thumbgate 1.27.11 → 1.27.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (131) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/.well-known/llms.txt +2 -1
  3. package/.well-known/mcp/server-card.json +1 -1
  4. package/README.md +2 -4
  5. package/adapters/claude/.mcp.json +2 -2
  6. package/adapters/mcp/server-stdio.js +1 -1
  7. package/adapters/opencode/opencode.json +1 -1
  8. package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
  9. package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
  10. package/bin/cli.js +78 -259
  11. package/config/builtin-lessons.json +23 -0
  12. package/config/gate-templates.json +0 -228
  13. package/config/gates/claim-verification.json +0 -18
  14. package/package.json +35 -25
  15. package/public/assets/brand/thumbgate-logo-transparent.svg +22 -0
  16. package/public/assets/brand/thumbgate-mark-inline-v3.svg +19 -0
  17. package/public/assets/brand/thumbgate-mark.svg +11 -5
  18. package/public/blog.html +0 -30
  19. package/public/brand/thumbgate-mark.svg +9 -5
  20. package/public/chatgpt-app.html +2 -2
  21. package/public/compare.html +2 -1
  22. package/public/dashboard.html +1 -1
  23. package/public/federal.html +1 -1
  24. package/public/index.html +95 -216
  25. package/public/learn.html +59 -35
  26. package/public/lessons.html +1 -1
  27. package/public/numbers.html +2 -2
  28. package/public/pro.html +7 -7
  29. package/scripts/aws-blocks-guardrails.js +228 -0
  30. package/scripts/cli-schema.js +22 -10
  31. package/scripts/dashboard-chat.js +2 -1
  32. package/scripts/document-intake.js +1 -49
  33. package/scripts/durability/step.js +3 -3
  34. package/scripts/gate-stats.js +5 -11
  35. package/scripts/gemini-embedding-policy.js +2 -1
  36. package/scripts/hook-stop-anti-claim.js +116 -184
  37. package/scripts/hosted-config.js +0 -12
  38. package/scripts/llm-client.js +187 -5
  39. package/scripts/plausible-domain-config.js +3 -1
  40. package/scripts/seo-gsd.js +240 -1
  41. package/scripts/tool-registry.js +2 -2
  42. package/scripts/vector-store.js +44 -0
  43. package/scripts/workspace-evolver.js +62 -2
  44. package/src/api/server.js +340 -131
  45. package/public/assets/brand/thumbgate-mark-inline.svg +0 -15
  46. package/public/compare/adopt-ai.html +0 -219
  47. package/public/compare/agentix-labs.html +0 -197
  48. package/public/compare/ai-experience-orchestration.html +0 -216
  49. package/public/compare/anthropic-claude-for-legal.html +0 -260
  50. package/public/compare/anthropic-containment.html +0 -280
  51. package/public/compare/arcade.html +0 -175
  52. package/public/compare/arcjet.html +0 -239
  53. package/public/compare/bumblebee.html +0 -307
  54. package/public/compare/claude-code-hooks.html +0 -294
  55. package/public/compare/databricks-unity-ai-gateway.html +0 -215
  56. package/public/compare/fallow.html +0 -351
  57. package/public/compare/heidi.html +0 -233
  58. package/public/compare/mem0.html +0 -342
  59. package/public/compare/oak-and-sparrow-gatekeeper.html +0 -289
  60. package/public/compare/rein.html +0 -236
  61. package/public/compare/sigmashake.html +0 -256
  62. package/public/compare/speclock.html +0 -342
  63. package/public/guides/agent-harness-optimization.html +0 -342
  64. package/public/guides/agentic-web-governance.html +0 -406
  65. package/public/guides/ai-agent-governance-sprint.html +0 -415
  66. package/public/guides/ai-agent-pre-action-approval-gates.html +0 -401
  67. package/public/guides/ai-agent-workflow-migration-checklist.html +0 -392
  68. package/public/guides/ai-deployment-readiness.html +0 -415
  69. package/public/guides/ai-mode-ads-agent-governance.html +0 -401
  70. package/public/guides/ai-search-topical-presence.html +0 -342
  71. package/public/guides/autoresearch-agent-safety.html +0 -342
  72. package/public/guides/background-agent-governance.html +0 -358
  73. package/public/guides/best-tools-stop-ai-agents-breaking-production.html +0 -363
  74. package/public/guides/browser-automation-safety.html +0 -342
  75. package/public/guides/chatgpt-ads-trust.html +0 -353
  76. package/public/guides/claude-code-feedback.html +0 -339
  77. package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
  78. package/public/guides/claude-code-skills-guardrails.html +0 -343
  79. package/public/guides/claude-desktop.html +0 -356
  80. package/public/guides/code-knowledge-graph-guardrails.html +0 -365
  81. package/public/guides/codex-cli-guardrails.html +0 -339
  82. package/public/guides/cursor-agent-guardrails.html +0 -339
  83. package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
  84. package/public/guides/database-agent-safety.html +0 -406
  85. package/public/guides/deepseek-v4-runtime-guardrails.html +0 -346
  86. package/public/guides/developer-machine-supply-chain-guardrails.html +0 -358
  87. package/public/guides/gcp-mcp-guardrails.html +0 -147
  88. package/public/guides/gemini-cli-feedback-memory.html +0 -339
  89. package/public/guides/gpt-5-5-model-evaluation.html +0 -358
  90. package/public/guides/internal-ai-engineering-stack-guardrails.html +0 -348
  91. package/public/guides/long-running-agent-context-management.html +0 -346
  92. package/public/guides/mcp-tool-governance.html +0 -401
  93. package/public/guides/multica-thumbgate-setup.html +0 -134
  94. package/public/guides/native-messaging-host-security.html +0 -342
  95. package/public/guides/policy-engine-pre-action-gates.html +0 -346
  96. package/public/guides/pre-action-checks.html +0 -342
  97. package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +0 -342
  98. package/public/guides/prompt-tricks-to-workflow-rules.html +0 -365
  99. package/public/guides/proxy-pointer-rag-guardrails.html +0 -352
  100. package/public/guides/rag-precision-tuning-guardrails.html +0 -352
  101. package/public/guides/reasoning-compression-guardrails.html +0 -346
  102. package/public/guides/relational-knowledge-ai-recommendations.html +0 -342
  103. package/public/guides/roo-code-alternative-cline.html +0 -339
  104. package/public/guides/semantic-programmatic-seo-guardrails.html +0 -352
  105. package/public/guides/seo-agent-skills-guardrails.html +0 -344
  106. package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -342
  107. package/public/learn/ac-dc-runtime-enforcement.html +0 -277
  108. package/public/learn/agent-harness-pattern.html +0 -181
  109. package/public/learn/agent-identity-connector-governance.html +0 -146
  110. package/public/learn/agent-swarms-shared-gates.html +0 -173
  111. package/public/learn/agentic-enterprise-context-brain.html +0 -117
  112. package/public/learn/agentic-os-team-governance.html +0 -146
  113. package/public/learn/ai-agent-governance.html +0 -158
  114. package/public/learn/ai-agent-persistent-memory.html +0 -211
  115. package/public/learn/anthropomorphic-claim-gates.html +0 -180
  116. package/public/learn/background-agent-control-layer.html +0 -184
  117. package/public/learn/claude-code-goal-with-rubrics.html +0 -205
  118. package/public/learn/codex-role-plugins-need-governance.html +0 -125
  119. package/public/learn/cost-aware-agent-gate-routing.html +0 -173
  120. package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +0 -157
  121. package/public/learn/deterministic-agent-workflows.html +0 -185
  122. package/public/learn/feedback-loop-vs-decision-layer.html +0 -283
  123. package/public/learn/from-prototype-to-production.html +0 -223
  124. package/public/learn/learn.css +0 -51
  125. package/public/learn/mcp-pre-action-checks-explained.html +0 -172
  126. package/public/learn/pretix-stripe-connect-marketplaces.html +0 -161
  127. package/public/learn/regulated-agent-execution-boundary.html +0 -196
  128. package/public/learn/spec-driven-development.html +0 -168
  129. package/public/learn/stop-ai-agent-force-push.html +0 -134
  130. package/public/learn/vibe-coding-safety-net.html +0 -142
  131. package/scripts/reddit-browser-notification-watch.js +0 -230
@@ -1,392 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8" />
5
- <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
- <title>AI Agent Workflow Migration Checklist | ThumbGate</title>
7
- <meta name="description" content="A practical checklist for moving from ad hoc AI coding agents to governed background-agent workflows with gates, evidence, ownership, and audit-ready controls." />
8
- <meta property="og:title" content="AI Agent Workflow Migration Checklist" />
9
- <meta property="og:description" content="Move agent coding from ad hoc use to governed workflows: scope, gates, evidence, ownership, approvals, and audit-ready controls." />
10
- <meta property="og:type" content="article" />
11
- <meta property="og:url" content="https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist" />
12
- <link rel="canonical" href="https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist" />
13
- <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
14
- <link rel="icon" type="image/svg+xml" href="/thumbgate-icon.png" />
15
- <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
16
- <meta property="og:image" content="/og.png" />
17
- <style>
18
- :root {
19
- --bg: #0a0a0b;
20
- --bg-raised: #111113;
21
- --bg-card: #161618;
22
- --line: #242428;
23
- --text: #e8e8ec;
24
- --muted: #9a9aa6;
25
- --cyan: #22d3ee;
26
- --green: #4ade80;
27
- --amber: #fbbf24;
28
- --red: #f87171;
29
- }
30
- * { box-sizing: border-box; }
31
- body {
32
- margin: 0;
33
- font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
34
- background: var(--bg);
35
- color: var(--text);
36
- line-height: 1.65;
37
- }
38
- a { color: var(--cyan); text-decoration: none; }
39
- a:hover { text-decoration: underline; }
40
- .container { max-width: 1080px; margin: 0 auto; padding: 0 24px; }
41
- .topbar {
42
- position: sticky;
43
- top: 0;
44
- z-index: 20;
45
- backdrop-filter: blur(12px);
46
- background: rgba(10, 10, 11, 0.9);
47
- border-bottom: 1px solid var(--line);
48
- }
49
- .topbar .container {
50
- display: flex;
51
- justify-content: space-between;
52
- align-items: center;
53
- padding-top: 14px;
54
- padding-bottom: 14px;
55
- }
56
- .brand {
57
- display: inline-flex;
58
- align-items: center;
59
- gap: 8px;
60
- color: var(--text);
61
- font-weight: 700;
62
- text-decoration: none;
63
- }
64
- .logo-mark { width: 28px; height: 28px; display: block; }
65
- .hero { padding: 72px 0 30px; }
66
- .eyebrow {
67
- display: inline-flex;
68
- align-items: center;
69
- padding: 6px 12px;
70
- border-radius: 999px;
71
- border: 1px solid rgba(34, 211, 238, 0.22);
72
- background: rgba(34, 211, 238, 0.1);
73
- color: var(--cyan);
74
- text-transform: uppercase;
75
- letter-spacing: 0.08em;
76
- font-size: 12px;
77
- font-weight: 700;
78
- }
79
- h1 {
80
- max-width: 820px;
81
- margin: 16px 0;
82
- font-size: clamp(34px, 5vw, 58px);
83
- line-height: 1.06;
84
- letter-spacing: 0;
85
- }
86
- .hero p {
87
- max-width: 760px;
88
- color: var(--muted);
89
- font-size: 18px;
90
- }
91
- .signal-row {
92
- display: flex;
93
- flex-wrap: wrap;
94
- gap: 12px;
95
- margin-top: 28px;
96
- }
97
- .signal-pill {
98
- display: inline-flex;
99
- align-items: center;
100
- padding: 10px 14px;
101
- border-radius: 999px;
102
- border: 1px solid var(--line);
103
- background: var(--bg-raised);
104
- font-size: 14px;
105
- font-weight: 650;
106
- }
107
- .signal-pill.good { color: #b8f7c8; border-color: rgba(74, 222, 128, 0.28); background: rgba(74, 222, 128, 0.1); }
108
- .signal-pill.warn { color: #fde68a; border-color: rgba(251, 191, 36, 0.28); background: rgba(251, 191, 36, 0.1); }
109
- .grid {
110
- display: grid;
111
- grid-template-columns: minmax(0, 2fr) minmax(290px, 1fr);
112
- gap: 24px;
113
- padding-bottom: 72px;
114
- }
115
- .card, .detail-section, .sidebar-card {
116
- background: var(--bg-card);
117
- border: 1px solid var(--line);
118
- border-radius: 8px;
119
- }
120
- .card, .detail-section, .sidebar-card { padding: 24px; }
121
- .detail-section { margin-bottom: 18px; }
122
- .detail-section h2, .card h2, .sidebar-card h2 {
123
- margin: 0 0 12px;
124
- font-size: 24px;
125
- letter-spacing: 0;
126
- }
127
- .detail-section p, .card p, .sidebar-card p, li { color: var(--muted); }
128
- ul, ol { padding-left: 22px; }
129
- li { margin: 8px 0; }
130
- .checklist {
131
- display: grid;
132
- grid-template-columns: 1fr;
133
- gap: 10px;
134
- margin-top: 14px;
135
- }
136
- .check-item {
137
- border: 1px solid var(--line);
138
- border-radius: 8px;
139
- background: var(--bg-raised);
140
- padding: 14px 16px;
141
- }
142
- .check-item strong { display: block; color: var(--text); margin-bottom: 4px; }
143
- .offer {
144
- border-color: rgba(34, 211, 238, 0.4);
145
- background: linear-gradient(180deg, rgba(34, 211, 238, 0.12), rgba(22, 22, 24, 1));
146
- }
147
- .cta-button, .secondary-button {
148
- display: inline-flex;
149
- align-items: center;
150
- justify-content: center;
151
- width: 100%;
152
- margin-top: 14px;
153
- padding: 12px 16px;
154
- border-radius: 8px;
155
- font-weight: 750;
156
- text-align: center;
157
- text-decoration: none;
158
- }
159
- .cta-button { background: var(--cyan); color: #061116; }
160
- .quick-button { background: var(--green); color: #05130a; }
161
- .secondary-button { border: 1px solid var(--line); color: var(--text); background: var(--bg-raised); }
162
- .sidebar { display: flex; flex-direction: column; gap: 18px; }
163
- .sidebar-card:first-child {
164
- position: sticky;
165
- top: 84px;
166
- max-height: calc(100vh - 104px);
167
- overflow-y: auto;
168
- }
169
- .related-card {
170
- display: block;
171
- padding: 14px;
172
- border: 1px solid var(--line);
173
- border-radius: 8px;
174
- background: var(--bg-raised);
175
- color: var(--text);
176
- margin-top: 12px;
177
- }
178
- .related-label {
179
- display: block;
180
- color: var(--muted);
181
- font-size: 12px;
182
- text-transform: uppercase;
183
- letter-spacing: 0.08em;
184
- margin-bottom: 4px;
185
- }
186
- pre {
187
- overflow-x: auto;
188
- padding: 16px;
189
- border-radius: 8px;
190
- border: 1px solid var(--line);
191
- background: #070708;
192
- color: #d7f9ff;
193
- line-height: 1.5;
194
- white-space: pre-wrap;
195
- }
196
- .faq-item {
197
- border-top: 1px solid var(--line);
198
- padding: 14px 0;
199
- }
200
- .faq-item summary { cursor: pointer; font-weight: 650; }
201
- .faq-item p { color: var(--muted); }
202
- @media (max-width: 860px) {
203
- .grid { grid-template-columns: 1fr; }
204
- .sidebar-card:first-child { position: static; max-height: none; overflow: visible; }
205
- .topbar .container { align-items: flex-start; gap: 10px; flex-direction: column; }
206
- }
207
- </style>
208
- <script type="application/ld+json">
209
- {
210
- "@context": "https://schema.org",
211
- "@type": "TechArticle",
212
- "headline": "AI Agent Workflow Migration Checklist",
213
- "description": "A practical checklist for moving from ad hoc AI coding agents to governed background-agent workflows with gates, evidence, ownership, and audit-ready controls.",
214
- "about": [
215
- "AI agent workflow migration",
216
- "background agent governance",
217
- "agent coding audit trail",
218
- "software supply chain controls",
219
- "AI coding agent rollout"
220
- ],
221
- "url": "https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist",
222
- "publisher": {
223
- "@type": "Organization",
224
- "name": "ThumbGate",
225
- "url": "https://thumbgate.ai"
226
- },
227
- "mainEntityOfPage": "https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist"
228
- }
229
- </script>
230
- <script type="application/ld+json">
231
- {
232
- "@context": "https://schema.org",
233
- "@type": "FAQPage",
234
- "mainEntity": [
235
- {
236
- "@type": "Question",
237
- "name": "Why do AI agent workflow migrations fail?",
238
- "acceptedAnswer": {
239
- "@type": "Answer",
240
- "text": "They usually fail when teams change the coding surface without mapping the surrounding gates, exceptions, approvals, ownership, evidence, and audit narrative."
241
- }
242
- },
243
- {
244
- "@type": "Question",
245
- "name": "Is an SBOM enough for agent-generated code?",
246
- "acceptedAnswer": {
247
- "@type": "Answer",
248
- "text": "No. SBOMs help inventory components, but agent workflows also need code-level attribution, review evidence, tool boundaries, and controls that prove who authorized the change."
249
- }
250
- },
251
- {
252
- "@type": "Question",
253
- "name": "What does the $499 diagnostic produce?",
254
- "acceptedAnswer": {
255
- "@type": "Answer",
256
- "text": "The diagnostic maps one real agent workflow, identifies unsafe gates and audit gaps, and returns a prioritized migration plan for enforceable controls."
257
- }
258
- }
259
- ]
260
- }
261
- </script>
262
- </head>
263
- <body>
264
- <div class="topbar">
265
- <div class="container">
266
- <a class="brand" href="/"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span>ThumbGate</span></a>
267
- <a href="/guides/ai-agent-governance-sprint">Workflow Hardening Sprint</a>
268
- </div>
269
- </div>
270
-
271
- <main class="container">
272
- <section class="hero">
273
- <div class="eyebrow">checklist | agent workflow migration</div>
274
- <h1>AI Agent Workflow Migration Checklist</h1>
275
- <p>Most AI coding rollouts will not fail because the agent cannot write code. They will fail because the team never mapped the gates, exceptions, audit trail, ownership model, and review evidence before giving agents more surface area.</p>
276
- <div class="signal-row">
277
- <div class="signal-pill good">ThumbGate blocks repeat agent failures before execution</div>
278
- <div class="signal-pill warn">Pro $19/mo or $149/yr. Team $49/seat/mo.</div>
279
- </div>
280
- </section>
281
-
282
- <section class="grid">
283
- <div>
284
- <div class="card">
285
- <h2>Why this matters now</h2>
286
- <p>Software teams are moving from ad hoc assistant sessions into background agents, repo-level automation, and autonomous PR queues. That migration has the same hidden risk as SCA platform changes: the tool is visible, but the surrounding control system is where rollout risk lives.</p>
287
- <p>If you cannot explain who approved the agent run, what it was allowed to touch, which gates fired, how ownership was attributed, and what evidence reached review, you do not have an agent workflow. You have a lucky transcript.</p>
288
- </div>
289
-
290
- <section class="detail-section">
291
- <h2>The migration checklist</h2>
292
- <div class="checklist">
293
- <div class="check-item"><strong>1. Workflow owner</strong> Name the team and human owner for the agent workflow. No orphaned automations.</div>
294
- <div class="check-item"><strong>2. Allowed surfaces</strong> Define repos, branches, directories, package files, infra files, secrets, generated assets, and production paths the agent may or may not touch.</div>
295
- <div class="check-item"><strong>3. Context source of truth</strong> Capture the issue, ticket, plan, or prompt that authorized the run so reviewers see the original intent.</div>
296
- <div class="check-item"><strong>4. Tool boundaries</strong> Separate read-only inspection, local file edits, shell commands, package installs, network calls, deploys, and GitHub mutations.</div>
297
- <div class="check-item"><strong>5. Pre-action gates</strong> Block known-bad actions before execution: destructive git commands, unsafe prod edits, secret exposure, unreviewed dependency changes, and repeat failure patterns.</div>
298
- <div class="check-item"><strong>6. Attribution evidence</strong> Record agent ID, model/tooling, branch, PR, changed files, dependency impact, CI result, and human feedback.</div>
299
- <div class="check-item"><strong>7. Exception policy</strong> Track when a gate is overridden, who approved it, why it was safe, and when the exception expires.</div>
300
- <div class="check-item"><strong>8. Review routing</strong> Route low-risk edits differently from protected branches, dependency/SBOM-sensitive files, auth, billing, data retention, and deployment code.</div>
301
- <div class="check-item"><strong>9. Rollback path</strong> Define how to revert an agent change, disable the workflow, revoke credentials, and preserve evidence after an incident.</div>
302
- <div class="check-item"><strong>10. Overhead budget</strong> Measure whether the agent reduces review load or just moves work into cleanup, duplicated PRs, and audit archaeology.</div>
303
- </div>
304
- </section>
305
-
306
- <section class="detail-section">
307
- <h2>Copy-paste audit prompt</h2>
308
- <pre>Audit this AI agent workflow before we expand it.
309
-
310
- Map:
311
- - owner and approval source
312
- - allowed repos, branches, files, and commands
313
- - blocked actions and override rules
314
- - CI, review, and merge evidence
315
- - dependency, SBOM, secret, and production-touching paths
316
- - attribution gaps where the code can change without a durable reason
317
- - the first three ThumbGate pre-action checks we should enforce</pre>
318
- </section>
319
-
320
- <section class="detail-section">
321
- <h2>Where ThumbGate fits</h2>
322
- <p>ThumbGate turns repeated human feedback and CI failures into enforcement. The useful control is not another dashboard. It is a pre-action rule that stops the already-rejected mistake from happening again.</p>
323
- <ul>
324
- <li>Use ThumbGate locally to capture thumbs-up and thumbs-down feedback from real agent sessions.</li>
325
- <li>Promote repeated failures into gates before risky commands, file writes, or PR actions.</li>
326
- <li>Attach run evidence so reviewers can see what the agent attempted, what was blocked, and what still needs human judgment.</li>
327
- </ul>
328
- </section>
329
-
330
- <section class="detail-section">
331
- <h2>FAQ</h2>
332
- <details class="faq-item">
333
- <summary>Why do AI agent workflow migrations fail?</summary>
334
- <p>They usually fail when teams change the coding surface without mapping the surrounding gates, exceptions, approvals, ownership, evidence, and audit narrative.</p>
335
- </details>
336
- <details class="faq-item">
337
- <summary>Is an SBOM enough for agent-generated code?</summary>
338
- <p>No. SBOMs help inventory components, but agent workflows also need code-level attribution, review evidence, tool boundaries, and controls that prove who authorized the change.</p>
339
- </details>
340
- <details class="faq-item">
341
- <summary>What does the $499 diagnostic produce?</summary>
342
- <p>The diagnostic maps one real agent workflow, identifies unsafe gates and audit gaps, and returns a prioritized migration plan for enforceable controls.</p>
343
- </details>
344
- </section>
345
- </div>
346
-
347
- <aside class="sidebar">
348
- <div class="sidebar-card offer">
349
- <h2>Start With One Failure</h2>
350
- <p>Fastest paid path: send one repeated agent failure and get the likely prevention-rule shape plus proof check. Use the diagnostic when you want the whole workflow mapped.</p>
351
- <a class="cta-button quick-button" href="https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=quick_read" target="_blank" rel="noopener">Pay $19 quick read</a>
352
- <a class="secondary-button" href="https://buy.stripe.com/fZu28rfCY6zcbO99uj3sI2G?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=first_rule" target="_blank" rel="noopener">Pay $1 first rule</a>
353
- <h2>$499 Agent Workflow Migration Diagnostic</h2>
354
- <p>Send one real agent workflow. We map the control gaps, repeated-failure risks, review evidence, and first enforceable gates.</p>
355
- <p><strong>Best fit:</strong> platform, security, OSPO, and engineering teams rolling out background agents or AI-assisted PR automation.</p>
356
- <a class="cta-button" href="https://buy.stripe.com/00w14neyUcXA5pL5e33sI0e?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=diagnostic" target="_blank" rel="noopener">Pay $499 diagnostic</a>
357
- <a class="secondary-button optional-payment-link" href="__PAYPAL_DIAGNOSTIC_CHECKOUT_URL__" target="_blank" rel="noopener">Pay $499 diagnostic with PayPal</a>
358
- <h2>$__SNAPSHOT_PRICE_DOLLARS__ Snapshot</h2>
359
- <p>Smallest paid proof: one repeated failure, the likely prevention-rule shape, and the proof check to run before a full Diagnostic.</p>
360
- <a class="secondary-button optional-payment-link" href="__MOR_SNAPSHOT_CHECKOUT_URL__" target="_blank" rel="noopener">Buy $__SNAPSHOT_PRICE_DOLLARS__ snapshot via __MOR_PROVIDER__</a>
361
- <a class="secondary-button" href="/?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=intake#workflow-sprint-intake">Send workflow first</a>
362
- </div>
363
-
364
- <div class="sidebar-card">
365
- <h2>Related pages</h2>
366
- <a class="related-card" href="/guides/background-agent-governance">
367
- <span class="related-label">Related page</span>
368
- <strong>Background Agent Governance for Agent PRs</strong>
369
- </a>
370
- <a class="related-card" href="/guides/ai-agent-governance-sprint">
371
- <span class="related-label">Paid path</span>
372
- <strong>AI Agent Governance Sprint</strong>
373
- </a>
374
- <a class="related-card" href="/guides/developer-machine-supply-chain-guardrails">
375
- <span class="related-label">Related page</span>
376
- <strong>Developer Machine Supply Chain Guardrails</strong>
377
- </a>
378
- </div>
379
- </aside>
380
- </section>
381
- </main>
382
- <script>
383
- document.querySelectorAll('.optional-payment-link').forEach(function(link) {
384
- var href = link.getAttribute('href') || '';
385
- if (!href || href.indexOf('__') !== -1) {
386
- link.hidden = true;
387
- link.setAttribute('aria-hidden', 'true');
388
- }
389
- });
390
- </script>
391
- </body>
392
- </html>