thumbgate 1.23.0 → 1.23.2

package/public/index.html

@@ -16,15 +16,18 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:title" content="ThumbGate — Stop paying for the same AI mistake twice">
 <meta property="og:description" content="Frontier LLMs are expensive, opaque, and unreliable in production. ThumbGate gates risky agent actions before they run: workflow shape, inspection evidence, token budget, and repeated-failure memory in one pre-action check.">
 <meta property="og:type" content="website">
-<meta property="og:image" content="https://thumbgate-production.up.railway.app/og.png">
+<meta property="og:url" content="__APP_ORIGIN__/">
+<meta property="og:image" content="https://thumbgate.ai/og.png">
 <meta name="twitter:card" content="summary_large_image">
-<meta name="twitter:image" content="https://thumbgate-production.up.railway.app/og.png">
-<meta name="thumbgate-version" content="1.23.0">
-<meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agent enforcement layer, save LLM tokens, reduce Claude API cost, reduce OpenAI cost, AI agent token savings, prevent LLM retries, prevent hallucination retries, stop AI token waste, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
+<meta name="twitter:image" content="https://thumbgate.ai/og.png">
+<meta name="thumbgate-version" content="1.23.2">
+<meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agentic development cycle, AC/DC framework, Guide Generate Verify Solve, agent enforcement layer, save LLM tokens, reduce Claude API cost, reduce OpenAI cost, AI agent token savings, prevent LLM retries, prevent hallucination retries, stop AI token waste, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
+<link rel="canonical" href="__APP_ORIGIN__/">
+<link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
 <link rel="apple-touch-icon" href="/apple-touch-icon.png">
 
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.tagged-events.js"></script>
 __GA_BOOTSTRAP__
 
 <script>
@@ -42,8 +45,8 @@ __GA_BOOTSTRAP__
   "@type": "Organization",
   "name": "ThumbGate",
   "alternateName": "thumbgate",
-  "url": "https://thumbgate-production.up.railway.app",
-  "logo": "https://thumbgate-production.up.railway.app/assets/brand/thumbgate-logo-1200x360.png",
+  "url": "https://thumbgate.ai",
+  "logo": "https://thumbgate.ai/assets/brand/thumbgate-logo-1200x360.png",
   "description": "ThumbGate ships pre-action gates for AI coding agents. Open-source CLI plus PreToolUse hooks that capture feedback, promote it to memory, generate prevention rules, and block repeated mistakes before the next tool call across Claude Code, Cursor, Codex, Gemini, Amp, Cline, and OpenCode.",
   "founder": {
     "@type": "Person",
@@ -86,6 +89,7 @@ __GA_BOOTSTRAP__
     "ThumbGate GPT for ChatGPT — preflight risky commands, refunds, deploys, and PR actions, capture typed thumbs-up/down lessons, and route users into local enforcement",
     "Workflow Sentinel — score blast radius before PR, merge, release, and publish actions fire",
     "Workflow architecture checks — distinguish predefined workflows, parallel fan-out, and open-ended agents before execution",
+    "Agentic development cycle control — maps Guide, Generate, Verify, and Solve into enforceable pre-action gates before risky tool calls execute",
     "Environment inspection evidence — require read-before-write, screenshots, API response checks, tests, or output validation for open-ended agent loops",
     "Parallel branch budgets — prevent agent desktops and fan-out workflows from silently multiplying token spend",
     "Docker Sandboxes routing — move high-risk local runs into isolated microVM-backed execution",
@@ -116,7 +120,7 @@ __GA_BOOTSTRAP__
       "price": "49",
       "priceCurrency": "USD",
       "description": "Intake-led team rollout with a workflow hardening sprint, shared enforcement memory, org dashboard visibility, approval boundaries, release confidence, Docker Sandboxes guidance for risky local autonomy, and pilot support for teams shipping AI-generated changes",
-      "url": "https://thumbgate-production.up.railway.app/#workflow-sprint-intake"
+      "url": "https://thumbgate.ai/#workflow-sprint-intake"
     },
     {
       "@type": "Offer",
@@ -124,7 +128,7 @@ __GA_BOOTSTRAP__
       "price": "19",
       "priceCurrency": "USD",
       "description": "Self-serve side lane for solo operators who want personal enforcement proof, a local dashboard, DPO export, team lesson export/import, and proof-ready exports",
-      "url": "https://thumbgate-production.up.railway.app/checkout/pro?plan_id=pro&landing_path=%2F"
+      "url": "https://thumbgate.ai/checkout/pro?plan_id=pro&landing_path=%2F"
     },
     {
       "@type": "Offer",
@@ -132,7 +136,7 @@ __GA_BOOTSTRAP__
       "price": "149",
       "priceCurrency": "USD",
       "description": "Annual Pro for individual operators who want personal enforcement proof, the local dashboard, and proof-ready exports",
-      "url": "https://thumbgate-production.up.railway.app/checkout/pro?plan_id=pro&billing_cycle=annual&landing_path=%2F"
+      "url": "https://thumbgate.ai/checkout/pro?plan_id=pro&billing_cycle=annual&landing_path=%2F"
     }
   ],
   "potentialAction": [
@@ -141,7 +145,7 @@ __GA_BOOTSTRAP__
       "name": "Install ThumbGate Free",
       "target": {
         "@type": "EntryPoint",
-        "urlTemplate": "https://thumbgate-production.up.railway.app/guide",
+        "urlTemplate": "https://thumbgate.ai/guide",
         "actionPlatform": [
           "https://schema.org/DesktopWebPlatform"
         ]
@@ -152,7 +156,7 @@ __GA_BOOTSTRAP__
       "name": "Start ThumbGate Pro",
       "target": {
         "@type": "EntryPoint",
-        "urlTemplate": "https://thumbgate-production.up.railway.app/checkout/pro?plan_id=pro&landing_path=%2F",
+        "urlTemplate": "https://thumbgate.ai/checkout/pro?plan_id=pro&landing_path=%2F",
         "actionPlatform": [
           "https://schema.org/DesktopWebPlatform"
         ]
@@ -162,7 +166,7 @@ __GA_BOOTSTRAP__
         "name": "Pro Monthly",
         "price": "19",
         "priceCurrency": "USD",
-        "url": "https://thumbgate-production.up.railway.app/checkout/pro?plan_id=pro&landing_path=%2F"
+        "url": "https://thumbgate.ai/checkout/pro?plan_id=pro&landing_path=%2F"
       }
     },
     {
@@ -170,7 +174,7 @@ __GA_BOOTSTRAP__
       "name": "Start Workflow Hardening Sprint intake",
       "target": {
         "@type": "EntryPoint",
-        "urlTemplate": "https://thumbgate-production.up.railway.app/#workflow-sprint-intake",
+        "urlTemplate": "https://thumbgate.ai/#workflow-sprint-intake",
         "actionPlatform": [
           "https://schema.org/DesktopWebPlatform"
         ]
@@ -189,21 +193,21 @@ __GA_BOOTSTRAP__
   "provider": {
     "@type": "Organization",
     "name": "ThumbGate",
-    "url": "https://thumbgate-production.up.railway.app"
+    "url": "https://thumbgate.ai"
   },
-  "url": "https://thumbgate-production.up.railway.app/#workflow-sprint-intake",
+  "url": "https://thumbgate.ai/#workflow-sprint-intake",
   "description": "Founder-led workflow hardening for one AI-agent workflow that needs approval boundaries, rollback safety, and rollout proof before wider team rollout.",
   "offers": {
     "@type": "Offer",
     "name": "Workflow Hardening Sprint intake",
-    "url": "https://thumbgate-production.up.railway.app/#workflow-sprint-intake"
+    "url": "https://thumbgate.ai/#workflow-sprint-intake"
   },
   "potentialAction": {
     "@type": "CommunicateAction",
     "name": "Book a workflow hardening intake",
     "target": {
       "@type": "EntryPoint",
-      "urlTemplate": "https://thumbgate-production.up.railway.app/#workflow-sprint-intake",
+      "urlTemplate": "https://thumbgate.ai/#workflow-sprint-intake",
       "actionPlatform": [
         "https://schema.org/DesktopWebPlatform"
       ]
@@ -318,6 +322,14 @@ __GA_BOOTSTRAP__
         "text": "Prompt rules are suggestions agents can ignore. Pre-Action Checks are enforcement — they block the action before execution via PreToolUse hooks. Checks are auto-generated from feedback and use Thompson Sampling to adapt."
       }
     },
+    {
+      "@type": "Question",
+      "name": "How does ThumbGate fit the agentic development cycle?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "Agentic development is converging around Guide, Generate, Verify, and Solve. ThumbGate adds the execution-control layer between those stages: project guidance and feedback become rules, generated tool calls are checked before execution, verification evidence is required for risky actions, and solved failures become reusable prevention gates."
+      }
+    },
     {
       "@type": "Question",
       "name": "How does ThumbGate prevent AI slop and protect brand authenticity?",
@@ -411,6 +423,10 @@ __GA_BOOTSTRAP__
   .hero-actions .hero-install { margin-bottom: 0; font-size: 18px; padding: 14px 22px; border: 1px solid rgba(34,211,238,0.55); background: rgba(34,211,238,0.07); box-shadow: none; }
   .hero-actions .btn-install-hero { font-size: 16px; padding: 14px 22px; }
   .hero-actions .hero-diagnostic { font-size: 16px; padding: 14px 22px; background: var(--green); color: #06120a; font-weight: 800; box-shadow: none; }
+  .offer-router{max-width:940px;margin:18px auto 22px;display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px;text-align:left}
+  .offer-route{border:1px solid rgba(34,211,238,.18);background:rgba(17,17,19,.72);border-radius:8px;padding:14px}
+  .offer-route strong{display:block;color:var(--text);font-size:14px;margin-bottom:6px}.offer-route p{margin:0 0 10px;color:var(--text-muted);font-size:13px}
+  .offer-route a,.offer-route button{color:var(--cyan);font-weight:800;font-size:13px;text-decoration:none;background:transparent;border:0;padding:0;cursor:pointer}.offer-route.primary{background:rgba(34,211,238,.07)}
   .btn-pro-page { display: inline-flex; align-items: center; justify-content: center; padding: 11px 18px; background: var(--cyan); color: var(--bg); border-radius: 999px; text-decoration: none; font-size: 14px; font-weight: 700; box-shadow: 0 0 0 1px rgba(34,211,238,0.28), 0 12px 32px rgba(34,211,238,0.18); transition: opacity 0.15s, transform 0.15s; }
   .btn-pro-page:hover { opacity: 0.9; transform: translateY(-1px); }
   .btn-gpt-page { display: inline-flex; align-items: center; justify-content: center; padding: 14px 32px; background: var(--green); color: #06120a; border-radius: 8px; text-decoration: none; font-size: 16px; font-weight: 800; box-shadow: 0 0 0 1px rgba(74,222,128,0.32), 0 12px 32px rgba(74,222,128,0.18); transition: opacity 0.15s, transform 0.15s; }
@@ -654,6 +670,7 @@ __GA_BOOTSTRAP__
     .hero { padding: 72px 0 56px; }
     .hero-actions { flex-direction: column; }
     .hero-actions a { width: 100%; }
+    .offer-router { grid-template-columns: 1fr; }
     .hero-paid-actions { justify-content: center; }
     .hero-paid-actions a { width: 100%; }
     .nav-links a:not(.nav-cta) { display: none; }
@@ -695,7 +712,7 @@ __GA_BOOTSTRAP__
       <a href="#claude-code-section" class="nav-claude" onclick="posthog.capture('nav_claude_click')" style="display:none;">Claude</a>
       <a href="#workflow-sprint-intake" onclick="posthog.capture('workflow_sprint')" style="display:none;">Start Sprint</a>
       <a href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-claude-desktop.mcpb" target="_blank" rel="noopener" onclick="posthog.capture('nav_claude_extension_click',{cta:'install_claude_extension'})" class="nav-cta" style="background:#d97706;display:none;">Claude Extension</a>
-      <a href="/go/install?utm_source=website&utm_medium=nav&utm_campaign=install_free&cta_id=nav_install_free&cta_placement=nav" onclick="posthog.capture('nav_cta_click',{cta:'install_free'})" class="nav-cta">Install Free</a>
+      <a href="/checkout/pro?utm_source=website&utm_medium=nav&utm_campaign=pro_upgrade&cta_id=nav_start_pro&cta_placement=nav&plan_id=pro&landing_path=%2F" data-revenue-cta data-cta-id="nav_start_pro" data-cta-placement="nav" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);try{posthog.capture('nav_pro_click',{cta:'nav_start_pro',tier:'pro',price:19})}catch(_){}" class="nav-cta">Start Pro — $19/mo</a>
     </div>
   </div>
 </nav>
@@ -714,14 +731,27 @@ __GA_BOOTSTRAP__
     </div>
 
     <div class="hero-actions">
-      <div class="hero-install hero-install-primary" onclick="copyInstall(this)" title="Click to copy">
-        <span class="prompt">$</span>
-        <span class="cmd">npx thumbgate init</span>
-        <span class="copy-hint">click to copy</span>
-      </div>
-      <a href="/go/install?utm_source=website&utm_medium=hero_cta&utm_campaign=install_free&cta_id=hero_install_cli&cta_placement=hero" onclick="event.preventDefault(); navigator.clipboard.writeText('npx thumbgate init'); this.textContent='Copied ✓ — paste in your repo'; setTimeout(()=>{this.textContent='Install Free CLI'},2000); try{posthog.capture('hero_install_click',{cta:'install_cli'})}catch(_){}" class="btn-gpt-page btn-install-hero" title="Click to copy: npx thumbgate init">Install Free CLI</a>
+      <a href="/checkout/pro?utm_source=website&utm_medium=hero_cta&utm_campaign=pro_upgrade&cta_id=hero_start_pro&cta_placement=hero&plan_id=pro&landing_path=%2F" data-revenue-cta data-cta-id="hero_start_pro" data-cta-placement="hero" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);try{posthog.capture('hero_pro_checkout_click',{cta:'hero_start_pro',tier:'pro',price:19})}catch(_){}" class="btn-pro-page hero-pro hero-pro-primary">Start Pro — $19/mo</a>
       <a href="#workflow-sprint-intake" onclick="try{posthog.capture('hero_sprint_click',{cta:'sprint_intake'})}catch(_){};sendFirstPartyTelemetry('hero_sprint_intake_started',{ctaId:'hero_workflow_sprint',ctaPlacement:'hero',offer:'workflow_sprint'});" class="btn-pro-page hero-pro">Talk to me — Workflow Hardening Sprint →</a>
-      <a href="#demo" onclick="try{posthog.capture('hero_demo_click',{cta:'see_enforcement'})}catch(_){};sendFirstPartyTelemetry('hero_demo_clicked',{ctaId:'hero_see_enforcement',ctaPlacement:'hero'});" class="btn-free" style="font-size:15px;padding:14px 22px;">See the enforcement in action</a>
+      <a href="/go/install?utm_source=website&utm_medium=hero_cta&utm_campaign=install_free&cta_id=hero_install_cli&cta_placement=hero" onclick="event.preventDefault(); navigator.clipboard.writeText('npx thumbgate init'); this.textContent='Copied ✓ — paste in your repo'; setTimeout(()=>{this.textContent='Install Free CLI'},2000); try{posthog.capture('hero_install_click',{cta:'install_cli'})}catch(_){}" class="btn-gpt-page btn-install-hero" title="Click to copy: npx thumbgate init">Install Free CLI</a>
+    </div>
+
+    <div class="offer-router" aria-label="Choose the right ThumbGate path">
+      <div class="offer-route primary">
+        <strong>Solo operator: Start Pro</strong>
+        <p>Sync, proof, exports.</p>
+        <a href="/checkout/pro?utm_source=website&utm_medium=offer_router&cta_id=router_start_pro&cta_placement=offer_router&plan_id=pro" data-revenue-cta data-cta-id="router_start_pro" data-cta-placement="offer_router" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);">Pay $19/mo with Stripe →</a>
+      </div>
+      <div class="offer-route">
+        <strong>Team workflow: Start with intake</strong>
+        <p>Proof before rollout.</p>
+        <a href="#workflow-sprint-intake" onclick="sendFirstPartyTelemetry('workflow_sprint_intake_started',{ctaId:'router_workflow_sprint',ctaPlacement:'offer_router',offer:'workflow_sprint'});">Send the workflow first →</a>
+      </div>
+      <div class="offer-route">
+        <strong>Still evaluating: Free CLI</strong>
+        <p>Local proof first.</p>
+        <button data-router-install onclick="copyInstall(this)"><span class="copy-hint">Copy npx thumbgate init</span></button>
+      </div>
     </div>
 
     <div class="hero-trust-bar">
@@ -764,7 +794,6 @@ __GA_BOOTSTRAP__
       <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/THUMBGATE_BENCH.md" target="_blank" rel="noopener">ThumbGate Bench</a>
       <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/RELEASE_CONFIDENCE.md" target="_blank" rel="noopener">Release confidence</a>
       <a href="https://github.com/IgorGanapolsky/ThumbGate/actions" target="_blank" rel="noopener">Proof-backed CI</a>
-      <a href="https://github.com/IgorGanapolsky/ThumbGate/actions" target="_blank" rel="noopener">CI and proof lanes</a>
       <a href="#compatibility">Claude Code · Cursor · Codex · Gemini · Amp · Cline · OpenCode</a>
     </nav>
     <div class="marketing-test-copy" hidden>
@@ -792,6 +821,36 @@ __GA_BOOTSTRAP__
   </div>
 </section>
 
+<section class="compatibility" id="agentic-development-cycle">
+  <div class="container">
+    <div class="section-label">Agentic Development Cycle</div>
+    <h2 class="section-title">Guide, Generate, Verify, Solve still needs an execution gate.</h2>
+    <p style="text-align:center;font-size:16px;color:var(--text-muted);max-width:900px;margin:0 auto 28px;line-height:1.7;">The market is converging on agentic development as a control loop, not a code-generation trick. <a href="https://thenewstack.io/agentic-development-cycle-framework/" target="_blank" rel="noopener" style="color:var(--cyan);text-decoration:underline;">The New Stack's May 2026 AC/DC framing</a> names the core stages: Guide, Generate, Verify, and Solve. ThumbGate gives that loop a hard pre-action boundary so agent work is governed before it touches files, terminals, CI, payments, or production systems.</p>
+    <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(210px,1fr));gap:14px;max-width:1080px;margin:0 auto;">
+      <div class="compat-card" style="cursor:default;">
+        <h3>Guide</h3>
+        <p>Rules, standards, past thumbs-downs, workflow boundaries, and approval policies are loaded as concrete operating context instead of vague prompt advice.</p>
+      </div>
+      <div class="compat-card" style="cursor:default;">
+        <h3>Generate</h3>
+        <p>Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, and MCP-compatible agents keep generating plans, edits, and tool calls.</p>
+      </div>
+      <div class="compat-card" style="cursor:default;">
+        <h3>Verify</h3>
+        <p>Pre-Action Checks require inspection evidence, tests, CI, screenshots, API responses, or human approval before high-risk actions proceed.</p>
+      </div>
+      <div class="compat-card" style="cursor:default;">
+        <h3>Solve</h3>
+        <p>Blocked failures and accepted fixes become lessons, shared rules, DPO exports, and audit events so the same mistake is not paid for again.</p>
+      </div>
+    </div>
+    <div style="max-width:900px;margin:22px auto 0;padding:16px 18px;border:1px solid rgba(74,222,128,0.28);border-radius:8px;background:rgba(74,222,128,0.07);">
+      <strong style="display:block;color:var(--green);margin-bottom:6px;">ThumbGate's role: the pre-action gate between generated intent and executed action.</strong>
+      <p style="margin:0;color:var(--text-muted);font-size:14px;line-height:1.65;">Verification after a pull request is useful, but it is too late for force-pushes, destructive SQL, unsafe deploys, leaked secrets, and costly external API calls. ThumbGate checks the action before it runs, then feeds the result back into the next Guide and Solve cycle.</p>
+    </div>
+  </div>
+</section>
+
 <!-- CODE EXAMPLE — moved up for conversion: show the product immediately after hero -->
 <section class="code-section">
   <div class="container">
@@ -817,6 +876,37 @@ __GA_BOOTSTRAP__
   </div>
 </section>
 
+<section class="compatibility" id="deterministic-prevention">
+  <div class="container">
+    <div class="section-label">Deterministic Prevention</div>
+    <h2 class="section-title">Native thumbs are a black box. ThumbGate is the inspectable control layer.</h2>
+    <p style="text-align:center;font-size:16px;color:var(--text-muted);max-width:900px;margin:0 auto 28px;line-height:1.7;">Codex, Claude Code, ChatGPT, and other agent surfaces can collect preference signals, but you usually cannot see exactly what changed, which rule will fire, or why a future tool call is allowed. ThumbGate keeps the prevention layer outside the model: typed feedback becomes a local lesson, repeated mistakes become explicit rules, and every block names the matched rule, source lesson, tool call, and audit event.</p>
+    <div class="agent-grid">
+      <div class="agent-card">
+        <h3>Black-box memory</h3>
+        <p>Native thumbs and vendor memories may improve future behavior, but they do not give teams a deterministic allow/block contract at the moment an agent touches files, terminals, APIs, or CI.</p>
+      </div>
+      <div class="agent-card">
+        <h3>Inspectable ThumbGate memory</h3>
+        <p>Lessons live in your ThumbGate store, can be searched, exported as JSONL or DPO pairs, and traced back to the exact correction that created the rule.</p>
+      </div>
+      <div class="agent-card">
+        <h3>Rules before execution</h3>
+        <p>The final decision is not another model opinion. ThumbGate checks tool name, arguments, working directory, command shape, confidence, and required evidence before the action runs.</p>
+      </div>
+    </div>
+    <div style="margin:26px auto 0;max-width:960px;border:1px solid rgba(34,211,238,0.18);border-radius:8px;background:rgba(34,211,238,0.05);padding:18px 20px;">
+      <h3 style="margin:0 0 10px;color:var(--text);font-size:18px;">Why this matters now</h3>
+      <ul style="margin:0;padding-left:20px;color:var(--text-muted);line-height:1.7;">
+        <li><strong>Agent security is now mainstream risk.</strong> Coding agents run shell commands, write files, query databases, and chain actions with developer permissions, so unattended autonomy needs a local policy boundary.</li>
+        <li><strong>MCP adoption is accelerating.</strong> More tools are becoming agent-callable through shared protocols, which means one cross-agent governance layer beats one-off prompt rules per app.</li>
+        <li><strong>Repeated failures waste cash and trust.</strong> Every repeat burns tokens, review time, and release confidence. ThumbGate turns the first correction into a reusable prevention check.</li>
+      </ul>
+      <p style="margin:12px 0 0;font-size:13px;color:var(--text-dim);">Sources to verify the market timing: <a href="https://www.docker.com/blog/ai-coding-agent-horror-stories-security-risks/" target="_blank" rel="noopener" style="color:var(--cyan);">Docker on AI coding agent security risks</a>, <a href="https://www.techradar.com/pro/how-ai-agents-are-wrecking-havoc-in-legacy-security-setups-and-enterprises-are-catching-up" target="_blank" rel="noopener" style="color:var(--cyan);">TechRadar on enterprise agent security pressure</a>, and <a href="https://www.techradar.com/pro/zendesk-becomes-the-latest-to-adopt-mcp-to-futureproof-customers-in-the-ai-first-era" target="_blank" rel="noopener" style="color:var(--cyan);">current MCP adoption coverage</a>.</p>
+    </div>
+  </div>
+</section>
+
 <section class="marketing-deep-dive" style="padding:28px 0 10px;">
   <div class="container" style="max-width:1240px;">
     <div class="section-label">Status bar proof</div>
@@ -1074,7 +1164,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="autoresearch-cta">
         <a class="primary" href="/guides/autoresearch-agent-safety?utm_source=website&utm_medium=autoresearch_pack&utm_campaign=autoresearch_safety&cta_id=autoresearch_guide&cta_placement=autoresearch_pack">Read the Autoresearch guide</a>
-        <a class="secondary" href="/checkout/pro?utm_source=website&utm_medium=autoresearch_pack&utm_campaign=autoresearch_safety&cta_id=autoresearch_pro_checkout&cta_placement=autoresearch_pack&plan_id=pro&landing_path=%2F">Start Pro</a>
+        <a class="secondary" href="/checkout/pro?utm_source=website&utm_medium=autoresearch_pack&utm_campaign=autoresearch_safety&cta_id=autoresearch_pro_checkout&cta_placement=autoresearch_pack&plan_id=pro&landing_path=%2F" data-revenue-cta data-cta-id="autoresearch_pro_checkout" data-cta-placement="autoresearch_pack" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);">Start Pro</a>
       </div>
     </div>
   </div>
@@ -1254,10 +1344,10 @@ __GA_BOOTSTRAP__
         <div class="tier" style="color:var(--cyan);">Free</div>
         <div class="price">$0</div>
         <div class="price-sub">Block repeated mistakes daily. Forever free for solo devs.</div>
-        <p style="font-size:13px;color:#aaa;margin-bottom:16px;">Unlimited captures, 5 active rules. Enough to make ThumbGate part of your daily flow. Upgrade when you want the dashboard, exports, or unlimited rules.</p>
+        <p style="font-size:13px;color:#aaa;margin-bottom:16px;">5 captures/day, 3 active rules. Enough to see the value — upgrade when you need more.</p>
         <ul>
-          <li><strong>Unlimited feedback captures</strong> — every thumbs-down, every session</li>
-          <li>Up to 5 active auto-promoted prevention rules</li>
+          <li><strong>5 feedback captures/day</strong> — 25 total on Free, then Pro for unlimited</li>
+          <li>Up to 3 active auto-promoted prevention rules</li>
           <li>No recall or lesson search</li>
           <li>No exports (DPO, Databricks, HuggingFace)</li>
           <li>All MCP integrations (Claude Code, Cursor, Codex, Gemini, Amp, any MCP agent)</li>
@@ -1276,7 +1366,7 @@ __GA_BOOTSTRAP__
         <div class="price">$19<span style="font-size:16px;color:var(--text-dim)">/mo</span></div>
         <div class="price-sub"><strong>The free npm package runs your gates locally and never expires.</strong> Pro is what we operate for you: hosted lesson sync across all your machines, adapter matrix kept current as agent runtimes ship breaking changes, and a dashboard you don't have to babysit.</div>
         <ul>
-          <li><strong>Block every repeat mistake</strong> — unlimited feedback captures and prevention rules (Free caps at 5 active rules)</li>
+          <li><strong>Block every repeat mistake</strong> — unlimited feedback captures and prevention rules (Free caps at 3 active rules)</li>
           <li><strong>Never re-explain a correction</strong> — lesson recall and search across sessions on every agent surface</li>
           <li><strong>See exactly which rule fired</strong> — <a href="/dashboard#insights" style="color:var(--cyan);text-decoration:underline;">Visual check debugger</a> for every blocked action and the check that fired</li>
           <li><strong>One install, every agent</strong> — Auto-connect so supported agents appear automatically after setup (Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode)</li>
@@ -1291,7 +1381,7 @@ __GA_BOOTSTRAP__
           <div style="font-family:var(--mono);font-size:12px;color:var(--cyan);line-height:1.6;">checks: 36 active<br>feedback: unlimited<br>exports: DPO + lessons</div>
         </div>
         <div style="font-size:11px;letter-spacing:0.08em;text-transform:uppercase;color:var(--cyan);font-weight:800;margin-bottom:8px;">PAY-NOW PRO</div>
-        <a href="/checkout/pro?utm_source=pricing&utm_medium=cta&utm_campaign=v2_landing&utm_content=pricing_pro&plan_id=pro" id="pro-checkout-link" class="btn-pro" onclick="handleProCheckout();return false;" style="display:block;width:100%;text-align:center;padding:12px;font-size:15px;">Upgrade to Pro — $19/mo</a>
+        <a href="/checkout/pro?utm_source=pricing&utm_medium=cta&utm_campaign=v2_landing&utm_content=pricing_pro&cta_id=pricing_pro_checkout&cta_placement=pricing&plan_id=pro&landing_path=%2F" id="pro-checkout-link" class="btn-pro" data-revenue-cta data-cta-id="pricing_pro_checkout" data-cta-placement="pricing" data-tier="pro" data-plan-id="pro" data-price="19" onclick="handleProCheckout();return false;" style="display:block;width:100%;text-align:center;padding:12px;font-size:15px;">Upgrade to Pro — $19/mo</a>
         <p style="font-size:11px;color:var(--text-muted);margin-top:8px;text-align:center;">Billed today · cancel anytime.</p>
         <input type="email" id="pro-email" data-buyer-email placeholder="you@company.com" style="margin-top:10px;width:100%;padding:10px 12px;border:1px solid var(--border);border-radius:8px;background:var(--bg-raised);color:var(--text);font-size:14px;">
       </div>
@@ -1428,7 +1518,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">Do I need a cloud account?</div>
-        <div class="faq-a">No. Free keeps local enforcement on your machine with unlimited feedback captures, up to 5 active auto-promoted prevention rules, built-in safety checks, and hook blocking. Recall, lesson search, unlimited rules, and exports open up on Pro. No cloud account is required. The business starts when a team wants shared rules, approval boundaries, hosted review views, org dashboard visibility, and proof that survives handoffs. Pro is the optional solo side lane for a personal dashboard, DPO export, and team lesson export/import — share lessons across projects so one team's mistakes become every team's prevention rules.</div>
+        <div class="faq-a">No. Free keeps local enforcement on your machine with 5 feedback captures/day, up to 3 active auto-promoted prevention rules, built-in safety checks, and hook blocking. Recall, lesson search, unlimited rules, unlimited captures, and exports open up on Pro. No cloud account is required. The business starts when a team wants shared rules, approval boundaries, hosted review views, org dashboard visibility, and proof that survives handoffs. Pro is the optional solo side lane for a personal dashboard, DPO export, and team lesson export/import — share lessons across projects so one team's mistakes become every team's prevention rules.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">What if my thumbs-down is vague?</div>
@@ -1438,6 +1528,10 @@ __GA_BOOTSTRAP__
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">How are pre-action checks different from prompt rules?</div>
         <div class="faq-a">Prompt rules are a starting point, not a finish line. Without prompt evaluation you do not know whether they still hold up under real tool use. ThumbGate adds the human-in-the-loop measurement loop and the enforcement layer: proof lanes, ThumbGate Bench, and self-heal checks show whether behavior improved, and Pre-Action Checks block the action before execution when it did not.</div>
       </div>
+      <div class="faq-item">
+        <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">How does ThumbGate fit the agentic development cycle?</div>
+        <div class="faq-a">Agentic development is not just generation. Teams need Guide, Generate, Verify, and Solve working as a repeatable loop. ThumbGate is the pre-action execution gate in that loop: guidance and feedback become rules, generated tool calls are checked before execution, verification evidence is required for risky actions, and solved failures become reusable prevention gates.</div>
+      </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">What does Pro cost?</div>
         <div class="faq-a">Pro is $19/mo or $149/yr for individual operators and bills immediately through Stripe. Team is $49/seat/mo with a 3-seat minimum and starts through the workflow intake so scope, shared rules, and rollout proof are explicit before a team rollout.</div>
@@ -1475,7 +1569,7 @@ __GA_BOOTSTRAP__
     </div>
     <div style="display:flex;gap:10px;justify-content:center;flex-wrap:wrap;align-items:center;margin-top:12px;opacity:0.7;">
       <a href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-claude-desktop.mcpb" class="btn-gpt-page" target="_blank" rel="noopener" onclick="posthog.capture('final_claude_extension_click',{cta:'install_claude_extension'})" style="padding:8px 16px;font-size:12px;background:#d97706;color:#fff;">Install Claude Extension</a>
-      <a href="/go/pro?utm_source=website&utm_medium=final_cta&utm_campaign=pro_upgrade&cta_id=final_go_pro&cta_placement=final_cta&plan_id=pro&landing_path=%2F" onclick="posthog.capture('final_pro_click',{cta:'go_pro'})" class="btn-pro" style="padding:8px 16px;font-size:12px;opacity:0.85;">Upgrade to Pro — $19/mo</a>
+      <a href="/checkout/pro?utm_source=website&utm_medium=final_cta&utm_campaign=pro_upgrade&cta_id=final_go_pro&cta_placement=final_cta&plan_id=pro&landing_path=%2F" data-revenue-cta data-cta-id="final_go_pro" data-cta-placement="final_cta" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);try{posthog.capture('final_pro_click',{cta:'final_go_pro',tier:'pro',price:19})}catch(_){}" class="btn-pro" style="padding:8px 16px;font-size:12px;opacity:0.85;">Upgrade to Pro — $19/mo</a>
       <a href="#workflow-sprint-intake" class="btn-team" style="padding:8px 16px;font-size:12px;">Start Workflow Hardening Sprint</a>
     </div>
   </div>
@@ -1492,7 +1586,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.23.0</span>
+    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.23.2</span>
   </div>
 </footer>
 
@@ -1504,7 +1598,7 @@ __GA_BOOTSTRAP__
     <span class="cmd">npx thumbgate init</span>
     <span class="copy-hint">copy</span>
   </div>
-  <a href="/go/pro?utm_source=website&utm_medium=sticky_cta&utm_campaign=pro_upgrade&cta_id=sticky_go_pro&cta_placement=sticky_cta&plan_id=pro&landing_path=%2F" onclick="posthog.capture('sticky_pro_click',{cta:'go_pro'})" class="btn-pro" style="padding:8px 16px;font-size:12px;border-radius:6px;white-space:nowrap;">Go Pro — $19/mo</a>
+  <a href="/checkout/pro?utm_source=website&utm_medium=sticky_cta&utm_campaign=pro_upgrade&cta_id=sticky_go_pro&cta_placement=sticky_cta&plan_id=pro&landing_path=%2F" data-revenue-cta data-cta-id="sticky_go_pro" data-cta-placement="sticky_cta" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);try{posthog.capture('sticky_pro_click',{cta:'sticky_go_pro',tier:'pro',price:19})}catch(_){}" class="btn-pro" style="padding:8px 16px;font-size:12px;border-radius:6px;white-space:nowrap;">Go Pro — $19/mo</a>
 </div>
 <script>
 (function() {
@@ -1582,6 +1676,53 @@ function sendGa4Event(eventName, params) {
   globalThis.gtag('event', eventName, params || {});
 }
 
+function readRevenueCtaMeta(el) {
+  var label = (el && el.textContent ? el.textContent : '').trim().substring(0, 80);
+  var section = el && el.closest ? el.closest('section') : null;
+  var fallbackPlacement = section ? (section.id || String(section.className || '').split(' ')[0] || 'unknown') : 'unknown';
+  return {
+    ctaId: (el && el.dataset && el.dataset.ctaId) || 'pro_checkout',
+    ctaPlacement: (el && el.dataset && el.dataset.ctaPlacement) || fallbackPlacement,
+    tier: (el && el.dataset && el.dataset.tier) || 'pro',
+    planId: (el && el.dataset && el.dataset.planId) || 'pro',
+    price: Number((el && el.dataset && el.dataset.price) || proPriceDollars || 19),
+    billing: (el && el.dataset && el.dataset.billing) || 'monthly',
+    label: label,
+  };
+}
+
+function trackRevenueCta(el) {
+  var meta = readRevenueCtaMeta(el);
+  var plausibleProps = {
+    cta: meta.ctaId,
+    cta_id: meta.ctaId,
+    section: meta.ctaPlacement,
+    tier: meta.tier,
+    plan_id: meta.planId,
+    price: meta.price,
+    billing: meta.billing,
+    label: meta.label,
+  };
+  if (typeof plausible === 'function') {
+    plausible('pricing_cta_click', { props: plausibleProps });
+    plausible('checkout_start', { props: plausibleProps });
+  }
+  sendFirstPartyTelemetry('cta_click', {
+    ctaId: meta.ctaId,
+    ctaPlacement: meta.ctaPlacement,
+    planId: meta.planId,
+    tier: meta.tier,
+    price: meta.price,
+    billing: meta.billing,
+    label: meta.label,
+  });
+  sendGa4Event('begin_checkout', {
+    currency: 'USD',
+    value: meta.price,
+    items: [{ item_id: 'pro_monthly', item_name: 'ThumbGate Pro Monthly' }],
+  });
+}
+
 function initializeTeamIntakeTelemetry() {
   document.querySelectorAll('[data-team-intake-form]').forEach(function(form) {
     var started = false;
@@ -1680,7 +1821,7 @@ function copyInstall(el) {
   window.handleFaqKeydown = handleFaqKeydown;
 
   /* CTA clicks */
-  trackClick('.btn-pro', 'checkout_start', { tier: 'pro', price: 19, billing: 'monthly' });
+  trackClick('.btn-pro:not([data-revenue-cta])', 'checkout_start', { tier: 'pro', price: 19, billing: 'monthly' });
   trackClick('.btn-gpt-page:not(.btn-install-hero)', 'chatgpt_gpt_click', { tier: 'free', source: 'homepage_gpt' });
   trackClick('.btn-install-hero', 'install_guide_click', { tier: 'free', source: 'hero_install' });
   trackClick('.btn-pro-page:not(.btn-install-link)', 'pro_page_click', { tier: 'pro', source: 'hero' });
@@ -1688,12 +1829,13 @@ function copyInstall(el) {
   trackClick('.btn-team', 'workflow_sprint_intake_click', { tier: 'team', offer: 'workflow_hardening_sprint' });
   trackClick('.btn-free', 'install_click', { tier: 'free' });
   trackClick('.btn-demo-link', 'demo_click', { source: 'homepage' });
-  trackClick('.nav-cta', 'chatgpt_gpt_click', { tier: 'free', source: 'nav' });
+  trackClick('.nav-cta:not([data-revenue-cta])', 'chatgpt_gpt_click', { tier: 'free', source: 'nav' });
 
   /* Pricing CTA conversion tracking — fires on every Get Started / Pro / Team button click
      with section context so we can distinguish pricing section vs final CTA section clicks */
   document.querySelectorAll('.btn-pro, .btn-gpt-page, .btn-pro-page, .btn-install-hero, .btn-install-link, .btn-team, .btn-free, .btn-demo-link, .nav-cta').forEach(function(el) {
     el.addEventListener('click', function() {
+      if (el.hasAttribute('data-revenue-cta')) return;
       var section = el.closest('section');
       var sectionId = section ? (section.id || section.className.split(' ')[0] || 'unknown') : 'unknown';
       var tier = resolvePricingClickTier(el);
@@ -1752,8 +1894,10 @@ function copyInstall(el) {
     ctaImpressions: [
       { selector: '#pro-checkout-link', ctaId: 'pricing_pro_checkout', ctaPlacement: 'pricing', planId: 'pro' },
       { selector: '.price-card.pro .btn-pro', ctaId: 'pricing_pro_monthly', ctaPlacement: 'pricing', planId: 'pro' },
-      { selector: '.hero-actions .btn-pro-page', ctaId: 'hero_workflow_intake', ctaPlacement: 'hero', planId: 'team' },
-      { selector: '.hero-actions .hero-pro', ctaId: 'hero_workflow_sprint_recovery_intake', ctaPlacement: 'hero', planId: 'team' },
+      { selector: '.nav-cta[data-revenue-cta]', ctaId: 'nav_start_pro', ctaPlacement: 'nav', planId: 'pro' },
+      { selector: '.hero-actions .hero-pro-primary', ctaId: 'hero_start_pro', ctaPlacement: 'hero', planId: 'pro' },
+      { selector: '.hero-actions .btn-pro-page:not(.hero-pro-primary)', ctaId: 'hero_workflow_intake', ctaPlacement: 'hero', planId: 'team' },
+      { selector: '.hero-actions .hero-pro:not(.hero-pro-primary)', ctaId: 'hero_workflow_sprint_recovery_intake', ctaPlacement: 'hero', planId: 'team' },
       { selector: '.sticky-cta .btn-pro', ctaId: 'sticky_go_pro', ctaPlacement: 'sticky_cta', planId: 'pro' },
       { selector: '.price-card.team .btn-team', ctaId: 'team_workflow_sprint', ctaPlacement: 'pricing', planId: 'team' },
       { selector: '#team-pilot-intake-form', ctaId: 'workflow_sprint_intake', ctaPlacement: 'team_visible_intake', planId: 'team' }
@@ -1768,6 +1912,8 @@ initializeTeamIntakeTelemetry();
 async function handleProCheckout() {
   var buyerIntent = globalThis.ThumbGateBuyerIntent;
   var email = document.getElementById('pro-email');
+  var checkoutLink = document.getElementById('pro-checkout-link');
+  trackRevenueCta(checkoutLink);
   var normalizedEmail = buyerIntent.normalizeBuyerEmail(email && email.value);
   if (!email || !buyerIntent.isValidBuyerEmail(normalizedEmail)) {
     email.style.border = '2px solid #f87171';
@@ -1782,16 +1928,10 @@ async function handleProCheckout() {
   if (globalThis.buyerJourney && typeof globalThis.buyerJourney.markEmailCaptured === 'function') {
     globalThis.buyerJourney.markEmailCaptured();
   }
-  var checkoutLink = document.getElementById('pro-checkout-link');
   var checkoutUrl = checkoutLink ? checkoutLink.href : '/checkout/pro';
   if (typeof plausible === 'function') {
     plausible('pro_email_captured', { props: { page: 'homepage', intent: 'checkout' } });
   }
-  sendGa4Event('begin_checkout', {
-    currency: 'USD',
-    value: proPriceDollars,
-    items: [{ item_id: 'pro_monthly', item_name: 'ThumbGate Pro Monthly' }],
-  });
   try {
     await buyerIntent.submitNewsletterSignup(normalizedEmail);
   } catch (_err) {

package/public/learn.html

@@ -10,8 +10,8 @@
 <meta property="og:title" content="Learn — AI Agent Safety Guides by ThumbGate">
 <meta property="og:description" content="Practical guides for stopping AI coding agent mistakes with pre-action checks and feedback-driven enforcement.">
 <meta property="og:type" content="website">
-<meta property="og:url" content="https://thumbgate-production.up.railway.app/learn">
-<link rel="canonical" href="https://thumbgate-production.up.railway.app/learn">
+<meta property="og:url" content="https://thumbgate.ai/learn">
+<link rel="canonical" href="https://thumbgate.ai/learn">
 <link rel="icon" type="image/png" href="/thumbgate-icon.png">
 <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg">
 
@@ -21,7 +21,7 @@
   "@type": "CollectionPage",
   "name": "ThumbGate Learning Hub",
   "description": "Practical guides for AI coding agent safety, pre-action checks, and vibe coding guardrails.",
-  "url": "https://thumbgate-production.up.railway.app/learn",
+  "url": "https://thumbgate.ai/learn",
   "dateModified": "2026-04-20",
   "author": {
     "@type": "Person",
@@ -35,7 +35,7 @@
   "publisher": {
     "@type": "Organization",
     "name": "ThumbGate",
-    "url": "https://thumbgate-production.up.railway.app"
+    "url": "https://thumbgate.ai"
   },
   "mainEntity": {
     "@type": "ItemList",
@@ -43,36 +43,42 @@
       {
         "@type": "ListItem",
         "position": 1,
-        "url": "https://thumbgate-production.up.railway.app/learn/stop-ai-agent-force-push",
+        "url": "https://thumbgate.ai/learn/stop-ai-agent-force-push",
         "name": "How to Stop AI Agents From Force-Pushing to Main"
       },
       {
         "@type": "ListItem",
         "position": 2,
-        "url": "https://thumbgate-production.up.railway.app/learn/vibe-coding-safety-net",
+        "url": "https://thumbgate.ai/learn/vibe-coding-safety-net",
         "name": "The Vibe Coding Safety Net You Are Missing"
       },
       {
         "@type": "ListItem",
         "position": 3,
-        "url": "https://thumbgate-production.up.railway.app/learn/mcp-pre-action-checks-explained",
+        "url": "https://thumbgate.ai/learn/mcp-pre-action-checks-explained",
         "name": "MCP Pre-Action Checks Explained"
       },
       {
         "@type": "ListItem",
         "position": 4,
-        "url": "https://thumbgate-production.up.railway.app/learn/agent-harness-pattern",
+        "url": "https://thumbgate.ai/learn/agent-harness-pattern",
         "name": "The Agent Harness Pattern: Why Your AI Needs a Seatbelt"
       },
       {
         "@type": "ListItem",
         "position": 5,
-        "url": "https://thumbgate-production.up.railway.app/learn/ai-agent-persistent-memory",
-        "name": "How to Give Your AI Coding Agent Persistent Memory Across Sessions"
+        "url": "https://thumbgate.ai/learn/background-agent-control-layer",
+        "name": "Background Agents Need a Control Layer Outside the Model"
       },
       {
         "@type": "ListItem",
         "position": 6,
+        "url": "https://thumbgate.ai/learn/ai-agent-persistent-memory",
+        "name": "How to Give Your AI Coding Agent Persistent Memory Across Sessions"
+      },
+      {
+        "@type": "ListItem",
+        "position": 7,
         "url": "https://thumbgate.ai/learn/from-prototype-to-production",
         "name": "From git init to v1.17.0 in 70 days: an honest ThumbGate build log"
       },
@@ -297,6 +303,14 @@
       <span class="article-tag">Shared Memory</span>
     </a>
 
+    <a href="/learn/background-agent-control-layer" class="article-card">
+      <h3>Background Agents Need a Control Layer Outside the Model</h3>
+      <p>Agents can produce work. Production teams still need triggers, isolated runs, context, visibility, and controls. This is where ThumbGate fits in the AI-SDLC stack.</p>
+      <span class="article-tag">Background Agents</span>
+      <span class="article-tag">AI-SDLC</span>
+      <span class="article-tag">Controls</span>
+    </a>
+
     <a href="/learn/claude-code-goal-with-rubrics" class="article-card">
       <h3>Claude Code /goal vs Todo: The 4-Field Pattern That Actually Holds</h3>
       <p>Treating /goal like a todo wastes the command. The 4-field pattern (clear goal, measurable success, shown proof, hard limits) is the same shape as a ThumbGate rubric. Pair them and the agent cannot fake completion.</p>