thumbgate 1.16.12 → 1.16.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.16.12",
+  "version": "1.16.19",
   "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -45,15 +45,18 @@
     "public/pro.html",
     "scripts/access-anomaly-detector.js",
     "scripts/agent-audit-trace.js",
+    "scripts/agent-design-governance.js",
     "scripts/agent-memory-lifecycle.js",
     "scripts/agent-readiness.js",
     "scripts/agent-readiness-plan.js",
+    "scripts/agent-reasoning-traces.js",
+    "scripts/agent-reward-model.js",
+    "scripts/agent-stack-survival-audit.js",
     "scripts/agentic-data-pipeline.js",
-    "scripts/agents-sdk-sandbox-plan.js",
-    "scripts/ai-org-governance.js",
+    "scripts/ai-engineering-stack-guardrails.js",
     "scripts/ai-search-distribution.js",
     "scripts/analytics-window.js",
-    "scripts/artifact-agent-plan.js",
+    "scripts/chatgpt-ads-readiness-pack.js",
     "scripts/autoresearch-runner.js",
     "scripts/async-job-runner.js",
     "scripts/audit-trail.js",
@@ -66,6 +69,7 @@
     "scripts/bot-detection.js",
     "scripts/bot-detector.js",
     "scripts/build-metadata.js",
+    "scripts/chatgpt-ads-readiness-pack.js",
     "scripts/claude-feedback-sync.js",
     "scripts/cli-demo.js",
     "scripts/cli-feedback.js",
@@ -75,6 +79,7 @@
     "scripts/cloudflare-dynamic-sandbox.js",
     "scripts/code-mode-mcp-plan.js",
     "scripts/code-reasoning.js",
+    "scripts/code-graph-guardrails.js",
     "scripts/codegraph-context.js",
     "scripts/commercial-offer.js",
     "scripts/context-manager.js",
@@ -87,13 +92,12 @@
     "scripts/dashboard.js",
     "scripts/decision-journal.js",
     "scripts/durability/step.js",
+    "scripts/deepseek-v4-runtime-guardrails.js",
     "scripts/docker-sandbox-planner.js",
     "scripts/document-intake.js",
     "scripts/document-workflow-governance.js",
-    "scripts/enterprise-agent-rollout.js",
     "scripts/evolution-state.js",
     "scripts/experiment-tracker.js",
-    "scripts/experience-replay-governance.js",
     "scripts/explore-subcommands.js",
     "scripts/explore.js",
     "scripts/export-databricks-bundle.js",
@@ -112,6 +116,7 @@
     "scripts/gate-stats.js",
     "scripts/gate-templates.js",
     "scripts/gates-engine.js",
+    "scripts/gemini-embedding-policy.js",
     "scripts/growth-campaigns.js",
     "scripts/harness-selector.js",
     "scripts/hf-papers.js",
@@ -122,27 +127,27 @@
     "scripts/hybrid-supervisor-agent.js",
     "scripts/install-mcp.js",
     "scripts/inference-cache-policy.js",
-    "scripts/inference-economics.js",
     "scripts/internal-agent-bootstrap.js",
     "scripts/intervention-policy.js",
     "scripts/jsonl-watcher.js",
+    "scripts/judge-reward-function.js",
     "scripts/lesson-canonical.js",
     "scripts/lesson-db.js",
     "scripts/lesson-inference.js",
     "scripts/lesson-rotation.js",
     "scripts/lesson-search.js",
     "scripts/lesson-synthesis.js",
-    "scripts/knowledge-layer-plan.js",
     "scripts/rule-validator.js",
     "scripts/license.js",
     "scripts/llm-client.js",
+    "scripts/llm-behavior-monitor.js",
     "scripts/mailer/index.js",
     "scripts/mailer/resend-mailer.js",
     "scripts/local-model-profile.js",
+    "scripts/long-running-agent-context-guardrails.js",
     "scripts/mcp-config.js",
     "scripts/mcp-policy.js",
     "scripts/mcp-transport-strategy.js",
-    "scripts/memory-store-governance.js",
     "scripts/memory-firewall.js",
     "scripts/meta-agent-loop.js",
     "scripts/model-access-eligibility.js",
@@ -151,6 +156,7 @@
     "scripts/native-messaging-audit.js",
     "scripts/natural-language-harness.js",
     "scripts/obsidian-export.js",
+    "scripts/oss-pr-opportunity-scout.js",
     "scripts/otel-declarative-config.js",
     "scripts/operational-integrity.js",
     "scripts/perplexity-client.js",
@@ -158,16 +164,20 @@
     "scripts/private-core-boundary.js",
     "scripts/pro-local-dashboard.js",
     "scripts/problem-detail.js",
+    "scripts/proactive-agent-eval-guardrails.js",
     "scripts/product-feedback.js",
+    "scripts/prompting-operating-system.js",
     "scripts/provider-action-normalizer.js",
     "scripts/profile-router.js",
     "scripts/prompt-programs.js",
     "scripts/prompt-eval.js",
     "scripts/prompt-guard.js",
-    "scripts/post-training-governance.js",
-    "scripts/production-agent-readiness.js",
+    "scripts/proxy-pointer-rag-guardrails.js",
+    "scripts/rag-precision-guardrails.js",
     "scripts/published-cli.js",
     "scripts/rate-limiter.js",
+    "scripts/reasoning-efficiency-guardrails.js",
+    "scripts/reward-hacking-guardrails.js",
     "scripts/risk-scorer.js",
     "scripts/rlaif-self-audit.js",
     "scripts/rubric-engine.js",
@@ -175,13 +185,13 @@
     "scripts/security-scanner.js",
     "scripts/self-distill-agent.js",
     "scripts/self-heal.js",
-    "scripts/scaling-law-claims.js",
     "scripts/semantic-dedup.js",
     "scripts/semantic-layer.js",
     "scripts/seo-gsd.js",
     "scripts/settings-hierarchy.js",
     "scripts/skill-generator.js",
     "scripts/skill-rag-router.js",
+    "scripts/single-use-credential-gate.js",
     "scripts/slo-alert-engine.js",
     "scripts/spec-gate.js",
     "scripts/statusline-cache-path.js",
@@ -192,7 +202,7 @@
     "scripts/statusline-meta.js",
     "scripts/statusline-tower.js",
     "scripts/statusline.sh",
-    "scripts/student-consistent-training.js",
+    "scripts/structured-prompt-driven.js",
     "scripts/synthetic-data-provenance.js",
     "scripts/task-context-result.js",
     "scripts/telemetry-analytics.js",
@@ -201,6 +211,7 @@
     "scripts/token-tco.js",
     "scripts/token-savings.js",
     "scripts/tool-registry.js",
+    "scripts/upstream-contribution-engine.js",
     "scripts/user-profile.js",
     "scripts/validate-workflow-contract.js",
     "scripts/vector-store.js",
@@ -235,6 +246,8 @@
     "cfo:report": "node bin/cli.js cfo",
     "creator:links": "node scripts/creator-campaigns.js",
     "stripe:live": "node scripts/stripe-live-status.js",
+    "stripe:webhook:audit": "node scripts/rotate-stripe-webhook-secret.js --audit",
+    "stripe:webhook:disable-legacy": "node scripts/rotate-stripe-webhook-secret.js --disable-legacy",
     "gtm:revenue-loop": "node scripts/autonomous-sales-agent.js",
     "gtm:aiventyx": "node scripts/aiventyx-marketplace-plan.js",
     "gtm:chatgpt": "node scripts/chatgpt-gpt-revenue-pack.js",
@@ -242,6 +255,8 @@
     "gtm:linkedin": "node scripts/linkedin-workflow-hardening-pack.js",
     "gtm:roo-sunset": "node scripts/roo-sunset-demand-pack.js",
     "gtm:reddit": "node scripts/reddit-dm-workflow-hardening-pack.js",
+    "medium:weekly:draft": "node scripts/medium-weekly.js --write",
+    "medium:weekly:schedule": "node scripts/medium-weekly.js --schedule",
     "sales:pipeline": "node scripts/sales-pipeline.js",
     "social:prepare": "node scripts/social-pipeline.js prepare",
     "social:post": "node scripts/social-pipeline.js post",
@@ -267,6 +282,26 @@
     "session:capture": "node scripts/session-episode-store.js capture",
     "session:patterns": "node scripts/session-episode-store.js patterns",
     "session:history": "node scripts/session-episode-store.js history",
+    "session:reward": "node scripts/agent-reward-model.js report",
+    "session:reward:pairs": "node scripts/agent-reward-model.js pairs",
+    "session:reward:gates": "node scripts/agent-reward-model.js gates",
+    "session:traces": "node scripts/agent-reasoning-traces.js report",
+    "session:traces:json": "node scripts/agent-reasoning-traces.js json",
+    "session:traces:eval": "node scripts/agent-reasoning-traces.js eval",
+    "session:traces:rlsd": "node scripts/agent-reasoning-traces.js rlsd",
+    "judge:reward": "node scripts/judge-reward-function.js report",
+    "judge:reward:json": "node scripts/judge-reward-function.js json",
+    "judge:reward:prompt": "node scripts/judge-reward-function.js prompt",
+    "llm:behavior": "node scripts/llm-behavior-monitor.js report",
+    "llm:behavior:json": "node scripts/llm-behavior-monitor.js json",
+    "prompt:plan": "node scripts/prompting-operating-system.js plan",
+    "prompt:plan:json": "node scripts/prompting-operating-system.js json",
+    "credentials:plan": "node scripts/single-use-credential-gate.js plan",
+    "credentials:plan:json": "node scripts/single-use-credential-gate.js json",
+    "spdd:canvas": "node scripts/structured-prompt-driven.js canvas",
+    "spdd:canvas:json": "node scripts/structured-prompt-driven.js json",
+    "stack:survival": "node scripts/agent-stack-survival-audit.js report",
+    "stack:survival:json": "node scripts/agent-stack-survival-audit.js json",
     "spec:check": "node scripts/spec-gate.js check",
     "spec:gates": "node scripts/spec-gate.js gates",
     "spec:audit": "node scripts/spec-gate.js audit",
@@ -275,9 +310,29 @@
     "trace:eval": "node scripts/decision-trace.js eval",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:post-everywhere-zernio-default && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:public-core-boundary",
+    "social:reply-monitor:install-reddit": "node scripts/reddit-monitor-launchd.js install",
+    "social:reply-monitor:bluesky": "node scripts/social-reply-monitor-bluesky.js",
+    "social:reply-monitor:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --dry-run",
+    "social:reply-monitor:install-bluesky": "node scripts/bluesky-monitor-launchd.js install",
+    "social:reply-monitor:bluesky:status": "node scripts/bluesky-monitor-launchd.js status",
+    "social:prospect:bluesky": "node scripts/social-bluesky-prospecting.js",
+    "social:prospect:bluesky:dry": "node scripts/social-bluesky-prospecting.js --dry-run",
+    "social:reply-publish:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --publish-approved --dry-run",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:post-everywhere-zernio-default && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary",
     "test:swarm-coordinator": "node --test tests/swarm-coordinator.test.js",
     "test:session-report": "node --test tests/session-report.test.js",
+    "test:agent-reasoning-traces": "node --test tests/agent-reasoning-traces.test.js tests/agent-stack-survival-audit.test.js",
+    "test:gemini-embedding-policy": "node --test tests/gemini-embedding-policy.test.js",
+    "test:agent-design-governance": "node --test tests/agent-design-governance.test.js",
+    "test:proactive-agent-eval-guardrails": "node --test tests/proactive-agent-eval-guardrails.test.js",
+    "test:reward-hacking-guardrails": "node --test tests/reward-hacking-guardrails.test.js",
+    "test:oss-pr-opportunity-scout": "node --test tests/oss-pr-opportunity-scout.test.js",
+    "test:chatgpt-ads-readiness-pack": "node --test tests/chatgpt-ads-readiness-pack.test.js",
+    "test:judge-reward": "node --test tests/judge-reward-function.test.js",
+    "test:llm-behavior-monitor": "node --test tests/llm-behavior-monitor.test.js",
+    "test:prompting-os": "node --test tests/prompting-operating-system.test.js",
+    "test:single-use-credential-gate": "node --test tests/single-use-credential-gate.test.js",
+    "test:structured-prompt-driven": "node --test tests/structured-prompt-driven.test.js",
     "test:require-evidence-gate": "node --test tests/require-evidence-gate.test.js",
     "test:rule-validator": "node --test tests/rule-validator.test.js",
     "test:session-health": "node --test tests/session-health-sensor.test.js",
@@ -342,10 +397,10 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-events-sse.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-events-sse.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/gemini-embedding-policy.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
     "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-packaged-runtime.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
-    "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
+    "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js tests/agent-reward-model.test.js",
     "test:attribution": "node --test tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js",
     "test:quality": "node --test tests/validate-feedback.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
@@ -355,7 +410,7 @@
     "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/may-2026-revenue-machine.test.js tests/customer-discovery-sprint.test.js tests/revenue-pack-utils.test.js tests/aiventyx-marketplace-plan.test.js tests/cursor-marketplace-revenue-pack.test.js tests/codex-marketplace-revenue-pack.test.js tests/codex-plugin-revenue-pack.test.js tests/gemini-cli-demand-pack.test.js tests/roo-sunset-demand-pack.test.js tests/linkedin-workflow-hardening-pack.test.js tests/chatgpt-gpt-revenue-pack.test.js tests/mcp-directory-revenue-pack.test.js tests/autonomous-sales-agent.test.js tests/reddit-dm-workflow-hardening-pack.test.js tests/sales-pipeline.test.js tests/reddit-dm-outreach.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js tests/guide-conversion-path.test.js tests/roo-sunset-marketing.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js",
     "test:billing": "node --test tests/billing.test.js tests/stripe-sync-product-images.test.js",
-    "test:cli": "node --test tests/analytics-report.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js",
+    "test:cli": "node --test tests/analytics-report.test.js tests/agent-design-governance.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js",
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
     "test:autoresearch": "node --test tests/autoresearch.test.js",
@@ -483,9 +538,9 @@
     "test:publish-thumbgate-launch": "node --test tests/publish-thumbgate-launch.test.js",
     "test:reconcile-thumbgate-campaign": "node --test tests/reconcile-thumbgate-campaign.test.js",
     "test:schedule-thumbgate-campaign": "node --test tests/schedule-thumbgate-campaign.test.js",
-    "test:social-reply-monitor": "node --test tests/social-reply-monitor.test.js",
+    "test:social-reply-monitor": "node --test tests/social-reply-monitor.test.js tests/reddit-monitor-launchd.test.js",
     "test:bluesky-atproto": "node --test tests/bluesky-atproto.test.js",
-    "test:social-reply-monitor-bluesky": "node --test tests/social-reply-monitor-bluesky.test.js",
+    "test:social-reply-monitor-bluesky": "node --test tests/social-reply-monitor-bluesky.test.js tests/bluesky-monitor-launchd.test.js tests/social-bluesky-prospecting.test.js",
     "test:bluesky-delete-replies": "node --test tests/bluesky-delete-replies.test.js",
     "test:architect-kit-memory-bridge": "node --test tests/architect-kit-memory-bridge.test.js",
     "test:sonar-review-hotspots": "node --test tests/sonar-review-hotspots.test.js",
@@ -530,7 +585,8 @@
     "test:gate-coherence": "node --test tests/gate-coherence.test.js",
     "test:gate-eval": "node --test tests/gate-eval.test.js",
     "gate-eval:ci": "node scripts/gate-eval.js run",
-    "test:high-roi": "node --test tests/high-roi.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js",
+    "test:ai-engineering-stack-guardrails": "node --test tests/ai-engineering-stack-guardrails.test.js",
+    "test:high-roi": "node --test tests/high-roi.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js tests/code-graph-guardrails.test.js tests/proxy-pointer-rag-guardrails.test.js tests/rag-precision-guardrails.test.js tests/ai-engineering-stack-guardrails.test.js tests/long-running-agent-context-guardrails.test.js tests/reasoning-efficiency-guardrails.test.js tests/deepseek-v4-runtime-guardrails.test.js tests/upstream-contribution-engine.test.js tests/proactive-agent-eval-guardrails.test.js tests/reward-hacking-guardrails.test.js tests/chatgpt-ads-readiness-pack.test.js tests/oss-pr-opportunity-scout.test.js tests/agent-design-governance.test.js tests/gemini-embedding-policy.test.js",
     "test:public-static-assets": "node --test tests/public-static-assets.test.js",
     "test:token-savings": "node --test tests/token-savings.test.js",
     "test:numbers-page": "node --test tests/numbers-page.test.js",
@@ -538,7 +594,8 @@
     "workflow:autonomous": "node scripts/autonomous-workflow.js",
     "test:lesson-export-import": "node --test tests/lesson-export-import.test.js",
     "test:landing-page-claims": "node --test tests/landing-page-claims.test.js",
-    "test:competitive-positioning-marketing": "node --test tests/competitive-positioning-marketing.test.js",
+    "test:competitive-positioning-marketing": "node --test tests/competitive-positioning-marketing.test.js tests/knowledge-graph-guardrails.test.js tests/supply-chain-guardrails.test.js",
+    "test:medium-weekly": "node --test tests/medium-weekly.test.js",
     "test:dashboard-deeplink-e2e": "node --test tests/dashboard-deeplink-e2e.test.js",
     "test:public-package-parity": "node --test tests/public-package-parity.test.js",
     "prepare": "bash bin/install-hooks.sh >/dev/null 2>&1 || true",
@@ -627,6 +684,6 @@
     "@changesets/changelog-github": "^0.6.0",
     "@changesets/cli": "^2.31.0",
     "c8": "^11.0.0",
-    "undici": "^8.1.0"
+    "undici": "^8.2.0"
   }
 }

package/public/compare.html

@@ -249,6 +249,12 @@
   <p><a href="/compare/ai-experience-orchestration" class="cta">Read orchestration vs enforcement</a></p>
 </div>
 
+<div class="card">
+  <h3>Comparing custom AI agent agencies?</h3>
+  <p>AI automation agencies validate the same buyer pain: production agents need safe action execution, policy checks, observability, and approval boundaries. ThumbGate owns the productized enforcement layer under those workflows.</p>
+  <p><a href="/compare/agentix-labs" class="cta">Read ThumbGate vs Agentix Labs</a></p>
+</div>
+
 <h2>How It Works</h2>
 <div class="step-grid">
   <div class="step-card">

package/public/index.html

@@ -397,6 +397,15 @@ __GA_BOOTSTRAP__
   .btn-pro-page:hover { opacity: 0.9; transform: translateY(-1px); }
   .btn-gpt-page { display: inline-flex; align-items: center; justify-content: center; padding: 14px 32px; background: var(--green); color: #06120a; border-radius: 8px; text-decoration: none; font-size: 16px; font-weight: 800; box-shadow: 0 0 0 1px rgba(74,222,128,0.32), 0 12px 32px rgba(74,222,128,0.18); transition: opacity 0.15s, transform 0.15s; }
   .btn-gpt-page:hover { opacity: 0.92; transform: translateY(-1px); }
+  .hero-paid-path { max-width: 780px; margin: 0 auto 28px; padding: 16px; border: 1px solid rgba(74,222,128,0.28); border-radius: 12px; background: rgba(74,222,128,0.07); display: grid; grid-template-columns: minmax(0,1fr) auto; gap: 14px; align-items: center; text-align: left; }
+  .hero-paid-path strong { display: block; color: var(--text); font-size: 15px; line-height: 1.3; margin-bottom: 3px; }
+  .hero-paid-path span { color: var(--text-muted); font-size: 13px; line-height: 1.45; }
+  .hero-paid-actions { display: flex; flex-wrap: wrap; gap: 8px; justify-content: flex-end; }
+  .hero-paid-actions a { display: inline-flex; align-items: center; justify-content: center; min-height: 38px; padding: 9px 13px; border-radius: 999px; text-decoration: none; font-size: 13px; font-weight: 800; white-space: nowrap; }
+  .hero-paid-actions .starter { background: #facc15; color: #17110a; border: 1px solid rgba(250,204,21,0.55); }
+  .hero-paid-actions .diagnostic { background: var(--green); color: #06120a; border: 1px solid rgba(74,222,128,0.45); }
+  .hero-paid-actions .sprint { color: var(--green); border: 1px solid rgba(74,222,128,0.45); background: rgba(17,17,19,0.72); }
+  .hero-paid-actions .intake { color: var(--cyan); border: 1px solid rgba(34,211,238,0.45); background: rgba(34,211,238,0.1); }
   .hero-paid-note { font-size: 14px; color: var(--text-muted); max-width: 720px; margin: 0 auto 24px; }
   .hero-paid-note strong { color: var(--text); }
   .hero-install { background: var(--bg-raised); border: 1px solid var(--border); border-radius: 10px; padding: 14px 24px; display: inline-flex; align-items: center; gap: 12px; font-family: var(--mono); font-size: 15px; margin-bottom: 40px; cursor: pointer; transition: border-color 0.2s; position: relative; max-width: 100%; overflow-x: auto; }
@@ -552,6 +561,10 @@ __GA_BOOTSTRAP__
   .team-paid-price { color: var(--green); font-weight: 800; font-size: 18px; }
   .team-paid-link { display: block; text-align: center; padding: 10px 12px; background: rgba(74,222,128,0.16); color: var(--green); border: 1px solid rgba(74,222,128,0.45); border-radius: 8px; text-decoration: none; font-size: 13px; font-weight: 700; }
   .team-paid-link:hover { border-color: var(--green); transform: translateY(-1px); }
+  .team-intake-recovery { margin: 0 0 16px; padding: 13px 14px; border: 1px solid rgba(34,211,238,0.28); border-radius: 12px; background: rgba(34,211,238,0.08); display: flex; align-items: center; justify-content: space-between; gap: 14px; text-align: left; }
+  .team-intake-recovery strong { display: block; color: var(--text); font-size: 13px; margin-bottom: 2px; }
+  .team-intake-recovery span { display: block; color: var(--text-dim); font-size: 12px; line-height: 1.45; }
+  .team-intake-recovery a { flex: 0 0 auto; display: inline-flex; align-items: center; justify-content: center; min-height: 34px; padding: 8px 12px; border-radius: 999px; border: 1px solid rgba(34,211,238,0.45); color: var(--cyan); background: rgba(17,17,19,0.68); text-decoration: none; font-size: 12px; font-weight: 800; white-space: nowrap; }
   .team-form { max-width: 860px; margin: 24px auto 0; display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 14px; }
   .team-intake-panel .team-form { max-width: none; margin: 0; }
   .team-form .full { grid-column: 1 / -1; }
@@ -618,10 +631,15 @@ __GA_BOOTSTRAP__
     .team-intake-panel-head { display: block; }
     .team-intake-badge { display: inline-block; margin-bottom: 10px; }
     .team-paid-path { grid-template-columns: 1fr; }
+    .team-intake-recovery { align-items: stretch; flex-direction: column; text-align: center; }
+    .team-intake-recovery a { width: 100%; }
     .team-form { grid-template-columns: 1fr; }
     .hero { padding: 72px 0 56px; }
     .hero-actions { flex-direction: column; }
     .hero-actions a { width: 100%; }
+    .hero-paid-path { grid-template-columns: 1fr; text-align: center; }
+    .hero-paid-actions { justify-content: center; }
+    .hero-paid-actions a { width: 100%; }
     .nav-links a:not(.nav-cta) { display: none; }
     .proof-bar { gap: 8px; justify-content: flex-start; }
     .proof-bar a { width: 100%; min-height: 42px; white-space: normal; }
@@ -702,6 +720,20 @@ __GA_BOOTSTRAP__
       <p style="margin:14px 0 0;font-size:11px;color:var(--text-muted);text-align:center;">No credit card for 7-day trial · cancel anytime · your rules and captures stay local. <a href="/go/install" style="color:var(--cyan);text-decoration:none;">Prefer free? Install CLI →</a></p>
     </div>
 
+    <div class="hero-paid-path" aria-label="Paid AI agent governance sprint checkout options">
+      <div>
+        <strong>Need buyer-ready proof today?</strong>
+        <span>Send one messy AI-agent workflow. We turn it into clear rules, examples, and pre-action checks, plus AI Agent Governance Sprint approval boundaries and rollback safety before it touches developer-machine risk surfaces.</span>
+      </div>
+      <div class="hero-paid-actions">
+        <a class="starter" href="https://buy.stripe.com/7sY4gzgH24r49G17mb3sI0g" onclick="sendFirstPartyTelemetry('founder_workflow_diagnostic_checkout_started',{ctaId:'hero_founder_workflow_diagnostic_checkout',ctaPlacement:'hero_paid_path',planId:'team',offer:'founder_workflow_diagnostic',price:99});sendGa4Event('begin_checkout',{currency:'USD',value:99,items:[{item_id:'founder_workflow_diagnostic',item_name:'Founder Workflow Diagnostic'}]});">Pay $99 diagnostic &rarr;</a>
+        <a class="diagnostic" href="__SPRINT_DIAGNOSTIC_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_diagnostic_checkout_started',{ctaId:'hero_workflow_sprint_diagnostic_checkout',ctaPlacement:'hero_paid_path',planId:'team',offer:'workflow_hardening_diagnostic',price:sprintDiagnosticPriceDollars});sendGa4Event('begin_checkout',{currency:'USD',value:sprintDiagnosticPriceDollars,items:[{item_id:'workflow_hardening_diagnostic',item_name:'Workflow Hardening Diagnostic'}]});">Pay $499 diagnostic &rarr;</a>
+        <a class="sprint" href="__WORKFLOW_SPRINT_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_checkout_started',{ctaId:'hero_workflow_sprint_checkout',ctaPlacement:'hero_paid_path',planId:'team',offer:'workflow_hardening_sprint',price:workflowSprintPriceDollars});sendGa4Event('begin_checkout',{currency:'USD',value:workflowSprintPriceDollars,items:[{item_id:'workflow_hardening_sprint',item_name:'Workflow Hardening Sprint'}]});">Pay $1500 sprint &rarr;</a>
+        <a class="intake" href="#workflow-sprint-intake" onclick="sendFirstPartyTelemetry('workflow_sprint_recovery_intake_clicked',{ctaId:'hero_workflow_sprint_recovery_intake',ctaPlacement:'hero_paid_path',planId:'team',offer:'workflow_hardening_sprint',reason:'not_ready_to_pay'});sendGa4Event('generate_lead',{currency:'USD',value:0,method:'workflow_sprint_recovery_intake'});">Send workflow first &rarr;</a>
+        <a class="starter" href="/guides/ai-agent-governance-sprint">See sprint scope &rarr;</a>
+      </div>
+    </div>
+
     <a href="/dashboard" class="hero-dashboard-preview" style="display:block;max-width:620px;margin:0 auto 28px;background:linear-gradient(135deg,#0d1220 0%,#121a2e 100%);border:1px solid rgba(34,211,238,0.35);border-radius:12px;padding:20px 24px;box-shadow:0 0 48px rgba(34,211,238,0.15);font-family:var(--mono);text-align:left;text-decoration:none;color:inherit;" title="Open your live dashboard">
       <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:14px;font-size:11px;letter-spacing:0.08em;text-transform:uppercase;color:var(--text-muted);">
         <span>Your dashboard · <span style="color:#eab308;background:rgba(234,179,8,0.1);padding:2px 6px;border-radius:3px;letter-spacing:0.04em;">Sample</span></span>
@@ -984,6 +1016,10 @@ __GA_BOOTSTRAP__
         <h3>🧱 Isolated Execution Lanes</h3>
         <p>High-risk local autonomy can route into Docker Sandboxes, while hosted team automations use a signed sandbox dispatch lane instead of running loose on a shared host.</p>
       </div>
+      <div class="agent-card">
+        <h3>Data Processing Boundaries</h3>
+        <p>Local enforcement data stays in the operator's ThumbGate feedback directory by default. Hosted checkout, intake, newsletter, team sync, and product analytics are labeled as hosted processing surfaces instead of being blurred into the local runtime.</p>
+      </div>
       <div class="agent-card">
         <h3>🧪 Thompson Sampling</h3>
         <p>Confidence tiers (none/low/medium/high) tell you when to trust the model vs fall back to rules. No guessing.</p>
@@ -1070,6 +1106,96 @@ __GA_BOOTSTRAP__
         <p>Keep global prompts lean, load MCP schemas on demand, and turn harness lessons into Pre-Action Checks that block repeat failures.</p>
         <div class="card-arrow">Audit your harness →</div>
       </a>
+      <a class="seo-card" href="/guides/code-knowledge-graph-guardrails">
+        <div class="seo-kicker">Knowledge Graphs</div>
+        <h3>Code Knowledge Graph Guardrails</h3>
+        <p>Use code graphs for context, then enforce diff-impact review, cross-layer checkpoints, and generated-artifact protection before agents act.</p>
+        <div class="card-arrow">Turn graph context into gates →</div>
+      </a>
+      <a class="seo-card" href="/guides/developer-machine-supply-chain-guardrails">
+        <div class="seo-kicker">Supply Chain</div>
+        <h3>Developer Machine Supply Chain Guardrails</h3>
+        <p>Stop AI assistants from amplifying npm, PyPI, Docker, and CLI compromise paths that harvest local developer credentials.</p>
+        <div class="card-arrow">Gate risky local execution →</div>
+      </a>
+      <a class="seo-card" href="/guides/prompt-tricks-to-workflow-rules">
+        <div class="seo-kicker">Prompt ROI</div>
+        <h3>Prompt Tricks Are Not Enough</h3>
+        <p>Turn clear instructions, examples, and repeated AI failures into workflow rules that run before the next risky tool call.</p>
+        <div class="card-arrow">Convert prompts into gates →</div>
+      </a>
+      <a class="seo-card" href="/guides/semantic-programmatic-seo-guardrails">
+        <div class="seo-kicker">Semantic pSEO</div>
+        <h3>Semantic Programmatic SEO Guardrails</h3>
+        <p>Scale SEO pages with authority maps, brand context governance, semantic internal links, and technical publish checks before AI content goes live.</p>
+        <div class="card-arrow">Govern scaled content →</div>
+      </a>
+      <a class="seo-card" href="/guides/proxy-pointer-rag-guardrails">
+        <div class="seo-kicker">Document RAG</div>
+        <h3>Proxy-Pointer RAG Guardrails</h3>
+        <p>Section trees, image pointers, visual-claim checks, and cross-document leakage blocks before multimodal answers ship.</p>
+        <div class="card-arrow">Ground visual answers →</div>
+      </a>
+      <a class="seo-card" href="/guides/rag-precision-tuning-guardrails">
+        <div class="seo-kicker">Retrieval Safety</div>
+        <h3>RAG Precision Tuning Guardrails</h3>
+        <p>Baseline recall, verifier coverage, and latency budgets before retrieval tuning feeds autonomous agent pipelines.</p>
+        <div class="card-arrow">Gate retrieval changes →</div>
+      </a>
+      <a class="seo-card" href="/guides/internal-ai-engineering-stack-guardrails">
+        <div class="seo-kicker">AI Stack</div>
+        <h3>Internal AI Engineering Stack Guardrails</h3>
+        <p>Gateway, MCP portal, AGENTS.md, LLM wiki, AI review, and sandbox checks before agent adoption scales.</p>
+        <div class="card-arrow">Govern the AI stack →</div>
+      </a>
+      <a class="seo-card" href="/guides/seo-agent-skills-guardrails">
+        <div class="seo-kicker">SEO Agents</div>
+        <h3>SEO Agent Skills Guardrails</h3>
+        <p>Workspace context, proof links, semantic mesh, and publish gates for AI-assisted content workflows.</p>
+        <div class="card-arrow">Govern SEO agents →</div>
+      </a>
+      <a class="seo-card" href="/compare/fallow">
+        <div class="seo-kicker">Comparison</div>
+        <h3>ThumbGate vs Fallow</h3>
+        <p>Fallow finds JS/TS code health issues. ThumbGate governs what AI agents are allowed to do next.</p>
+        <div class="card-arrow">Compare tools →</div>
+      </a>
+      <a class="seo-card" href="/guides/claude-code-skills-guardrails">
+        <div class="seo-kicker">Claude Skills</div>
+        <h3>Claude Code Skills Guardrails</h3>
+        <p>Turn skillbooks, reusable prompts, and project workflows into checks that survive beyond one session.</p>
+        <div class="card-arrow">Enforce skillbooks →</div>
+      </a>
+      <a class="seo-card" href="/guides/long-running-agent-context-management">
+        <div class="seo-kicker">Agent Context</div>
+        <h3>Long-Running Agent Context Management</h3>
+        <p>Director journals, critic reviews, credibility scores, and timelines instead of raw chat-log accumulation.</p>
+        <div class="card-arrow">Structure agent memory →</div>
+      </a>
+      <a class="seo-card" href="/guides/reasoning-compression-guardrails">
+        <div class="seo-kicker">Reasoning ROI</div>
+        <h3>Reasoning Compression Guardrails</h3>
+        <p>Verifier-backed token savings with step-level confidence checks before compressed reasoning reaches production.</p>
+        <div class="card-arrow">Gate token savings →</div>
+      </a>
+      <a class="seo-card" href="/guides/background-agent-governance">
+        <div class="seo-kicker">Background Agents</div>
+        <h3>Background Agent Governance</h3>
+        <p>Turn unattended agent PRs into a governed queue with run ledgers, pre-dispatch checks, isolated task lanes, and risk-tiered review.</p>
+        <div class="card-arrow">Govern agent PRs →</div>
+      </a>
+      <a class="seo-card" href="/guides/ai-agent-governance-sprint">
+        <div class="seo-kicker">Team Sprint</div>
+        <h3>AI Agent Governance Sprint</h3>
+        <p>Package one repo, one workflow owner, and one repeated failure into approval boundaries, rollback safety, and buyer-ready rollout proof.</p>
+        <div class="card-arrow">Start with one workflow →</div>
+      </a>
+      <a class="seo-card" href="/guides/gpt-5-5-model-evaluation">
+        <div class="seo-kicker">Model Routing</div>
+        <h3>GPT-5.5 Model Evaluation</h3>
+        <p>Benchmark GPT-5.5 for dashboard-analysis workloads before routing expensive agent work away from cheaper tiers.</p>
+        <div class="card-arrow">Evaluate frontier routing →</div>
+      </a>
       <a class="seo-card" href="/guides/ai-search-topical-presence">
         <div class="seo-kicker">AI Search</div>
         <h3>AI Search Topical Presence</h3>
@@ -1183,7 +1309,7 @@ __GA_BOOTSTRAP__
 <!-- HOW IT WORKS -->
 <section class="how-it-works" id="how-it-works">
   <div class="container">
-    <div class="section-label">New in v1.16.12</div>
+    <div class="section-label">New in v1.16.19</div>
     <h2 class="section-title">Three steps to stop repeated AI failures</h2>
     <div class="steps">
       <div class="step">
@@ -1392,10 +1518,10 @@ __GA_BOOTSTRAP__
         <div class="price-sub">3-seat minimum · One engineer's correction protects the whole team</div>
         <p style="font-size:13px;color:var(--green);margin-bottom:16px;font-weight:500;">When one engineer teaches the agent not to delete staging data, that lesson applies to every agent on the team. Stop paying the same mistake tax across different developers.</p>
         <div class="pro-upgrade-triggers" style="font-size:12px;color:#aaa;margin-bottom:12px;">
-          Start with one repo, one workflow, one repeat failure at $49/seat.
+          No self-serve trial. Start with one repo, one workflow, and one repeated failure through the sprint intake.
         </div>
         <ul>
-          <li>Workflow hardening sprint — map one painful workflow, one repeated failure, and one buyer proof review before wider rollout</li>
+          <li>AI Agent Governance Sprint — map one painful workflow, one repeated failure, approval boundaries, rollback safety, and one buyer proof review before wider rollout</li>
           <li>Shared enforcement memory — a shared lesson database where one developer's 👎 on a bad migration protects every agent on the team</li>
           <li>Team lesson export/import — export lessons from one project, import into another. Deduplication, provenance tracking, and <code>team-import</code> tagging built in. One team's hard-won lessons become every team's prevention rules</li>
           <li>Org dashboard — active agents, check hit rates, risk agents, and proof-backed team metrics in one place</li>
@@ -1416,8 +1542,8 @@ __GA_BOOTSTRAP__
 <section class="compatibility" id="workflow-sprint-intake">
   <div class="container">
     <div class="section-label">Team Pilot</div>
-    <h2 class="section-title">Start with one repo, one workflow, one repeat failure</h2>
-    <p style="color:var(--text-dim);max-width:720px;margin:0 auto 16px;">This is the fastest path to first paid value for teams. Start with one workflow, one owner, and one blocker. The intake is designed to prove that ThumbGate reduces review churn, rollout risk, or repeated agent mistakes before a wider rollout.</p>
+    <h2 class="section-title">Start the AI Agent Governance Sprint with one repeat failure</h2>
+    <p style="color:var(--text-dim);max-width:720px;margin:0 auto 16px;">This is the fastest path to first paid value for teams. Start with one repo, one workflow owner, and one blocker. The intake is designed to prove that ThumbGate reduces review churn, rollout risk, or repeated agent mistakes before a wider rollout.</p>
     <div class="team-intake-panel">
       <div class="team-intake-panel-head">
         <div>
@@ -1434,20 +1560,27 @@ __GA_BOOTSTRAP__
           </div>
           <div>
             <div class="team-paid-price">$<span data-sprint-diagnostic-price>499</span></div>
-            <a class="team-paid-link" data-sprint-diagnostic-link href="#workflow-sprint-intake">Pay for diagnostic</a>
+            <a class="team-paid-link" data-sprint-diagnostic-link href="__SPRINT_DIAGNOSTIC_CHECKOUT_URL__">Pay for diagnostic</a>
           </div>
         </div>
         <div class="team-paid-card">
           <div>
-            <h4>Workflow Hardening Sprint</h4>
-            <p>48-hour implementation sprint for one workflow owner, one blocker, one proof review, and one hardened rollout path.</p>
+            <h4>AI Agent Governance Sprint</h4>
+            <p>48-hour Workflow Hardening Sprint for one workflow owner, one blocker, approval boundaries, rollback safety, one proof review, and one hardened rollout path.</p>
           </div>
           <div>
             <div class="team-paid-price">$<span data-workflow-sprint-price>1500</span></div>
-            <a class="team-paid-link" data-workflow-sprint-link href="#workflow-sprint-intake">Pay for sprint</a>
+            <a class="team-paid-link" data-workflow-sprint-link href="__WORKFLOW_SPRINT_CHECKOUT_URL__">Pay for sprint</a>
           </div>
         </div>
       </div>
+      <div class="team-intake-recovery" aria-label="Checkout recovery path for workflow sprint buyers">
+        <div>
+          <strong>Not ready to pay from a checkout page?</strong>
+          <span>Send the workflow first. We can qualify the blocker, confirm the proof plan, and route you to the $499 diagnostic or $1500 sprint only when the scope is real.</span>
+        </div>
+        <a href="#team-pilot-intake-form" onclick="sendFirstPartyTelemetry('workflow_sprint_recovery_intake_clicked',{ctaId:'team_workflow_sprint_recovery_intake',ctaPlacement:'team_paid_path_recovery',planId:'team',offer:'workflow_hardening_sprint',reason:'checkout_abandon'});sendGa4Event('generate_lead',{currency:'USD',value:0,method:'workflow_sprint_recovery_intake'});">Send workflow first</a>
+      </div>
       <form id="team-pilot-intake-form" class="team-form" action="/v1/intake/workflow-sprint" method="POST" data-team-intake-form>
         <input type="hidden" name="ctaId" value="workflow_sprint_intake">
         <input type="hidden" name="ctaPlacement" value="team_visible_intake">
@@ -1523,7 +1656,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">What does Pro cost?</div>
-        <div class="faq-a">Pro is $19/mo or $149/yr for individual operators. Team is $49/seat/mo with a 3-seat minimum. Both start with a 7-day free trial, no credit card required.</div>
+        <div class="faq-a">Pro is $19/mo or $149/yr for individual operators and starts with a 7-day free trial, no credit card required. Team is $49/seat/mo with a 3-seat minimum and starts with the Workflow Hardening Sprint intake, not a self-serve trial.</div>
       </div>
     </div>
   </div>
@@ -1575,7 +1708,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.16.12</span>
+    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.16.19</span>
   </div>
 </footer>