the same risky refactor, shell step, or git action keeps coming back.</p>
+        <div class="card-arrow">Read the Cursor guide →</div>
+      </a>
+      <a class="seo-card" href="/guides/codex-cli-guardrails">
+        <div class="seo-kicker">Codex</div>
+        <h3>Codex CLI Guardrails That Actually Enforce</h3>
+        <p>Turn operator feedback into searchable lessons, linked prevention rules, and a runtime stop before Codex repeats the mistake.</p>
+        <div class="card-arrow">Read the Codex guide →</div>
+      </a>
+      <a class="seo-card" href="/guides/gemini-cli-feedback-memory">
+        <div class="seo-kicker">Gemini</div>
+        <h3>Gemini CLI Memory That Leads to Enforcement</h3>
+        <p>Why Gemini CLI buyers start with memory and convert when they see how memory becomes real pre-action gates.</p>
+        <div class="card-arrow">Read the Gemini guide →</div>
+      </a>
     </div>
   </div>
 </section>
@@ -554,7 +578,7 @@ __GA_BOOTSTRAP__
 <!-- HOW IT WORKS -->
 <section class="how-it-works" id="how-it-works">
   <div class="container">
-    <div class="section-label">New in v0.9.13</div>
+    <div class="section-label">New in v1.0.0</div>
     <h2 class="section-title">Three steps to stop repeated AI failures</h2>
     <div class="steps">
       <div class="step">
@@ -811,7 +835,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v0.9.10</span>
+    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.0.0</span>
   </div>
 </footer>
 

package/public/learn/agent-harness-pattern.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>The Agent Harness Pattern: Why Your AI Needs a Seatbelt — ThumbGate</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="Tsinghua researchers formalized agent harnesses as first-class objects with contracts, verification gates, and durable state. ThumbGate implements this pattern today.">
 <meta name="keywords" content="agent harness pattern, natural language agent harness, NLAH, AI agent safety, pre-action gates, verification gates, agent contracts, ThumbGate, MCP hooks">
 <meta property="og:title" content="The Agent Harness Pattern: Why Your AI Needs a Seatbelt">

package/public/learn/ai-agent-persistent-memory.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>How to Give Your AI Coding Agent Persistent Memory Across Sessions — ThumbGate</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="AI coding agents forget everything when a session ends. Learn how to give Claude Code, Cursor, Codex, and Gemini persistent memory using an MCP memory server that survives restarts.">
 <meta name="keywords" content="ai agent memory, persistent memory, claude code memory, cursor agent memory, MCP memory server, session persistence, agent context, episodic memory, semantic memory">
 <meta property="og:title" content="How to Give Your AI Coding Agent Persistent Memory Across Sessions">

package/public/learn/mcp-pre-action-gates-explained.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>MCP Pre-Action Gates Explained — ThumbGate</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="What pre-action gates are, how they work in the Model Context Protocol, and why enforcement beats prompt rules for AI coding agent safety.">
 <meta name="keywords" content="MCP pre-action gates, PreToolUse hooks, Model Context Protocol, AI agent enforcement, Claude Code hooks, MCP server guardrails, tool call interception, ThumbGate">
 <meta property="og:title" content="MCP Pre-Action Gates Explained">

package/public/learn/stop-ai-agent-force-push.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>How to Stop AI Agents From Force-Pushing to Main — ThumbGate</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="Your AI coding agent just force-pushed to main. Again. Here is how to make that physically impossible with a pre-action gate in two minutes.">
 <meta name="keywords" content="AI agent force push, Claude Code force push prevention, git push force main, AI coding agent git safety, pre-action gates, ThumbGate">
 <meta property="og:title" content="How to Stop AI Agents From Force-Pushing to Main">

package/public/learn/vibe-coding-safety-net.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>The Vibe Coding Safety Net You Are Missing — ThumbGate</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="Vibe coding is fast until your AI agent deletes a production table or rewrites a file you did not ask it to touch. Add guardrails without slowing down.">
 <meta name="keywords" content="vibe coding safety, vibe coding guardrails, AI coding mistakes, Claude Code safety net, Cursor agent guardrails, AI agent enforcement, ThumbGate">
 <meta property="og:title" content="The Vibe Coding Safety Net You Are Missing">

package/public/learn.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Learn — AI Agent Safety, Pre-Action Gates, and Vibe Coding Guardrails</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="Practical guides for stopping AI coding agent mistakes. Learn about pre-action gates, MCP guardrails, feedback-driven enforcement, and vibe coding safety for Claude Code, Cursor, Codex, and more.">
 <meta name="keywords" content="AI agent safety, pre-action gates, vibe coding guardrails, Claude Code mistakes, Cursor agent memory, MCP server hooks, AI coding agent feedback, ThumbGate guides">
 <meta property="og:title" content="Learn — AI Agent Safety Guides by ThumbGate">
@@ -57,6 +57,30 @@
         "position": 5,
         "url": "https://thumbgate-production.up.railway.app/learn/ai-agent-persistent-memory",
         "name": "How to Give Your AI Coding Agent Persistent Memory Across Sessions"
+      },
+      {
+        "@type": "ListItem",
+        "position": 6,
+        "url": "https://thumbgate-production.up.railway.app/guides/stop-repeated-ai-agent-mistakes",
+        "name": "How to Stop AI Coding Agents From Repeating Mistakes"
+      },
+      {
+        "@type": "ListItem",
+        "position": 7,
+        "url": "https://thumbgate-production.up.railway.app/guides/cursor-agent-guardrails",
+        "name": "Cursor Guardrails That Block Repeated Mistakes"
+      },
+      {
+        "@type": "ListItem",
+        "position": 8,
+        "url": "https://thumbgate-production.up.railway.app/guides/codex-cli-guardrails",
+        "name": "Codex CLI Guardrails That Actually Enforce"
+      },
+      {
+        "@type": "ListItem",
+        "position": 9,
+        "url": "https://thumbgate-production.up.railway.app/guides/gemini-cli-feedback-memory",
+        "name": "Gemini CLI Feedback Memory That Leads to Enforcement"
       }
     ]
   }
@@ -86,6 +110,7 @@
   h2 { font-size: 1.5rem; margin: 2.5rem 0 1rem; color: var(--cyan); }
   p { color: var(--text); margin-bottom: 0.75rem; }
   .hero-sub { color: var(--muted); font-size: 1.1rem; max-width: 600px; margin-bottom: 2rem; }
+  .section-intro { color: var(--muted); margin-bottom: 1rem; }
 
   .article-grid { display: grid; grid-template-columns: 1fr; gap: 24px; margin-top: 2rem; }
   .article-card {
@@ -202,6 +227,42 @@
     </a>
   </div>
 
+  <h2>Popular buyer questions</h2>
+  <p class="section-intro">These are the high-intent guides for buyers who already know the pain and want to understand where ThumbGate fits fast.</p>
+  <div class="article-grid">
+    <a href="/guides/stop-repeated-ai-agent-mistakes" class="article-card">
+      <h3>How to Stop AI Coding Agents From Repeating Mistakes</h3>
+      <p>The fastest explanation of why memory alone is not enough when your agent keeps making the same bad move twice.</p>
+      <span class="article-tag">Repeat Failures</span>
+      <span class="article-tag">Guardrails</span>
+      <span class="article-tag">Buyer Guide</span>
+    </a>
+
+    <a href="/guides/cursor-agent-guardrails" class="article-card">
+      <h3>Cursor Guardrails That Block Repeated Mistakes</h3>
+      <p>For Cursor users who need to keep speed while adding a runtime enforcement layer that does more than prompt politely.</p>
+      <span class="article-tag">Cursor</span>
+      <span class="article-tag">Guardrails</span>
+      <span class="article-tag">Integration</span>
+    </a>
+
+    <a href="/guides/codex-cli-guardrails" class="article-card">
+      <h3>Codex CLI Guardrails That Actually Enforce</h3>
+      <p>Why operators looking for Codex CLI guardrails are really looking for a feedback-to-enforcement loop they can trust.</p>
+      <span class="article-tag">Codex</span>
+      <span class="article-tag">CLI</span>
+      <span class="article-tag">Reliability</span>
+    </a>
+
+    <a href="/guides/gemini-cli-feedback-memory" class="article-card">
+      <h3>Gemini CLI Feedback Memory That Leads to Enforcement</h3>
+      <p>A memory-first buyer path for Gemini CLI users who will eventually care about gates, proof, and operational control.</p>
+      <span class="article-tag">Gemini</span>
+      <span class="article-tag">Memory</span>
+      <span class="article-tag">Enforcement</span>
+    </a>
+  </div>
+
   <div class="cta-section">
     <h2 style="color:var(--text);font-size:1.3rem;margin:0 0 8px;">Ready to try it?</h2>
     <p>One command. Works with Claude Code, Cursor, Codex, Gemini, Amp, and any MCP agent.</p>

package/public/lessons.html

@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>ThumbGate — Lessons Learned</title>
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 <style>
   *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
   :root {

package/public/pro.html

@@ -13,7 +13,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <link rel="canonical" href="__APP_ORIGIN__/pro">
 <meta name="keywords" content="ThumbGate Pro, AI agent reliability, pre-action gates, DPO export, local dashboard, review-ready evidence, Claude Code reliability, Codex reliability, Cursor reliability">
 
-<script defer data-domain="thumbgate-production.up.railway.app" data-api="/api/event" src="/js/analytics.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 __GA_BOOTSTRAP__
 
 <script>

package/scripts/agent-security-hardening.js

@@ -84,10 +84,10 @@ function getCredentialAudit({ periodHours = 24 } = {}) {
 
 // MCP profile tool allowlists (loaded from config or defaults)
 const PROFILE_ALLOWLISTS = {
-  essential: new Set(['capture_feedback', 'recall', 'search_lessons', 'search_thumbgate', 'prevention_rules', 'enforcement_matrix', 'feedback_stats', 'estimate_uncertainty', 'org_dashboard', 'set_task_scope', 'get_scope_state', 'set_branch_governance', 'get_branch_governance', 'approve_protected_action', 'check_operational_integrity']),
-  readonly: new Set(['recall', 'feedback_summary', 'search_lessons', 'verify_claim', 'gate_stats', 'search_thumbgate', 'feedback_stats', 'estimate_uncertainty', 'org_dashboard', 'get_scope_state', 'get_branch_governance', 'check_operational_integrity']),
-  locked: new Set(['feedback_summary', 'search_lessons', 'diagnose_failure', 'list_intents', 'plan_intent', 'list_harnesses', 'verify_claim', 'get_scope_state', 'get_branch_governance', 'check_operational_integrity']),
-  commerce: new Set(['capture_feedback', 'recall', 'search_thumbgate', 'commerce_recall', 'track_action', 'verify_claim', 'feedback_stats', 'set_task_scope', 'get_scope_state', 'set_branch_governance', 'get_branch_governance', 'approve_protected_action', 'check_operational_integrity']),
+  essential: new Set(['capture_feedback', 'recall', 'search_lessons', 'search_thumbgate', 'prevention_rules', 'enforcement_matrix', 'feedback_stats', 'estimate_uncertainty', 'org_dashboard', 'set_task_scope', 'get_scope_state', 'set_branch_governance', 'get_branch_governance', 'approve_protected_action', 'check_operational_integrity', 'workflow_sentinel']),
+  readonly: new Set(['recall', 'feedback_summary', 'search_lessons', 'verify_claim', 'gate_stats', 'search_thumbgate', 'feedback_stats', 'estimate_uncertainty', 'org_dashboard', 'get_scope_state', 'get_branch_governance', 'check_operational_integrity', 'workflow_sentinel']),
+  locked: new Set(['feedback_summary', 'search_lessons', 'diagnose_failure', 'list_intents', 'plan_intent', 'list_harnesses', 'verify_claim', 'get_scope_state', 'get_branch_governance', 'check_operational_integrity', 'workflow_sentinel']),
+  commerce: new Set(['capture_feedback', 'recall', 'search_thumbgate', 'commerce_recall', 'track_action', 'verify_claim', 'feedback_stats', 'set_task_scope', 'get_scope_state', 'set_branch_governance', 'get_branch_governance', 'approve_protected_action', 'check_operational_integrity', 'workflow_sentinel']),
 };
 
 /**