thumbgate 1.26.8 → 1.27.3

package/public/index.html

@@ -20,7 +20,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:image" content="https://thumbgate.ai/og.png">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:image" content="https://thumbgate.ai/og.png">
-<meta name="thumbgate-version" content="1.26.8">
+<meta name="thumbgate-version" content="1.27.3">
 <meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agentic development cycle, AC/DC framework, Guide Generate Verify Solve, agent enforcement layer, save LLM tokens, reduce Claude API cost, reduce OpenAI cost, AI agent token savings, prevent LLM retries, prevent hallucination retries, stop AI token waste, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
 <link rel="canonical" href="__APP_ORIGIN__/">
 <link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
@@ -116,10 +116,9 @@ __GA_BOOTSTRAP__
     },
     {
       "@type": "Offer",
-      "name": "Team",
-      "price": "49",
+      "name": "Enterprise",
       "priceCurrency": "USD",
-      "description": "Intake-led team rollout with a workflow hardening sprint, shared enforcement memory, org dashboard visibility, approval boundaries, release confidence, Docker Sandboxes guidance for risky local autonomy, and pilot support for teams shipping AI-generated changes",
+      "description": "Contact-sales tier with custom pricing scoped after intake: a workflow hardening sprint, shared hosted lesson database, org dashboard visibility, shared enforcement, approval boundaries, audit-grade decision trail, regulatory gate templates, Docker Sandboxes guidance for risky local autonomy, and dedicated onboarding for teams shipping AI-generated changes",
       "url": "https://thumbgate.ai/#workflow-sprint-intake"
     },
     {
@@ -574,6 +573,15 @@ __GA_BOOTSTRAP__
   .price-card li { font-size: 14px; color: var(--text-muted); padding: 6px 0; display: flex; align-items: flex-start; gap: 8px; }
   .price-card li::before { content: "✓"; color: var(--cyan); font-weight: 700; flex-shrink: 0; }
   .price-card.pro li::before { color: var(--cyan); }
+  .pricing-matrix { max-width: 1080px; margin: 24px auto 0; overflow-x: auto; border: 1px solid var(--border); border-radius: 12px; background: var(--bg-card); }
+  .pricing-matrix table { width: 100%; min-width: 760px; border-collapse: collapse; }
+  .pricing-matrix caption { text-align: left; padding: 18px 18px 0; color: var(--text); font-weight: 800; font-size: 16px; }
+  .pricing-matrix th,
+  .pricing-matrix td { padding: 13px 16px; border-bottom: 1px solid var(--border); text-align: left; vertical-align: top; font-size: 13px; line-height: 1.45; color: var(--text-muted); }
+  .pricing-matrix th { color: var(--cyan); background: rgba(34,211,238,0.06); font-weight: 800; }
+  .pricing-matrix tr:last-child td { border-bottom: 0; }
+  .pricing-matrix strong { color: var(--text); }
+  .pricing-note { max-width: 880px; margin: 14px auto 0; color: var(--text-muted); font-size: 12px; line-height: 1.55; text-align: center; }
   .btn-free,
   .btn-demo-link { display: block; text-align: center; padding: 10px; border: 1px solid var(--border); border-radius: 8px; color: var(--text); text-decoration: none; font-size: 14px; font-weight: 500; transition: border-color 0.15s; }
   .btn-free:hover,
@@ -722,7 +730,7 @@ __GA_BOOTSTRAP__
   <div class="container">
     <div class="hero-badge">👍 👎 The Firewall for AI Agents</div>
     <h1>The Infrastructure Firewall for AI Coding Agents.</h1>
-    <p class="hero-lede">AI will always hallucinate and break things. We don't try to make AI smarter; we make its mistakes harmless. ThumbGate keeps the Senior Architect in control by blocking dangerous tool calls before they hit the disk.</p>
+    <p class="hero-lede">AI agents will always hallucinate and break things — we make their mistakes harmless. ThumbGate runs in the PreToolUse hook on your machine and blocks the dangerous tool call — rm -rf, leaked keys, off-scope edits, a bad git push — before it executes. No server, no gateway, no waiting on an enterprise rollout.</p>
 
     <div class="hero-proof-card" aria-label="ThumbGate blocking example">
       <div class="terminal-row muted">$ agent attempts risky action</div>
@@ -743,9 +751,9 @@ __GA_BOOTSTRAP__
         <a href="/checkout/pro?utm_source=website&utm_medium=offer_router&cta_id=router_start_pro&cta_placement=offer_router&plan_id=pro" data-revenue-cta data-cta-id="router_start_pro" data-cta-placement="offer_router" data-tier="pro" data-plan-id="pro" data-price="19" onclick="trackRevenueCta(this);">Pay $19/mo with Stripe →</a>
       </div>
       <div class="offer-route">
-        <strong>Team workflow: Start with intake</strong>
-        <p>Proof before rollout.</p>
-        <a href="#workflow-sprint-intake" onclick="sendFirstPartyTelemetry('workflow_sprint_intake_started',{ctaId:'router_workflow_sprint',ctaPlacement:'offer_router',offer:'workflow_sprint'});">Send the workflow first →</a>
+        <strong>Enterprise: Start with intake</strong>
+        <p>Shared enforcement, scoped.</p>
+        <a href="#workflow-sprint-intake" onclick="sendFirstPartyTelemetry('workflow_sprint_intake_started',{ctaId:'router_workflow_sprint',ctaPlacement:'offer_router',offer:'workflow_sprint'});">Talk to us →</a>
       </div>
       <div class="offer-route">
         <strong>Still evaluating: Free CLI</strong>
@@ -765,6 +773,11 @@ __GA_BOOTSTRAP__
       <blockquote style="margin:0;font-size:18px;line-height:1.5;color:var(--text);font-style:italic;">&ldquo;A better dashboard doesn&rsquo;t make the agents more reliable. The hard part isn&rsquo;t visibility. It&rsquo;s trust.&rdquo;</blockquote>
       <figcaption style="margin-top:12px;font-size:13px;color:var(--text-muted);">— Rob May, CEO &amp; co-founder, Neurometric AI, in <a href="https://thenewstack.io/claude-code-agent-view/" target="_blank" rel="noopener" style="color:var(--cyan);">The New Stack</a> on Anthropic&rsquo;s Claude Code Agent View (May 2026). ThumbGate is the open-source layer that makes the trust part real: PreToolUse gates, thumbs-down to rule, audit trail on every interception.</figcaption>
     </figure>
+    <figure style="max-width:760px;margin:24px auto 0;padding:20px 24px;border-left:3px solid var(--cyan);background:rgba(34,211,238,0.04);border-radius:0 8px 8px 0;">
+      <p style="margin:0 0 8px;font-size:14px;color:var(--text-muted);text-transform:uppercase;letter-spacing:0.08em;">Local-first is the new default</p>
+      <blockquote style="margin:0;font-size:16px;line-height:1.55;color:var(--text);">Perplexity demoed a Personal Computer agent at Computex 2026 that <strong>asks the user before sending sensitive content to the cloud</strong>. Automation Anywhere shipped EnterpriseClaw with Cisco, NVIDIA, Okta, and OpenAI — <strong>central policy, locally enforced, audit reported back</strong>. The architectural debate is settled. ThumbGate runs the same pattern for the coding agent already on your laptop.</blockquote>
+      <figcaption style="margin-top:12px;font-size:13px;color:var(--text-muted);">Sources: Perplexity at Intel Computex keynote (2026-06-02), Automation Anywhere EnterpriseClaw launch (Imagine 2026), <a href="https://thenewstack.io/automation-anywhere-enterpriseclaw-ai-agents/" target="_blank" rel="noopener" style="color:var(--cyan);">The New Stack coverage</a>.</figcaption>
+    </figure>
     <div class="first-check-card" id="first-check">
       <div class="section-label" style="text-align:left;margin-bottom:8px;">First-Dollar Activation Path</div>
       <h2>Block your first repeated AI mistake in 5 minutes.</h2>
@@ -814,7 +827,7 @@ __GA_BOOTSTRAP__
       <div hidden aria-hidden="true" data-thumbgate-test-anchors style="display:none">
         <span data-cta="hero_workflow_sprint_intake">ctaId: 'hero_workflow_sprint' ctaId: 'hero_workflow_sprint_recovery_intake' workflow_sprint_intake_started workflow_sprint_recovery_intake_clicked hero_workflow_sprint_recovery_intake</span>
         <span data-anchor="dashboard-preview">dashboard-preview What your Pro dashboard looks like check:no-force-push</span>
-        <span data-anchor="team-intake-form">Start Team Pilot Intake id="team-pilot-intake-form" data-team-intake-form name="ctaPlacement" value="team_visible_intake" name="utmMedium" value="visible_team_intake" name="planId" value="team" name="ctaId" value="workflow_sprint_intake" Team checkout happens after scope. team_workflow_sprint_recovery_intake scope_first workflow_sprint_intake_started workflow_sprint_intake_submit_attempted pricing_team_intake team_intake_started</span>
+        <span data-anchor="team-intake-form">Start Enterprise Pilot Intake id="team-pilot-intake-form" data-team-intake-form name="ctaPlacement" value="team_visible_intake" name="utmMedium" value="visible_team_intake" name="planId" value="team" name="ctaId" value="workflow_sprint_intake" Enterprise checkout happens after scope. team_workflow_sprint_recovery_intake scope_first workflow_sprint_intake_started workflow_sprint_intake_submit_attempted pricing_team_intake team_intake_started</span>
         <span data-anchor="chatgpt-context">No, you do not have to chat inside the GPT forever. ChatGPT is the discovery and memory surface. Do not rely on ChatGPT's native rating buttons for ThumbGate memory. Explore GPTs choose the GPT by Igor Ganapolsky Programming Do I have to chat inside the ThumbGate GPT for enforcement? capture thumbs-up/down lessons Real blocking for coding agents still runs locally adapters/chatgpt/INSTALL.md Native ChatGPT rating buttons are not the ThumbGate capture path. thumbs up: this review named exact files, commands, and tests. thumbs down: the answer ignored my request.</span>
       </div>
     </div>
@@ -1339,6 +1352,33 @@ __GA_BOOTSTRAP__
   <div class="container">
     <div class="section-label">Pricing</div>
     <h2 class="section-title">Stop paying for agent mistakes you already fixed.</h2>
+
+    <!-- At-a-glance comparison so buyers see plan differences without parsing the cards below. -->
+    <div class="plan-matrix-wrap" style="max-width:1080px;margin:8px auto 28px;overflow-x:auto;">
+      <table class="plan-matrix" style="width:100%;border-collapse:collapse;font-size:14px;min-width:640px;">
+        <thead>
+          <tr>
+            <th style="text-align:left;padding:12px 14px;color:var(--text-muted);font-weight:600;border-bottom:1px solid var(--border);"></th>
+            <th style="text-align:center;padding:12px 14px;border-bottom:1px solid var(--border);">Free<br><span style="font-size:12px;color:var(--text-muted);font-weight:400;">$0 forever</span></th>
+            <th style="text-align:center;padding:12px 14px;border-bottom:1px solid var(--border);color:var(--cyan);">Pro<br><span style="font-size:12px;color:var(--text-muted);font-weight:400;">$19/mo or $149/yr</span></th>
+            <th style="text-align:center;padding:12px 14px;border-bottom:1px solid var(--border);color:var(--cyan);">Enterprise<br><span style="font-size:12px;color:var(--text-muted);font-weight:400;">Custom — scoped after intake</span></th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Local PreToolUse enforcement (all agents)</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Feedback captures</td><td style="text-align:center;border-bottom:1px solid var(--border);">5/day (25 total)</td><td style="text-align:center;border-bottom:1px solid var(--border);">Unlimited</td><td style="text-align:center;border-bottom:1px solid var(--border);">Unlimited</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Active auto-promoted prevention rules</td><td style="text-align:center;border-bottom:1px solid var(--border);">3</td><td style="text-align:center;border-bottom:1px solid var(--border);">Unlimited</td><td style="text-align:center;border-bottom:1px solid var(--border);">Unlimited</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Lesson recall + search across sessions</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Personal dashboard + DPO export</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Hosted sync across machines</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Shared lesson database + org dashboard</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Org-wide shared enforcement + approval boundaries</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;border-bottom:1px solid var(--border);">Audit trail, SSO, regulatory gate templates</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">—</td><td style="text-align:center;border-bottom:1px solid var(--border);">✅</td></tr>
+          <tr><td style="padding:10px 14px;color:var(--text-muted);">Best for</td><td style="text-align:center;color:var(--text-muted);">One developer</td><td style="text-align:center;color:var(--text-muted);">Solo operators</td><td style="text-align:center;color:var(--text-muted);">Teams &amp; regulated orgs</td></tr>
+        </tbody>
+      </table>
+    </div>
+
     <div class="pricing-grid">
       <div class="price-card free-highlight" style="border-color:var(--cyan);box-shadow:0 0 40px var(--cyan-dim), inset 0 1px 0 rgba(34,211,238,0.15);position:relative;">
         <div class="tier" style="color:var(--cyan);">Free</div>
@@ -1364,7 +1404,7 @@ __GA_BOOTSTRAP__
       <div class="price-card pro" data-price-dollars="19">
         <div class="tier">Pro</div>
         <div class="price">$19<span style="font-size:16px;color:var(--text-dim)">/mo</span></div>
-        <div class="price-sub"><strong>The free npm package runs your gates locally and never expires.</strong> Pro is what we operate for you: hosted lesson sync across all your machines, adapter matrix kept current as agent runtimes ship breaking changes, and a dashboard you don't have to babysit.</div>
+        <div class="price-sub"><strong>Don't buy a tool — buy hosted sync + compatibility insurance.</strong> The free CLI runs your gates locally, but Pro is what we operate for you: secure SQLite sync across all your machines (saving you from managing database migrations manually across developer boxes) and active adapter maintenance to stay compatible with weekly breaking updates in Claude Code, Cursor, and Cline.</div>
         <ul>
           <li><strong>Block every repeat mistake</strong> — unlimited feedback captures and prevention rules (Free caps at 3 active rules)</li>
           <li><strong>Never re-explain a correction</strong> — lesson recall and search across sessions on every agent surface</li>
@@ -1385,43 +1425,85 @@ __GA_BOOTSTRAP__
         <p style="font-size:11px;color:var(--text-muted);margin-top:8px;text-align:center;">Billed today · cancel anytime.</p>
         <input type="email" id="pro-email" data-buyer-email placeholder="you@company.com" style="margin-top:10px;width:100%;padding:10px 12px;border:1px solid var(--border);border-radius:8px;background:var(--bg-raised);color:var(--text);font-size:14px;">
       </div>
-      <div class="price-card team">
-        <div class="tier">Team</div>
-        <div class="price">$49<span style="font-size:16px;color:var(--text-dim)">/seat/mo</span></div>
-        <div class="price-sub">Shared enforcement memory for one team workflow first.</div>
-        <ul>
-          <li>Everything in Pro for each seat</li>
-          <li>Shared lesson database for Team seats, with export/import and shared workflow rules</li>
-          <li>Org dashboard visibility across agent surfaces</li>
-          <li>Hosted review views for team verification evidence</li>
-          <li>Check template library for deploys, publish, refunds, and DB work</li>
-          <li>Workflow hardening sprint intake for approval boundaries and rollback safety</li>
-          <li>Email support during pilot rollout</li>
-        </ul>
-        <a href="#workflow-sprint-intake" onclick="try{posthog.capture('team_intake_click',{cta:'team_intake',seats:3,price:0})}catch(_){};sendFirstPartyTelemetry('team_intake_started',{ctaId:'pricing_team_intake',ctaPlacement:'pricing',planId:'team',seatCount:3,price:0});sendGa4Event('generate_lead',{currency:'USD',value:0,method:'team_workflow_intake'});" class="btn-team" style="display:block;text-align:center;">Send team workflow first →</a>
-        <p style="font-size:11px;color:var(--text-muted);margin-top:8px;text-align:center;">Team is $49/seat/mo with a 3-seat minimum, but team rollouts start through intake so the workflow, shared rules, and rollout proof are explicit before checkout.</p>
-      </div>
     </div>
+    <div class="pricing-matrix" aria-label="Plan capability comparison">
+      <table>
+        <caption>Compare plans at a glance</caption>
+        <thead>
+          <tr>
+            <th scope="col">Capability</th>
+            <th scope="col">Free</th>
+            <th scope="col">Pro</th>
+            <th scope="col">Enterprise</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr>
+            <td><strong>Best for</strong></td>
+            <td>Solo proof that a repeat mistake can be blocked</td>
+            <td>One operator who wants hosted sync, dashboard proof, and exports</td>
+            <td>Teams &amp; regulated orgs — one person's correction protects every seat; banking, insurance, healthcare, public sector, audited workflows</td>
+          </tr>
+          <tr>
+            <td><strong>Price</strong></td>
+            <td>$0</td>
+            <td>$19/mo or $149/yr</td>
+            <td>Custom — scoped after intake</td>
+          </tr>
+          <tr>
+            <td><strong>Feedback captures</strong></td>
+            <td>5/day, 25 total</td>
+            <td>Unlimited</td>
+            <td>Unlimited, shared across the org; custom retention and evidence policy</td>
+          </tr>
+          <tr>
+            <td><strong>Active prevention rules</strong></td>
+            <td>3 active rules</td>
+            <td>Unlimited personal rules</td>
+            <td>Shared org rules, policy templates, approvals, and audit export</td>
+          </tr>
+          <tr>
+            <td><strong>Dashboard and proof</strong></td>
+            <td>Local CLI evidence</td>
+            <td>Personal dashboard, check debugger, DPO/HF exports</td>
+            <td>Org dashboard, hosted review views, rollout proof, SIEM-ready decision trail and compliance evidence</td>
+          </tr>
+          <tr>
+            <td><strong>How to start</strong></td>
+            <td><code>npx thumbgate init</code></td>
+            <td>Self-serve Stripe checkout</td>
+            <td>Send one repeated workflow failure first — intake before checkout</td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
+    <p class="pricing-note">Free proves the enforcement loop. Pro removes solo limits. Enterprise plans start through intake because shared rules, permissions, rollback paths, and rollout proof must be explicit before checkout.</p>
     <div style="max-width:1080px;margin:24px auto 0;">
-      <div class="price-card regulated" style="border:1px solid var(--cyan);background:linear-gradient(180deg, rgba(34,211,238,0.04), transparent);padding:24px 28px;">
+      <div class="price-card enterprise" style="border:1px solid var(--cyan);background:linear-gradient(180deg, rgba(34,211,238,0.04), transparent);padding:24px 28px;">
         <div style="display:flex;flex-wrap:wrap;align-items:flex-start;gap:24px;justify-content:space-between;">
           <div style="flex:1 1 420px;min-width:280px;">
-            <div class="tier" style="color:var(--cyan);">Regulated</div>
-            <div style="font-size:14px;color:var(--text-muted);margin:4px 0 12px;letter-spacing:0.04em;text-transform:uppercase;">Banking · Insurance · Healthcare · Public sector</div>
-            <div style="font-size:18px;color:var(--text);margin-bottom:6px;font-weight:700;">Regulated workflow review</div>
-            <div class="price-sub" style="margin-bottom:14px;">For teams operating AI coding agents under DORA, the EU AI Act, HIPAA, or comparable audit pressure. Pricing is scoped after intake because the buyer needs evidence, deployment boundaries, and approval ownership before checkout.</div>
+            <div class="tier" style="color:var(--cyan);">Enterprise</div>
+            <div style="font-size:14px;color:var(--text-muted);margin:4px 0 12px;letter-spacing:0.04em;text-transform:uppercase;">Engineering teams · Banking · Insurance · Healthcare · Public sector</div>
+            <div style="font-size:18px;color:var(--text);margin-bottom:6px;font-weight:700;">Shared enforcement for teams &amp; regulated workflows — custom pricing</div>
+            <div class="price-sub" style="margin-bottom:14px;">For teams that need one correction to protect every developer and agent across shared repos, CI, and approval policies — including teams operating under DORA, the EU AI Act, HIPAA, or comparable audit pressure. Pricing is scoped after intake because the buyer needs evidence, deployment boundaries, and approval ownership before checkout.</div>
             <ul style="margin-bottom:0;">
+              <li><strong>Shared lesson database</strong> — one hosted, shared lesson DB so one team member's correction becomes every developer's prevention rule across the org</li>
+              <li><strong>Org dashboard</strong> — active agents, check hit-rates, and risk surfaces across the whole team</li>
+              <li><strong>Shared enforcement memory</strong> — approval boundaries and rollback safety applied org-wide, not per machine</li>
               <li><strong>Audit-grade decision trail</strong> — every PreToolUse evaluation logged with the rule that fired, ready for SIEM export</li>
               <li><strong>Immutable rule provenance</strong> — each prevention rule traceable to the feedback event that generated it</li>
               <li><strong>Self-managed deployment</strong> — air-gapped or VPC-hosted; no agent state leaves your boundary</li>
+              <li><strong>Dialogflow CX fulfillment guard</strong> — ThumbGate's pre-action gate sits in front of your Dialogflow CX webhook fulfillment, in your own GCP tenant, so risky or repeat turns are blocked before they touch a database, CRM, or billing system (white-glove design-partner pilot)</li>
+              <li><strong>Vertex AI / Gemini scoring, in-tenant</strong> — risk and planning scoring runs on Gemini via Vertex (<code>npx thumbgate setup-vertex</code>); no conversational data leaves your VPC</li>
               <li><strong>DORA / EU AI Act evidence packaging</strong> — machine-readable reports aligned to Article 6, 28, and high-risk provider monitoring obligations</li>
               <li><strong>SSO + role separation</strong> — operator, reviewer, and auditor roles enforced at the gate layer</li>
+              <li><strong>Enterprise Data Chat</strong> — local ThumbGate data Q&amp;A with Dialogflow CX / Vertex-ready governance; live cloud-agent claims require deployment evidence first</li>
               <li><strong>Workflow proof plan included</strong> — a scoped review that proves the boundary against one of your real repeated-failure cases before broader rollout</li>
               <li><strong>Quarterly red-team review</strong> — prompt-injection and policy-bypass exercises with written findings</li>
             </ul>
           </div>
           <div style="flex:0 0 260px;min-width:240px;display:flex;flex-direction:column;gap:10px;">
-            <a href="/?tier=regulated#workflow-sprint-intake" onclick="try{posthog.capture('regulated_intake_click',{cta:'regulated_contact_sales',placement:'pricing'})}catch(_){};sendFirstPartyTelemetry('regulated_intake_started',{ctaId:'pricing_regulated_intake',ctaPlacement:'pricing',planId:'regulated'});" class="btn-team" style="display:block;text-align:center;background:var(--cyan);color:#06121a;font-weight:800;">Start regulated intake →</a>
+            <a href="/?tier=enterprise#workflow-sprint-intake" onclick="try{posthog.capture('enterprise_intake_click',{cta:'enterprise_contact_sales',placement:'pricing'})}catch(_){};sendFirstPartyTelemetry('enterprise_intake_started',{ctaId:'pricing_enterprise_intake',ctaPlacement:'pricing',planId:'enterprise'});" class="btn-team" style="display:block;text-align:center;background:var(--cyan);color:#06121a;font-weight:800;">Start enterprise intake →</a>
             <a href="/learn/regulated-agent-execution-boundary" style="display:block;text-align:center;padding:10px 14px;font-size:13px;color:var(--cyan);border:1px solid var(--cyan);border-radius:8px;text-decoration:none;">Read the build-vs-buy thesis first</a>
             <p style="font-size:11px;color:var(--text-muted);margin:0;text-align:center;line-height:1.5;">Pricing is workflow-scoped and shared after the intake call. Annual pre-pay available.</p>
           </div>
@@ -1433,21 +1515,21 @@ __GA_BOOTSTRAP__
 
 <section class="compatibility" id="workflow-sprint-intake">
   <div class="container">
-    <div class="section-label">Team Pilot</div>
+    <div class="section-label">Enterprise Pilot</div>
     <h2 class="section-title">Start the AI Agent Governance Sprint with one repeat failure</h2>
     <p style="color:var(--text-dim);max-width:720px;margin:0 auto 16px;">This is the fastest path to first paid value for teams. Start with one repo, one workflow owner, and one blocker. The intake is designed to prove that ThumbGate reduces review churn, rollout risk, or repeated agent mistakes before a wider rollout.</p>
     <div class="team-intake-panel">
       <div class="team-intake-panel-head">
         <div>
           <h3>Tell us the workflow. Get a proof plan.</h3>
-          <p>The highest-fit Team buyer is already feeling one repeated failure. Send the workflow first so the next step is scoped around the real blocker instead of a blind checkout.</p>
+          <p>The highest-fit Enterprise buyer is already feeling one repeated failure. Send the workflow first so the next step is scoped around the real blocker instead of a blind checkout.</p>
         </div>
         <span class="team-intake-badge">30-minute intake</span>
       </div>
       <div class="team-intake-recovery" aria-label="Checkout recovery path for workflow sprint buyers">
         <div>
-          <strong>Team checkout happens after scope.</strong>
-          <span>Send the workflow first. We will qualify the blocker, confirm whether Pro, Team, or a scoped rollout is the right next step, and keep the purchase path tied to real evidence.</span>
+          <strong>Enterprise checkout happens after scope.</strong>
+          <span>Send the workflow first. We will qualify the blocker, confirm whether Pro or a scoped Enterprise rollout is the right next step, and keep the purchase path tied to real evidence.</span>
         </div>
         <a href="#team-pilot-intake-form" onclick="sendFirstPartyTelemetry('workflow_sprint_recovery_intake_clicked',{ctaId:'team_workflow_sprint_recovery_intake',ctaPlacement:'team_intake_recovery',planId:'team',offer:'workflow_hardening_sprint',reason:'scope_first'});sendGa4Event('generate_lead',{currency:'USD',value:0,method:'workflow_sprint_recovery_intake'});">Send workflow first</a>
       </div>
@@ -1467,7 +1549,7 @@ __GA_BOOTSTRAP__
         <textarea class="full" name="blocker" placeholder="What repeat mistake, rollout blocker, or team handoff failure keeps happening?" required></textarea>
         <textarea class="full" name="note" placeholder="Optional context: team size, repos involved, target rollout date, or what you need to prove internally."></textarea>
         <div class="full">
-          <button type="submit" class="btn-team">Start Team Pilot Intake</button>
+          <button type="submit" class="btn-team">Start Enterprise Pilot Intake</button>
         </div>
       </form>
     </div>
@@ -1534,11 +1616,11 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">What does Pro cost?</div>
-        <div class="faq-a">Pro is $19/mo or $149/yr for individual operators and bills immediately through Stripe. Team is $49/seat/mo with a 3-seat minimum and starts through the workflow intake so scope, shared rules, and rollout proof are explicit before a team rollout.</div>
+        <div class="faq-a">Pro is $19/mo or $149/yr for individual operators and bills immediately through Stripe. Enterprise is custom pricing, scoped after intake, and starts through the workflow intake so scope, shared rules, and rollout proof are explicit before a rollout.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">Does ThumbGate support enterprise Google Cloud / Vertex AI?</div>
-        <div class="faq-a">Yes! ThumbGate features a zero-friction enterprise setup path via <code>npx thumbgate setup-vertex</code>. This command automatically detects your active gcloud session, enables the Vertex AI API on your Google Cloud project, and configures secure Application Default Credentials (ADC) to route all evaluations within your corporate VPC.</div>
+        <div class="faq-a">Yes. <code>npx thumbgate setup-vertex</code> detects your active gcloud session, enables the Vertex AI API on your Google Cloud project, and configures secure Application Default Credentials (ADC) so evaluations run within your corporate VPC. For Dialogflow CX, the Enterprise pilot puts ThumbGate's pre-action gate in front of your DFCX webhook fulfillment (deployed in your own tenant) so risky or repeat turns are blocked before they touch a database, CRM, or billing system. It's a white-glove design-partner pilot — ThumbGate gates your own Dialogflow CX agent; it does not host a Dialogflow CX agent for you.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q" role="button" tabindex="0" aria-expanded="false" onclick="toggleFaq(this)" onkeydown="handleFaqKeydown(event)">How does ThumbGate contain enterprise API costs?</div>
@@ -1594,7 +1676,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.26.8</span>
+    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.27.3</span>
   </div>
 </footer>
 

package/public/learn.html

@@ -79,6 +79,36 @@
       {
         "@type": "ListItem",
         "position": 7,
+        "url": "https://thumbgate.ai/learn/agentic-enterprise-context-brain",
+        "name": "Agentic Enterprise Context Brain: Memory Plus Enforcement"
+      },
+      {
+        "@type": "ListItem",
+        "position": 8,
+        "url": "https://thumbgate.ai/learn/deterministic-agent-workflows",
+        "name": "Deterministic Agent Workflows Need Runtime Gates"
+      },
+      {
+        "@type": "ListItem",
+        "position": 9,
+        "url": "https://thumbgate.ai/learn/codex-role-plugins-need-governance",
+        "name": "Codex Role Plugins Need Pre-Action Governance"
+      },
+      {
+        "@type": "ListItem",
+        "position": 10,
+        "url": "https://thumbgate.ai/learn/agentic-os-team-governance",
+        "name": "Agentic OS Team Governance: Three Tiers Plus Gates"
+      },
+      {
+        "@type": "ListItem",
+        "position": 11,
+        "url": "https://thumbgate.ai/learn/cost-aware-agent-gate-routing",
+        "name": "Cost-Aware Agent Gate Routing"
+      },
+      {
+        "@type": "ListItem",
+        "position": 12,
         "url": "https://thumbgate.ai/learn/from-prototype-to-production",
         "name": "From git init to v1.17.0 in 70 days: an honest ThumbGate build log"
       },
@@ -327,6 +357,46 @@
       <span class="article-tag">Session Persistence</span>
     </a>
 
+    <a href="/learn/agentic-enterprise-context-brain" class="article-card">
+      <h3>Agentic Enterprise Context Brain: Memory Plus Enforcement</h3>
+      <p>Enterprise agents need a context brain, but memory alone does not stop a repeated bad action. This guide turns facts, trust scores, prior failures, approvals, and evidence into pre-action gates.</p>
+      <span class="article-tag">Agentic Enterprise</span>
+      <span class="article-tag">Memory OS</span>
+      <span class="article-tag">Enforcement</span>
+    </a>
+
+    <a href="/learn/deterministic-agent-workflows" class="article-card">
+      <h3>Deterministic Agent Workflows Need Runtime Gates</h3>
+      <p>Claude Code workflows make orchestration scriptable and reviewable. ThumbGate adds the missing trust layer: run contracts, proof gates, and repeat-failure blocks before each tool call executes.</p>
+      <span class="article-tag">Claude Code</span>
+      <span class="article-tag">Workflows</span>
+      <span class="article-tag">Proof Gates</span>
+    </a>
+
+    <a href="/learn/codex-role-plugins-need-governance" class="article-card">
+      <h3>Codex Role Plugins Need Pre-Action Governance</h3>
+      <p>Codex plugins, Sites, and annotations move agent work into sales, analytics, design, finance, and documents. ThumbGate gates role-specific writes before they publish, share, or update business systems.</p>
+      <span class="article-tag">Codex Plugins</span>
+      <span class="article-tag">Sites</span>
+      <span class="article-tag">Governance</span>
+    </a>
+
+    <a href="/learn/agentic-os-team-governance" class="article-card">
+      <h3>Agentic OS Team Governance: Three Tiers Plus Gates</h3>
+      <p>A team Agentic OS needs human-editable source of truth, agent-operating files, git backup, permission mirroring, and memory scope. ThumbGate turns that architecture into runtime checks.</p>
+      <span class="article-tag">Agentic OS</span>
+      <span class="article-tag">Team Memory</span>
+      <span class="article-tag">Enterprise</span>
+    </a>
+
+    <a href="/learn/cost-aware-agent-gate-routing" class="article-card">
+      <h3>Cost-Aware Agent Gate Routing</h3>
+      <p>Use deterministic rules, semantic cache, local classifiers, local semantic recall, LLM judges, and human review in the right order so governance stays fast enough to leave on.</p>
+      <span class="article-tag">Semantic Cache</span>
+      <span class="article-tag">Rubrics</span>
+      <span class="article-tag">Cost Control</span>
+    </a>
+
     <a href="/learn/from-prototype-to-production" class="article-card">
       <h3>From git init to v1.17.0 in 70 days: an honest ThumbGate build log</h3>
       <p>70 days, 112 commits, 17 minor releases, 6k npm downloads, $0 cold-traffic revenue. The unedited story of taking ThumbGate from a one-line repo init to live production — including the part that's still broken.</p>

package/public/lessons.html

@@ -385,8 +385,32 @@ const LOCAL_PRO_BOOTSTRAP = __LESSONS_BOOTSTRAP_ENABLED__;
 function escHtml(s) { var d = document.createElement('div'); d.textContent = s; return d.innerHTML; }
 function escAttr(s) { return escHtml(String(s || '')).replace(/"/g, '"'); }
 
+let ACTIVE_PROJECT_DIR = '';
+try {
+  var urlParams = new URLSearchParams(window.location.search);
+  ACTIVE_PROJECT_DIR = urlParams.get('project') || '';
+} catch (e) {}
+
+function preserveProjectQueryParams() {
+  if (!ACTIVE_PROJECT_DIR) return;
+  var links = document.querySelectorAll('a[href^="/dashboard"], a[href^="/lessons"], a[href="/"]');
+  links.forEach(function(link) {
+    try {
+      var url = new URL(link.href, window.location.origin);
+      url.searchParams.set('project', ACTIVE_PROJECT_DIR);
+      link.href = url.pathname + url.search + url.hash;
+    } catch (e) {}
+  });
+}
+
+window.addEventListener('DOMContentLoaded', preserveProjectQueryParams);
+
 function getHeaders() {
-  return { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' };
+  var headers = { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' };
+  if (ACTIVE_PROJECT_DIR) {
+    headers['x-thumbgate-project-dir'] = ACTIVE_PROJECT_DIR;
+  }
+  return headers;
 }
 
 function hasBootstrapKey() {
@@ -791,14 +815,107 @@ function deriveSeverity(lesson) {
   return 'info';
 }
 
+function cleanLiveTitle(titleText, contextText) {
+  if (!titleText) return 'Lesson';
+  var prefix = '';
+  var rest = titleText;
+  var match = titleText.match(/^(MISTAKE|SUCCESS|LEARNING|PREFERENCE):\s*(.*)/i);
+  if (match) {
+    prefix = match[1].toUpperCase() + ': ';
+    rest = match[2];
+  }
+  
+  var trimmed = rest.trim();
+  var isJson = trimmed.indexOf('{') === 0;
+  
+  if (isJson) {
+    try {
+      var parsed = JSON.parse(trimmed);
+      var promptVal = parsed.prompt;
+      var hookVal = parsed.hook_event_name || parsed.hookEventName;
+      if (promptVal) {
+        var dirName = parsed.cwd ? parsed.cwd.split('/').pop() : '';
+        return prefix + 'Prompt "' + promptVal + '"' + (dirName ? ' inside ' + dirName : '');
+      }
+      if (hookVal) {
+        var dirName = parsed.cwd ? parsed.cwd.split('/').pop() : '';
+        return prefix + 'Hook event ' + hookVal + (dirName ? ' inside ' + dirName : '');
+      }
+      if (parsed.signal) {
+        var dirName = parsed.cwd ? parsed.cwd.split('/').pop() : '';
+        return prefix + (parsed.signal === 'up' ? 'Thumbs Up' : 'Thumbs Down') + (dirName ? ' inside ' + dirName : '');
+      }
+    } catch (e) {
+      if (contextText) {
+        var ctxTrimmed = contextText.trim();
+        if (ctxTrimmed.indexOf('{') === 0) {
+          try {
+            var parsedCtx = JSON.parse(ctxTrimmed);
+            var promptValCtx = parsedCtx.prompt;
+            var hookValCtx = parsedCtx.hook_event_name || parsedCtx.hookEventName;
+            if (promptValCtx) {
+              var dirName = parsedCtx.cwd ? parsedCtx.cwd.split('/').pop() : '';
+              return prefix + 'Prompt "' + promptValCtx + '"' + (dirName ? ' inside ' + dirName : '');
+            }
+            if (hookValCtx) {
+              var dirName = parsedCtx.cwd ? parsedCtx.cwd.split('/').pop() : '';
+              return prefix + 'Hook event ' + hookValCtx + (dirName ? ' inside ' + dirName : '');
+            }
+          } catch (err) {
+            // ignore
+          }
+        }
+      }
+    }
+    
+    var promptMatch = rest.match(/"prompt"\s*:\s*"([^"]+)"/) || (contextText && contextText.match(/"prompt"\s*:\s*"([^"]+)"/));
+    if (promptMatch) {
+      var cwdMatch = rest.match(/"cwd"\s*:\s*"([^"]+)"/) || (contextText && contextText.match(/"cwd"\s*:\s*"([^"]+)"/));
+      var dirName = cwdMatch ? cwdMatch[1].split('/').pop() : '';
+      return prefix + 'Prompt "' + promptMatch[1] + '"' + (dirName ? ' inside ' + dirName : '');
+    }
+    
+    var hookMatch = rest.match(/"hook_?event_?name"\s*:\s*"([^"]+)"/i) || (contextText && contextText.match(/"hook_?event_?name"\s*:\s*"([^"]+)"/i));
+    if (hookMatch) {
+      var cwdMatch = rest.match(/"cwd"\s*:\s*"([^"]+)"/) || (contextText && contextText.match(/"cwd"\s*:\s*"([^"]+)"/));
+      var dirName = cwdMatch ? cwdMatch[1].split('/').pop() : '';
+      return prefix + 'Hook event ' + hookMatch[1] + (dirName ? ' inside ' + dirName : '');
+    }
+  }
+  return titleText;
+}
+
+function cleanLiveContext(contextText) {
+  if (!contextText) return '';
+  var trimmed = contextText.trim();
+  if (trimmed.indexOf('{') === 0 && trimmed.indexOf('}') === trimmed.length - 1) {
+    try {
+      var parsed = JSON.parse(trimmed);
+      if (parsed.prompt) {
+        var dirName = parsed.cwd ? parsed.cwd.split('/').pop() : '';
+        var parts = [];
+        parts.push('Prompt: "' + parsed.prompt + '"');
+        if (parsed.cwd) parts.push('Working dir: ' + parsed.cwd);
+        if (parsed.hook_event_name) parts.push('Hook event: ' + parsed.hook_event_name);
+        return parts.join(' · ');
+      }
+    } catch (e) {
+      // ignore
+    }
+  }
+  return contextText;
+}
+
 function mapLiveRules(payload) {
   return (payload.results || []).map(function(result) {
     var linkedGate = (((result.systemResponse || {}).linkedAutoGates) || [])[0] || null;
     var sourceFeedback = ((result.systemResponse || {}).sourceFeedback) || null;
+    var rawTitle = result.title || ((result.lesson || {}).summary) || 'Lesson';
+    var rawContext = ((result.lesson || {}).howToAvoid) || ((result.lesson || {}).summary) || (sourceFeedback && sourceFeedback.context) || '';
     return {
       id: result.id,
-      title: result.title || ((result.lesson || {}).summary) || 'Lesson',
-      context: ((result.lesson || {}).howToAvoid) || ((result.lesson || {}).summary) || (sourceFeedback && sourceFeedback.context) || '',
+      title: cleanLiveTitle(rawTitle, rawContext),
+      context: cleanLiveContext(rawContext),
       occurrences: linkedGate && linkedGate.occurrences ? linkedGate.occurrences : 1,
       severity: deriveSeverity(result),
       tags: Array.isArray(result.tags) ? result.tags : [],
@@ -812,13 +929,14 @@ function mapTimelineItems(payload, lessonMap) {
   return (payload.results || []).map(function(entry) {
     var linkedLesson = lessonMap.get(entry.id) || null;
     var timestamp = entry.timestamp || null;
+    var rawContext = entry.context || entry.title || '';
     return {
       signal: normalizeSignal(entry.signal || entry.feedback),
-      context: entry.context || entry.title || '',
+      context: cleanLiveContext(rawContext),
       date: formatDate(entry.timestamp),
       timestamp: timestamp,
       dayKey: toDayKey(timestamp),
-      learned: linkedLesson ? linkedLesson.title : '',
+      learned: linkedLesson ? cleanLiveTitle(linkedLesson.title, rawContext) : '',
       feedbackId: entry.id || ''
     };
   });
@@ -926,8 +1044,13 @@ async function loadLive() {
     renderTimeline(allTimeline);
     renderInsights(dashboardSnapshot);
     renderImprovementMetrics(stats, dashboardSnapshot);
+    var isEnterprise = API_KEY.startsWith('tg_op_') || API_KEY.startsWith('tg_creator_');
+    if (stats.tier) {
+      isEnterprise = (stats.tier === 'Enterprise');
+    }
+    const tierName = isEnterprise ? 'Enterprise' : 'Pro';
     document.getElementById('proBadge').style.display = 'none';
-    setMode('Local Pro connected — this lessons view is reading your live rules, feedback timeline, and insights.', false);
+    setMode('Local ' + tierName + ' connected — this lessons view is reading your live rules, feedback timeline, and insights.', false);
   } catch (_err) {
     loadDemo();
   }

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.26.8",
+  "softwareVersion": "1.27.3",
   "url": "https://thumbgate.ai/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.26.8</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.27.3</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>