thumbgate 1.16.20 → 1.16.22

package/public/pro.html

@@ -14,7 +14,6 @@ __GOOGLE_SITE_VERIFICATION_META__
 <link rel="icon" type="image/png" href="/thumbgate-icon.png">
 <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg">
 <meta property="og:image" content="/og.png">
-<meta name="keywords" content="ThumbGate Pro, AI agent reliability, pre-action checks, DPO export, local dashboard, review-ready evidence, Claude Code reliability, Codex reliability, Cursor reliability">
 
 <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
 __GA_BOOTSTRAP__
@@ -30,91 +29,14 @@ __GA_BOOTSTRAP__
 <script type="application/ld+json">
 {
   "@context": "https://schema.org",
-  "@type": "SoftwareApplication",
-  "name": "ThumbGate Pro",
-  "alternateName": "thumbgate pro",
-  "applicationCategory": "DeveloperApplication",
-  "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "description": "Paid ThumbGate lane for individual operators who want a personal local dashboard, DPO export, review-ready evidence, and founder support for risky AI coding workflows.",
-  "url": "__APP_ORIGIN__/pro",
-  "downloadUrl": "https://www.npmjs.com/package/thumbgate",
-  "dateModified": "2026-04-20",
-  "creator": {
-    "@type": "Person",
-    "name": "Igor Ganapolsky",
-    "url": "https://github.com/IgorGanapolsky",
-    "sameAs": [
-      "https://github.com/IgorGanapolsky",
-      "https://www.linkedin.com/in/igorganapolsky"
-    ]
-  },
-  "featureList": [
-    "Personal local dashboard",
-    "Visual check debugger",
-    "DPO export from real thumbs-down corrections",
-    "Auto-connect running agents after activation",
-    "Founder support on risky workflows",
-    "Model Hardening Advisor"
-  ],
-  "offers": [
-    {
-      "@type": "Offer",
-      "name": "ThumbGate Pro Monthly",
-      "price": "__PRO_PRICE_DOLLARS__",
-      "priceCurrency": "USD",
-      "url": "__APP_ORIGIN__/checkout/pro?plan_id=pro&billing_cycle=monthly&landing_path=%2Fpro",
-      "description": "Monthly Pro for individual operators who want a personal local dashboard and proof-ready exports."
-    },
-    {
-      "@type": "Offer",
-      "name": "ThumbGate Pro Annual",
-      "price": "149",
-      "priceCurrency": "USD",
-      "url": "__APP_ORIGIN__/checkout/pro?plan_id=pro&billing_cycle=annual&landing_path=%2Fpro",
-      "description": "Annual Pro for operators who want the dashboard, DPO export, and founder support at a lower effective monthly price."
-    }
-  ]
+  "@type": "SoftwareApplication", "name": "ThumbGate Pro", "applicationCategory": "DeveloperApplication", "operatingSystem": "Cross-platform, Node.js >=18.18.0", "description": "Paid ThumbGate lane for individual operators who want a personal local dashboard, DPO export, review-ready evidence, and founder support for risky AI coding workflows.", "url": "__APP_ORIGIN__/pro", "downloadUrl": "https://www.npmjs.com/package/thumbgate", "dateModified": "2026-04-20", "creator": { "@type": "Person", "name": "Igor Ganapolsky", "url": "https://github.com/IgorGanapolsky" }, "offers": [{ "@type": "Offer", "name": "ThumbGate Pro Monthly", "price": "__PRO_PRICE_DOLLARS__", "priceCurrency": "USD", "url": "__APP_ORIGIN__/checkout/pro?plan_id=pro&billing_cycle=monthly&landing_path=%2Fpro" }, { "@type": "Offer", "name": "ThumbGate Pro Annual", "price": "149", "priceCurrency": "USD", "url": "__APP_ORIGIN__/checkout/pro?plan_id=pro&billing_cycle=annual&landing_path=%2Fpro" }]
 }
 </script>
 
 <script type="application/ld+json">
 {
   "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "How is Pro different from the free install?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Free keeps the local recall, checks, and MCP workflow. Pro adds a personal local dashboard, DPO export, auto-connect for running agents, and founder support for risky workflows."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does Pro require a cloud account?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. ThumbGate Pro is still local-first for the individual operator lane. Team is the hosted rollout lane when you need shared lessons, org visibility, and rollout review views."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "What happens after checkout?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "You activate Pro, connect your personal local dashboard, and your running agents can appear automatically so you can inspect blocked actions, lessons, and exports without adding a cloud dashboard dependency."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "When should I choose Team instead of Pro?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Choose Team when one correction needs to protect multiple developers or agents, when you need a shared hosted lesson database, org dashboard visibility, or a workflow hardening pilot across shared repositories."
-      }
-    }
-  ]
+  "@type": "FAQPage", "mainEntity": [{ "@type": "Question", "name": "How is Pro different from the free install?", "acceptedAnswer": { "@type": "Answer", "text": "Free keeps local recall, checks, and MCP. Pro adds the personal dashboard, DPO export, auto-connect, and founder support." } }, { "@type": "Question", "name": "Does Pro require a cloud account?", "acceptedAnswer": { "@type": "Answer", "text": "No. Pro stays local-first; Team is the hosted rollout lane for shared lessons, org visibility, and reviews." } }, { "@type": "Question", "name": "What happens after checkout?", "acceptedAnswer": { "@type": "Answer", "text": "You activate Pro, connect the local dashboard, and inspect blocked actions, lessons, and exports." } }, { "@type": "Question", "name": "When should I choose Team instead of Pro?", "acceptedAnswer": { "@type": "Answer", "text": "Choose Team when one correction needs to protect multiple developers or agents across shared repositories." } }]
 }
 </script>
 
@@ -796,7 +718,7 @@ __GA_BOOTSTRAP__
       <a href="#pricing">Pricing</a>
       <a href="#faq">FAQ</a>
       <a href="/dashboard">Demo</a>
-      <a class="nav-cta btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_nav&utm_campaign=pro_pack&cta_id=pro_page_nav&cta_placement=nav&plan_id=pro&landing_path=%2Fpro">Start Pro Now</a>
+      <a class="nav-cta" data-quick-read-link href="https://buy.stripe.com/aFa8wPgH29Lo4lH35V3sI0w" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_nav_quick_read_checkout',price:19});sendGa4Event('begin_checkout',{currency:'USD',value:19,items:[{item_id:'quick_read',item_name:'AI Agent Failure Quick Read'}]});">Pay $19 quick read</a>
     </div>
   </div>
 </nav>
@@ -807,8 +729,8 @@ __GA_BOOTSTRAP__
       <div class="eyebrow">Paid lane for individual operators</div>
       <h1>Buy the operator loop that proves your AI agent stopped repeating the mistake.</h1>
       <p style="font-size:13px;opacity:0.8;margin-bottom:0.5rem;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
-      <p>ThumbGate Pro is the fastest paid path for one operator who already hit a repeated AI-agent failure and now needs proof: what was blocked, why it was blocked, and what changed before the next risky run.</p>
-      <p>Start with the local-first Pro dashboard and DPO export. Move to Team only when one correction needs to protect multiple developers, agents, or shared repos.</p>
+      <p>ThumbGate Pro is for one operator who already hit a repeated AI-agent failure and now needs proof: what was blocked, why it was blocked, and what changed before the next risky run.</p>
+      <p>If you need help today, start with the $19 quick read: send one failed tool call or workflow snippet and get the likely rule shape plus proof check. Use Pro when you want the local dashboard and DPO export.</p>
       <div class="hero-proof">
         <div class="proof-pill">Personal local dashboard</div>
         <div class="proof-pill">DPO export from real corrections</div>
@@ -816,7 +738,8 @@ __GA_BOOTSTRAP__
         <div class="proof-pill">Founder support on risky flows</div>
       </div>
       <div class="hero-actions">
-        <a class="btn-primary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_hero&utm_campaign=pro_pack&cta_id=pro_page_primary&cta_placement=hero&plan_id=pro&landing_path=%2Fpro">Start Pro Now</a>
+        <a class="btn-primary" data-quick-read-link href="https://buy.stripe.com/aFa8wPgH29Lo4lH35V3sI0w" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_hero_quick_read_checkout',price:19});sendGa4Event('begin_checkout',{currency:'USD',value:19,items:[{item_id:'quick_read',item_name:'AI Agent Failure Quick Read'}]});">Pay $19 quick read</a>
+        <a class="btn-secondary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_hero&utm_campaign=pro_pack&cta_id=pro_page_primary&cta_placement=hero&plan_id=pro&landing_path=%2Fpro">Start Pro dashboard</a>
         <a class="btn-secondary btn-demo" href="/dashboard?utm_source=website&utm_medium=pro_page&utm_campaign=pro_pack">Open dashboard demo</a>
         <a class="btn-ghost btn-free-path" href="/guide?utm_source=website&utm_medium=pro_page&utm_campaign=free_install">Stay on Free and install locally</a>
       </div>
@@ -852,6 +775,18 @@ __GA_BOOTSTRAP__
         <p>Visual check debugger, DPO export, auto-connect after activation, Model Hardening Advisor, and founder support for the risky flow you need to harden first.</p>
       </div>
 
+      <div class="aside-card" data-pro-paid-recovery>
+        <div class="aside-kicker">Team workflow blocked?</div>
+        <h3>Buy the paid diagnostic</h3>
+        <p>Skip self-serve Pro and pay for the smallest useful review now.</p>
+        <div class="price-stack">
+          <a class="btn-secondary" data-first-rule-link href="https://buy.stripe.com/4gM6oHgH2bTw4lH6i73sI0z" onclick="sendFirstPartyTelemetry('first_failure_rule_checkout_started',{ctaId:'pro_page_first_failure_rule_checkout',price:1});sendGa4Event('begin_checkout',{currency:'USD',value:1,items:[{item_id:'first_failure_rule',item_name:'First AI Agent Failure Rule'}]});">Pay $1 first rule</a>
+          <a class="btn-secondary" data-quick-read-link href="https://buy.stripe.com/aFa8wPgH29Lo4lH35V3sI0w" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_quick_read_checkout',price:19});">Pay $19 quick read</a>
+          <a class="btn-primary" data-sprint-diagnostic-link href="__SPRINT_DIAGNOSTIC_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_diagnostic_checkout_started',{ctaId:'pro_page_sprint_diagnostic_checkout'});sendGa4Event('begin_checkout',{currency:'USD',value:__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__});">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
+          <a class="btn-secondary" data-workflow-sprint-link href="__WORKFLOW_SPRINT_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_checkout_started',{ctaId:'pro_page_workflow_sprint_checkout'});sendGa4Event('begin_checkout',{currency:'USD',value:__WORKFLOW_SPRINT_PRICE_DOLLARS__});">Pay $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint</a>
+        </div>
+      </div>
+
       <div class="aside-card">
         <div class="aside-kicker">Keep the buyer path warm</div>
         <h3>Save your work email before you decide</h3>
@@ -901,7 +836,7 @@ __GA_BOOTSTRAP__
     <div class="grid-3">
       <div class="feature-card">
         <h3>Debug the exact block in minutes</h3>
-        <p>The visual check debugger shows every blocked action and the check that fired, so you stop guessing whether the Reliability Gateway is actually working.</p>
+        <p>The visual debugger shows each blocked action and check, so you stop guessing whether the Reliability Gateway is working.</p>
         <ul>
           <li>See the check, evidence, and lesson behind each deny.</li>
           <li>Trust the system faster on deploys, migrations, and CI.</li>
@@ -909,7 +844,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="feature-card">
         <h3>Turn corrections into DPO export</h3>
-        <p>Pro turns real thumbs-down corrections into ready-to-use preference pairs for model hardening, instead of leaving the learning trapped in one operator's head.</p>
+        <p>Pro turns real thumbs-down corrections into preference pairs for model hardening, instead of leaving learning trapped in one operator's head.</p>
         <ul>
           <li>DPO export built from actual accepted vs rejected behavior.</li>
           <li>Model Hardening Advisor helps decide when fine-tuning is worth it.</li>
@@ -917,7 +852,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="feature-card">
         <h3>Ship proof, not just confidence</h3>
-        <p>When the next risky workflow review happens, you have evidence links, reports, and a founder-supported path to harden the exact failure domain that keeps returning.</p>
+        <p>When the next risky review happens, you have evidence links, reports, and a founder-supported path to harden the failure that keeps returning.</p>
         <ul>
           <li>Review-ready evidence for one operator's high-risk workflows.</li>
           <li>Founder support on force-pushes, deploys, migrations, and CI.</li>
@@ -1026,7 +961,7 @@ __GA_BOOTSTRAP__
       <h2>Stop losing time to the same AI-agent failure.</h2>
       <p>Start Pro, harden one repeated mistake, and keep the proof trail: blocked action, lesson, prevention rule, and export path.</p>
       <div class="hero-actions" style="justify-content:center;">
-        <a class="btn-primary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_final&utm_campaign=pro_pack&cta_id=final_go_pro&cta_placement=final&plan_id=pro&landing_path=%2Fpro">Start 7-Day Free Trial</a>
+        <a class="btn-primary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_final&utm_campaign=pro_pack&cta_id=final_go_pro&cta_placement=final&plan_id=pro&landing_path=%2Fpro">Start Pro Now</a>
         <a class="btn-secondary btn-demo" href="/dashboard?utm_source=website&utm_medium=pro_page_final&utm_campaign=pro_pack">Open dashboard demo</a>
       </div>
     </div>
@@ -1088,6 +1023,9 @@ function sendFirstPartyTelemetry(eventType, props) {
   }).catch(function() {});
 }
 
+function sendGa4Event(e,p){if(typeof gtag==='function')gtag('event',e,p||{})}
+function initializeProPaidRecovery(){var c=document.querySelector('[data-pro-paid-recovery]');if(!c)return;var n=0;c.querySelectorAll('a[href]').forEach(function(a){var h=a.getAttribute('href')||'';if(/^https?:\/\//.test(h))n+=1;else a.hidden=true});c.hidden=n===0}
+
 function initializeBuyerIntent() {
   globalThis.ThumbGateBuyerIntent.initializeBuyerIntent({
     page: 'pro',
@@ -1129,6 +1067,7 @@ trackClick('.btn-pro-checkout', 'pro_checkout_start', { tier: 'pro', page: 'pro'
 trackClick('.btn-demo', 'pro_demo_click', { page: 'pro' });
 trackClick('.btn-free-path', 'pro_free_path_click', { page: 'pro' });
 trackClick('.proof-links a', 'pro_proof_click', { page: 'pro' });
+initializeProPaidRecovery();
 initializeBuyerIntent();
 globalThis.buyerJourney = globalThis.ThumbGateBuyerIntent.initializeBehaviorAnalytics({
   pageType: 'marketing',
@@ -1145,6 +1084,10 @@ globalThis.buyerJourney = globalThis.ThumbGateBuyerIntent.initializeBehaviorAnal
   ],
   ctaImpressions: [
     { selector: '.btn-pro-checkout', ctaId: 'pro_checkout', ctaPlacement: 'pro_page', planId: 'pro' },
+    { selector: '[data-first-rule-link]', ctaId: 'pro_page_first_failure_rule_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'first_failure_rule' },
+    { selector: '[data-quick-read-link]', ctaId: 'pro_page_quick_read_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'quick_read' },
+    { selector: '[data-sprint-diagnostic-link]', ctaId: 'pro_page_sprint_diagnostic_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'sprint_diagnostic' },
+    { selector: '[data-workflow-sprint-link]', ctaId: 'pro_page_workflow_sprint_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'workflow_sprint' },
     { selector: '.btn-demo', ctaId: 'pro_demo', ctaPlacement: 'pro_page', planId: 'proof' },
     { selector: '.btn-free-path', ctaId: 'pro_free_path', ctaPlacement: 'pro_page', planId: 'free' }
   ]

package/scripts/billing.js

@@ -412,9 +412,7 @@ function resolveCheckoutBrandUrls(appOrigin) {
   };
 }
 
-// Resolve the per-tier product image that ships to Stripe `product_data.images`.
-// Keeping three distinct URLs means the Stripe dashboard and checkout surface
-// never show twins for Free/Pro/Team; see tests/billing-tier-icons.test.js.
+// Resolve the per-tier product image used by Stripe Checkout.
 function resolveTierIconUrl(planId, appOrigin) {
   const brandUrls = resolveCheckoutBrandUrls(appOrigin);
   const normalized = typeof planId === 'string' ? planId.toLowerCase() : '';
@@ -2546,6 +2544,8 @@ function buildCheckoutSessionPayload({ successUrl, cancelUrl, customerEmail, che
     payment_method_types: ['card', 'link'],
     mode: pack ? 'payment' : 'subscription',
     line_items: lineItems,
+    allow_promotion_codes: true,
+    after_expiration: { recovery: { enabled: true, allow_promotion_codes: true } },
     branding_settings: buildCheckoutBrandingSettings(appOrigin),
     metadata: serializeStripeMetadata({
       ...checkoutMetadata,

package/scripts/gate-stats.js

@@ -43,10 +43,12 @@ function calculateStats() {
     .filter((g) => g.action === 'warn')
     .reduce((sum, g) => sum + (g.occurrences || 0), 0);
 
-  // Top blocked gate
+  // Top blocked gate. A configured block rule with zero occurrences is not a
+  // "top blocker"; only recorded block events should appear here.
   const topBlocked = [...allGates]
+    .filter((g) => g.action === 'block' && Number(g.occurrences || 0) > 0)
     .sort((a, b) => (b.occurrences || 0) - (a.occurrences || 0))
-    .find((g) => g.action === 'block') || null;
+    .at(0) || null;
 
   // Last promotion event
   const lastPromotion = promotionLog.length > 0
@@ -58,11 +60,9 @@ function calculateStats() {
   const estimatedHoursSaved = (estimatedMinutesSaved / 60).toFixed(1);
 
   // Bayes error rate: irreducible error floor of the current scorer given its
-  // feature set (tag signatures). If this is near zero, the scorer is already
-  // close to optimal — threshold tuning won't help, and new features are the
-  // only lever. If this is high, the feature set can't discriminate the signal
-  // and we should add features (file path, recency, commit context) rather
-  // than tune thresholds. Null when no feedback sequences have been recorded.
+  // feature set (tag signatures). It is only meaningful when the local sample
+  // contains both harmful and safe outcomes; an all-negative or all-positive
+  // sample can produce a misleading 0.0% floor.
   const bayesErrorRate = tryComputeBayesErrorRate();
 
   return {
@@ -90,12 +90,33 @@ function tryComputeBayesErrorRate() {
       .filter(Boolean)
       .map((line) => { try { return JSON.parse(line); } catch { return null; } })
       .filter(Boolean);
+    if (!hasMixedOutcomeClasses(rows)) return null;
     return computeBayesErrorRate(rows);
   } catch {
     return null;
   }
 }
 
+function hasMixedOutcomeClasses(rows) {
+  if (!Array.isArray(rows) || rows.length < 2) return false;
+  let harmful = 0;
+  let safe = 0;
+  for (const row of rows) {
+    if (sequenceIsHarmful(row)) harmful += 1;
+    else safe += 1;
+    if (harmful > 0 && safe > 0) return true;
+  }
+  return false;
+}
+
+function sequenceIsHarmful(row) {
+  if (!row || typeof row !== 'object') return false;
+  if (typeof row.targetRisk === 'number') return row.targetRisk > 0;
+  if (typeof row.accepted === 'boolean' && row.accepted === false) return true;
+  const label = String(row.label || row.signal || '').toLowerCase();
+  return label === 'negative';
+}
+
 function formatLastPromotion(promo) {
   if (!promo) return 'none';
   const ts = promo.timestamp ? new Date(promo.timestamp) : null;
@@ -125,7 +146,7 @@ function formatStats(stats) {
 }
 
 function formatBayesErrorRate(rate) {
-  if (rate === null || rate === undefined) return 'n/a (no feedback sequences yet)';
+  if (rate === null || rate === undefined) return 'n/a (need both safe and harmful feedback sequences)';
   const pct = (rate * 100).toFixed(1);
   if (rate < 0.02) return `${pct}% — scorer is near-optimal; add features, don't tune thresholds`;
   if (rate < 0.10) return `${pct}% — scorer has modest headroom`;

package/scripts/harness-selector.js

@@ -253,6 +253,190 @@ function buildHarnessOptimizationAudit(options = {}) {
   return scoreHarnessAudit(inputs, options);
 }
 
+function normalizeBoolean(value) {
+  if (value === true) return true;
+  if (value === false || value === undefined || value === null) return false;
+  return /^(1|true|yes|on)$/i.test(String(value).trim());
+}
+
+function normalizeOptionalBoolean(value, fallback = true) {
+  if (value === undefined || value === null || value === '') return fallback;
+  if (value === true) return true;
+  if (value === false) return false;
+  return /^(1|true|yes|on)$/i.test(String(value).trim());
+}
+
+function toNumber(value) {
+  if (value === undefined || value === null || value === '') return null;
+  const num = Number(value);
+  return Number.isFinite(num) ? num : null;
+}
+
+function buildHarnessFitAudit(options = {}) {
+  const nativeHarness = String(options['native-harness'] || options.native || 'native').trim() || 'native';
+  const genericHarness = String(options['generic-harness'] || options.generic || 'generic').trim() || 'generic';
+  const sameModelDifferentHarness = normalizeBoolean(options['same-model-different-harness'] || options['same-model'] || options.crossHarness);
+  const controls = {
+    toolSchemaParity: normalizeOptionalBoolean(options['tool-schema-parity']),
+    permissionParity: normalizeOptionalBoolean(options['permission-parity']),
+    stateIsolation: normalizeOptionalBoolean(options['state-isolation']),
+    patchLoopParity: normalizeOptionalBoolean(options['patch-loop-parity']),
+    verificationParity: normalizeOptionalBoolean(options['verification-parity']),
+  };
+  const handoffDrift = toNumber(options['handoff-drift'] || options['handoff-drift-percent']);
+  const gaps = Object.entries(controls)
+    .filter(([, value]) => value === false)
+    .map(([key]) => key);
+
+  let score = 100;
+  if (sameModelDifferentHarness) score -= 15;
+  score -= gaps.length * 12;
+  if (handoffDrift !== null && handoffDrift > 0) score -= Math.min(20, Math.ceil(handoffDrift));
+
+  const signals = [];
+  if (sameModelDifferentHarness || gaps.length > 0) {
+    signals.push({
+      id: 'model_harness_fit',
+      label: 'Same model, different harness',
+      values: [
+        `${nativeHarness} vs ${genericHarness}`,
+        sameModelDifferentHarness ? 'same model run across harnesses' : null,
+        ...gaps.map((gap) => `${gap} gap`),
+      ].filter(Boolean),
+      risk: 'model quality can change when tool schemas, permissions, state, patch loops, or verification differ by harness',
+    });
+  }
+  if (handoffDrift !== null && handoffDrift > 0) {
+    signals.push({
+      id: 'handoff_drift',
+      label: 'Cross-harness handoff drift',
+      values: [`${handoffDrift}% drift`],
+      risk: 'handoffs between generic and native harnesses can lose task state or weaken verification',
+    });
+  }
+
+  const normalizedScore = Math.max(0, Math.min(100, score));
+  return {
+    name: 'thumbgate-model-harness-fit-audit',
+    status: normalizedScore >= 85 ? 'portable' : normalizedScore >= 65 ? 'watch' : 'native-required',
+    score: normalizedScore,
+    nativeHarness,
+    genericHarness,
+    controls,
+    metrics: { sameModelDifferentHarness, handoffDrift },
+    signals,
+    recommendations: [
+      'Benchmark the same task, same model, and same repository in native and generic harnesses before standardizing.',
+      'Require parity proof for tool schemas, permissions, state isolation, patch application, and verification loops.',
+      'Use the native harness for production edits when parity gaps remain; reserve generic harnesses for exploration and read-only analysis.',
+    ],
+  };
+}
+
+function formatHarnessFitAudit(report) {
+  const lines = [
+    '',
+    'ThumbGate Model-Harness Fit Audit',
+    '-'.repeat(37),
+    `Status : ${report.status}`,
+    `Score  : ${report.score}/100`,
+    `Harness: ${report.nativeHarness} vs ${report.genericHarness}`,
+    `Signals: ${report.signals.length}`,
+  ];
+  if (report.signals.length > 0) {
+    lines.push('', 'Detected harness-fit risks:');
+    for (const signal of report.signals) {
+      lines.push(`  - ${signal.label}: ${signal.values.join(', ')}`);
+      lines.push(`    Risk: ${signal.risk}`);
+    }
+  }
+  lines.push('', 'Recommendations:');
+  for (const recommendation of report.recommendations) lines.push(`  - ${recommendation}`);
+  return `${lines.join('\n')}\n\n`;
+}
+
+function buildSolverWorkflowGovernance(options = {}) {
+  const solver = String(options.solver || options['solver-engine'] || 'solver').trim() || 'solver';
+  const multiAgent = normalizeBoolean(options['multi-agent'] || options.multiAgent || options.agentic);
+  const controls = {
+    objectiveDefined: normalizeOptionalBoolean(options['objective-defined']),
+    constraintsDefined: normalizeOptionalBoolean(options['constraints-defined']),
+    scenarioReplay: normalizeOptionalBoolean(options['scenario-replay']),
+    approvalGate: normalizeOptionalBoolean(options['approval-gate']),
+    rollbackPlan: normalizeOptionalBoolean(options['rollback-plan']),
+    solverProvenance: normalizeOptionalBoolean(options['solver-provenance']),
+  };
+  const dataFreshnessHours = toNumber(options['data-freshness-hours'] || options['freshness-hours']);
+  const gaps = Object.entries(controls)
+    .filter(([, value]) => value === false)
+    .map(([key]) => key);
+
+  let score = 100;
+  if (multiAgent) score -= 8;
+  score -= gaps.length * 13;
+  if (dataFreshnessHours !== null && dataFreshnessHours > 24) score -= 10;
+
+  const signals = [];
+  if (multiAgent || gaps.length > 0) {
+    signals.push({
+      id: 'solver_workflow_governance',
+      label: 'Solver-backed agent workflow',
+      values: [
+        solver,
+        multiAgent ? 'multi-agent orchestration' : null,
+        ...gaps.map((gap) => `${gap} gap`),
+      ].filter(Boolean),
+      risk: 'natural-language-to-optimization workflows need objective, constraint, replay, approval, rollback, and provenance gates',
+    });
+  }
+  if (dataFreshnessHours !== null && dataFreshnessHours > 24) {
+    signals.push({
+      id: 'solver_data_freshness',
+      label: 'Solver data freshness',
+      values: [`${dataFreshnessHours}h old`],
+      risk: 'optimization results can look mathematically valid while using stale operational data',
+    });
+  }
+
+  const normalizedScore = Math.max(0, Math.min(100, score));
+  return {
+    name: 'thumbgate-solver-workflow-governance',
+    status: normalizedScore >= 85 ? 'ready' : normalizedScore >= 65 ? 'approval-required' : 'blocked',
+    score: normalizedScore,
+    solver,
+    controls,
+    metrics: { multiAgent, dataFreshnessHours },
+    signals,
+    recommendations: [
+      'Capture the objective function, hard constraints, soft constraints, and data freshness before invoking the solver.',
+      'Replay at least one baseline scenario and one counterfactual before approving optimized actions.',
+      'Require human approval and rollback evidence before solver output changes supply chain, routing, scheduling, or pricing decisions.',
+    ],
+  };
+}
+
+function formatSolverWorkflowGovernance(report) {
+  const lines = [
+    '',
+    'ThumbGate Solver Workflow Governance',
+    '-'.repeat(38),
+    `Status: ${report.status}`,
+    `Score : ${report.score}/100`,
+    `Solver: ${report.solver}`,
+    `Signals: ${report.signals.length}`,
+  ];
+  if (report.signals.length > 0) {
+    lines.push('', 'Detected solver workflow risks:');
+    for (const signal of report.signals) {
+      lines.push(`  - ${signal.label}: ${signal.values.join(', ')}`);
+      lines.push(`    Risk: ${signal.risk}`);
+    }
+  }
+  lines.push('', 'Recommendations:');
+  for (const recommendation of report.recommendations) lines.push(`  - ${recommendation}`);
+  return `${lines.join('\n')}\n\n`;
+}
+
 // ---------------------------------------------------------------------------
 // Internal helpers
 // ---------------------------------------------------------------------------
@@ -284,6 +468,10 @@ module.exports = {
   collectDefaultHarnessAuditInputs,
   scoreHarnessAudit,
   buildHarnessOptimizationAudit,
+  buildHarnessFitAudit,
+  formatHarnessFitAudit,
+  buildSolverWorkflowGovernance,
+  formatSolverWorkflowGovernance,
   extractCommandText,
   HARNESSES,
   DEPLOY_PATTERNS,

package/scripts/rag-precision-guardrails.js

@@ -34,6 +34,14 @@ function normalizeOptions(options = {}) {
     embeddingFineTune: normalizeBoolean(options['embedding-finetune'] || options['embedding-fine-tune'] || options['fine-tune']),
     structuralNearMisses: normalizeBoolean(options['structural-near-misses'] || options['near-misses']),
     verifier: normalizeBoolean(options.verifier || options.reranker || options['second-stage']),
+    hybridRetrieval: normalizeBoolean(options['hybrid-retrieval'] || options.hybrid),
+    denseRetrieval: normalizeBoolean(options.dense || options['dense-retrieval'] || options.embeddings),
+    sparseRetrieval: normalizeBoolean(options.sparse || options['sparse-retrieval'] || options.keyword),
+    reranker: normalizeBoolean(options.reranker || options.rerank),
+    sourceGrounding: normalizeBoolean(options['source-grounding'] || options.grounding || options.citations),
+    aclFilter: normalizeBoolean(options['acl-filter'] || options.acl || options['access-control']),
+    freshnessWindowHours: toNumber(options['freshness-window-hours'] || options['freshness-hours']),
+    scaleCorpusDocuments: toNumber(options['scale-corpus-documents'] || options['corpus-documents'] || options.documents),
     latencyMs: toNumber(options['latency-ms'] || options.latency),
     latencyBudgetMs: toNumber(options['latency-budget-ms'] || options['latency-budget']),
     agenticPipeline: normalizeBoolean(options.agentic || options['agentic-pipeline']),
@@ -69,6 +77,8 @@ function buildSignals(options) {
     precisionTuningSignal(options, drop),
     ragCascadeSignal(options),
     verifierLatencySignal(options),
+    hybridScaleSignal(options),
+    retrievalGovernanceSignal(options),
   ].filter(Boolean);
 }
 
@@ -113,6 +123,48 @@ function verifierLatencySignal(options) {
   };
 }
 
+function hybridScaleSignal(options) {
+  const hybridIntent = options.hybridRetrieval || (options.denseRetrieval && options.sparseRetrieval);
+  const largeCorpus = options.scaleCorpusDocuments !== null && options.scaleCorpusDocuments >= 100000;
+  if (!(hybridIntent || largeCorpus)) return null;
+  const missingControls = [
+    options.denseRetrieval ? null : 'dense recall unmeasured',
+    options.sparseRetrieval ? null : 'sparse recall unmeasured',
+    options.reranker ? null : 'missing reranker',
+    options.sourceGrounding ? null : 'missing source grounding',
+    options.aclFilter ? null : 'missing ACL filter',
+  ].filter(Boolean);
+  return {
+    id: 'hybrid_retrieval_scale_wall',
+    label: 'Hybrid retrieval scale wall',
+    values: [
+      options.hybridRetrieval ? 'hybrid retrieval' : null,
+      options.denseRetrieval ? 'dense retrieval' : null,
+      options.sparseRetrieval ? 'sparse retrieval' : null,
+      options.scaleCorpusDocuments !== null ? `${options.scaleCorpusDocuments} documents` : null,
+      ...missingControls,
+    ].filter(Boolean),
+    risk: 'scaled RAG needs dense, sparse, reranking, grounding, and access-control evidence instead of vector-only correctness',
+  };
+}
+
+function retrievalGovernanceSignal(options) {
+  if (!options.agenticPipeline && options.sourceGrounding && options.aclFilter) return null;
+  if (!(options.agenticPipeline || options.hybridRetrieval || options.scaleCorpusDocuments !== null)) return null;
+  const gaps = [
+    options.sourceGrounding ? null : 'source evidence not enforced',
+    options.aclFilter ? null : 'access control not enforced',
+    options.freshnessWindowHours === null ? 'freshness window missing' : `${options.freshnessWindowHours}h freshness window`,
+  ].filter(Boolean);
+  if (gaps.length === 0) return null;
+  return {
+    id: 'retrieval_governance_gap',
+    label: 'Retrieval governance gap',
+    values: gaps,
+    risk: 'agentic retrieval output can leak stale or unauthorized context into downstream actions',
+  };
+}
+
 function buildRagPrecisionGuardrailsPlan(rawOptions = {}, templatesPath) {
   const options = normalizeOptions(rawOptions);
   const templates = listGateTemplates(templatesPath)
@@ -135,6 +187,14 @@ function buildRagPrecisionGuardrailsPlan(rawOptions = {}, templatesPath) {
       recallDropPercent: recallDropPercent(options),
       baselinePrecision: options.baselinePrecision,
       newPrecision: options.newPrecision,
+      hybridRetrieval: options.hybridRetrieval,
+      denseRetrieval: options.denseRetrieval,
+      sparseRetrieval: options.sparseRetrieval,
+      reranker: options.reranker,
+      sourceGrounding: options.sourceGrounding,
+      aclFilter: options.aclFilter,
+      freshnessWindowHours: options.freshnessWindowHours,
+      scaleCorpusDocuments: options.scaleCorpusDocuments,
       latencyMs: options.latencyMs,
       latencyBudgetMs: options.latencyBudgetMs,
     },
@@ -150,8 +210,10 @@ function buildRagPrecisionGuardrailsPlan(rawOptions = {}, templatesPath) {
       'Block embedding or threshold changes when recall drops without an approved rollback plan.',
       'Use a second-stage verifier or reranker for structural near misses such as negation and role reversal.',
       'Attach verifier latency budgets before routing the retrieval output into autonomous agent actions.',
+      'Measure dense recall, sparse recall, reranked relevance, source grounding, ACL filtering, and freshness as separate production gates.',
+      'Treat the retrieval layer as the agent ground truth: every autonomous action should carry source evidence and access-control proof.',
     ],
-    exampleCommand: 'npx thumbgate rag-precision-guardrails --baseline-recall=0.86 --new-recall=0.72 --threshold-change --agentic --structural-near-misses --json',
+    exampleCommand: 'npx thumbgate rag-precision-guardrails --hybrid-retrieval --dense --sparse --scale-corpus-documents=1000000 --agentic --json',
   };
 }
 

package/scripts/rate-limiter.js

@@ -36,7 +36,7 @@ const PAYWALL_MESSAGES = {
   prevention_rules: 'Free tier includes 1 prevention rule. Your agents need more protection — upgrade to Pro for unlimited rules.',
   recall: 'Recall is a Pro feature. Your past feedback is stored locally — upgrade to search and reuse it.',
   search_lessons: 'Lesson search is a Pro feature. Upgrade to find patterns in your agent\'s mistakes.',
-  default: 'This feature requires Pro. Start a 7-day trial — card required; no charge today.',
+  default: 'This feature requires Pro. Start Pro — card required; billed today.',
 };
 
 function isProTier(authContext) {