npm - thumbgate - Versions diffs - 1.27.12 → 1.27.13 - Mend

thumbgate 1.27.12 → 1.27.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (132) hide show

package/.claude-plugin/plugin.json +1 -1
package/.well-known/llms.txt +2 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +2 -4
package/adapters/claude/.mcp.json +2 -2
package/adapters/mcp/server-stdio.js +1 -1
package/adapters/opencode/opencode.json +1 -1
package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
package/bin/cli.js +78 -259
package/config/gate-templates.json +0 -228
package/config/gates/claim-verification.json +0 -18
package/package.json +35 -25
package/public/assets/brand/thumbgate-logo-transparent.svg +22 -0
package/public/assets/brand/thumbgate-mark-inline-v3.svg +19 -0
package/public/assets/brand/thumbgate-mark.svg +11 -5
package/public/blog.html +0 -30
package/public/brand/thumbgate-mark.svg +9 -5
package/public/chatgpt-app.html +2 -2
package/public/compare.html +2 -1
package/public/dashboard.html +1 -1
package/public/federal.html +1 -1
package/public/index.html +95 -216
package/public/learn.html +59 -35
package/public/lessons.html +1 -1
package/public/numbers.html +2 -2
package/public/pro.html +7 -7
package/scripts/aws-blocks-guardrails.js +228 -0
package/scripts/cli-schema.js +22 -10
package/scripts/dashboard-chat.js +2 -1
package/scripts/document-intake.js +1 -49
package/scripts/durability/step.js +3 -3
package/scripts/gate-stats.js +5 -11
package/scripts/gates-engine.js +0 -49
package/scripts/gemini-embedding-policy.js +2 -1
package/scripts/hook-stop-anti-claim.js +116 -184
package/scripts/hosted-config.js +0 -12
package/scripts/lesson-search.js +1 -15
package/scripts/llm-client.js +187 -5
package/scripts/plausible-domain-config.js +3 -1
package/scripts/seo-gsd.js +240 -1
package/scripts/tool-registry.js +2 -2
package/scripts/vector-store.js +44 -0
package/scripts/workspace-evolver.js +62 -2
package/src/api/server.js +340 -131
package/public/assets/brand/thumbgate-mark-inline.svg +0 -15
package/public/compare/adopt-ai.html +0 -219
package/public/compare/agentix-labs.html +0 -197
package/public/compare/ai-experience-orchestration.html +0 -216
package/public/compare/anthropic-claude-for-legal.html +0 -260
package/public/compare/anthropic-containment.html +0 -280
package/public/compare/arcade.html +0 -175
package/public/compare/arcjet.html +0 -239
package/public/compare/bumblebee.html +0 -307
package/public/compare/claude-code-hooks.html +0 -294
package/public/compare/databricks-unity-ai-gateway.html +0 -215
package/public/compare/fallow.html +0 -351
package/public/compare/heidi.html +0 -233
package/public/compare/mem0.html +0 -342
package/public/compare/oak-and-sparrow-gatekeeper.html +0 -289
package/public/compare/rein.html +0 -236
package/public/compare/sigmashake.html +0 -256
package/public/compare/speclock.html +0 -342
package/public/guides/agent-harness-optimization.html +0 -342
package/public/guides/agentic-web-governance.html +0 -406
package/public/guides/ai-agent-governance-sprint.html +0 -415
package/public/guides/ai-agent-pre-action-approval-gates.html +0 -401
package/public/guides/ai-agent-workflow-migration-checklist.html +0 -392
package/public/guides/ai-deployment-readiness.html +0 -415
package/public/guides/ai-mode-ads-agent-governance.html +0 -401
package/public/guides/ai-search-topical-presence.html +0 -342
package/public/guides/autoresearch-agent-safety.html +0 -342
package/public/guides/background-agent-governance.html +0 -358
package/public/guides/best-tools-stop-ai-agents-breaking-production.html +0 -363
package/public/guides/browser-automation-safety.html +0 -342
package/public/guides/chatgpt-ads-trust.html +0 -353
package/public/guides/claude-code-feedback.html +0 -339
package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
package/public/guides/claude-code-skills-guardrails.html +0 -343
package/public/guides/claude-desktop.html +0 -356
package/public/guides/code-knowledge-graph-guardrails.html +0 -365
package/public/guides/codex-cli-guardrails.html +0 -339
package/public/guides/cursor-agent-guardrails.html +0 -339
package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
package/public/guides/database-agent-safety.html +0 -406
package/public/guides/deepseek-v4-runtime-guardrails.html +0 -346
package/public/guides/developer-machine-supply-chain-guardrails.html +0 -358
package/public/guides/gcp-mcp-guardrails.html +0 -147
package/public/guides/gemini-cli-feedback-memory.html +0 -339
package/public/guides/gpt-5-5-model-evaluation.html +0 -358
package/public/guides/internal-ai-engineering-stack-guardrails.html +0 -348
package/public/guides/long-running-agent-context-management.html +0 -346
package/public/guides/mcp-tool-governance.html +0 -401
package/public/guides/multica-thumbgate-setup.html +0 -134
package/public/guides/native-messaging-host-security.html +0 -342
package/public/guides/policy-engine-pre-action-gates.html +0 -346
package/public/guides/pre-action-checks.html +0 -342
package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +0 -342
package/public/guides/prompt-tricks-to-workflow-rules.html +0 -365
package/public/guides/proxy-pointer-rag-guardrails.html +0 -352
package/public/guides/rag-precision-tuning-guardrails.html +0 -352
package/public/guides/reasoning-compression-guardrails.html +0 -346
package/public/guides/relational-knowledge-ai-recommendations.html +0 -342
package/public/guides/roo-code-alternative-cline.html +0 -339
package/public/guides/semantic-programmatic-seo-guardrails.html +0 -352
package/public/guides/seo-agent-skills-guardrails.html +0 -344
package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -342
package/public/learn/ac-dc-runtime-enforcement.html +0 -277
package/public/learn/agent-harness-pattern.html +0 -181
package/public/learn/agent-identity-connector-governance.html +0 -146
package/public/learn/agent-swarms-shared-gates.html +0 -173
package/public/learn/agentic-enterprise-context-brain.html +0 -117
package/public/learn/agentic-os-team-governance.html +0 -146
package/public/learn/ai-agent-governance.html +0 -158
package/public/learn/ai-agent-persistent-memory.html +0 -211
package/public/learn/anthropomorphic-claim-gates.html +0 -180
package/public/learn/background-agent-control-layer.html +0 -184
package/public/learn/claude-code-goal-with-rubrics.html +0 -205
package/public/learn/codex-role-plugins-need-governance.html +0 -125
package/public/learn/cost-aware-agent-gate-routing.html +0 -173
package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +0 -157
package/public/learn/deterministic-agent-workflows.html +0 -185
package/public/learn/feedback-loop-vs-decision-layer.html +0 -283
package/public/learn/from-prototype-to-production.html +0 -223
package/public/learn/learn.css +0 -51
package/public/learn/mcp-pre-action-checks-explained.html +0 -172
package/public/learn/pretix-stripe-connect-marketplaces.html +0 -161
package/public/learn/regulated-agent-execution-boundary.html +0 -196
package/public/learn/spec-driven-development.html +0 -168
package/public/learn/stop-ai-agent-force-push.html +0 -134
package/public/learn/vibe-coding-safety-net.html +0 -142
package/scripts/reddit-browser-notification-watch.js +0 -230

package/public/compare/rein.html DELETED Viewed

@@ -1,236 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>ThumbGate vs Rein — Coding-Agent Governance vs Generic Decorator Governance</title>
-<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="ThumbGate vs Rein for AI agent governance. Rein is a generic decorator for production apps in regulated domains. ThumbGate is the coding-agent specialist with a learning feedback loop and MIT licensing.">
-<meta name="keywords" content="AI agent governance, Rein, ThumbGate, runtime governance, pre-action hooks, agent decorator, coding agent guardrails">
-<meta property="og:title" content="ThumbGate vs Rein — Coding-Agent Governance vs Generic Decorator Governance">
-<meta property="og:description" content="Both intercept agent actions before damage. Different layers, different domains, different licenses. Honest side-by-side.">
-<meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate.ai/compare/rein">
-<link rel="canonical" href="https://thumbgate.ai/compare/rein">
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs Rein — Coding-Agent Governance vs Generic Decorator Governance",
-  "description": "Side-by-side comparison of two pre-action governance layers for AI agents. ThumbGate specializes in AI coding agents (Claude Code, Cursor, Codex). Rein is a generic decorator targeted at production apps in regulated domains.",
-  "author": {
-    "@type": "Person",
-    "name": "Igor Ganapolsky",
-    "url": "https://github.com/IgorGanapolsky"
-  },
-  "publisher": {
-    "@type": "Organization",
-    "name": "ThumbGate",
-    "url": "https://thumbgate.ai"
-  },
-  "datePublished": "2026-05-15",
-  "dateModified": "2026-05-15",
-  "mainEntityOfPage": "https://thumbgate.ai/compare/rein"
-}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "What's the difference between Rein and ThumbGate?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Both intercept an agent's action before it fires — that's the shared category. Rein is a generic in-process Python decorator aimed at production apps in regulated domains (trading, healthcare, legal), where each decision is high-stakes and policies are authored by hand. ThumbGate is the coding-agent specialist for Claude Code, Cursor, Codex, Gemini, Amp, Cline, and OpenCode: it intercepts at the out-of-process PreToolUse hook boundary and learns from thumbs-down corrections, auto-promoting them into prevention rules that persist across sessions. Same pre-action thesis, different target user."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Can I use Rein and ThumbGate together?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. They don't conflict and they aren't direct alternatives. Rein governs a production application's agent at the decorated-function boundary; ThumbGate governs your engineering team's coding agents at the PreToolUse boundary. A team running both a regulated production agent and an AI coding workflow can use Rein for the first and ThumbGate for the second."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does ThumbGate require code changes like Rein's decorator?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. Rein integrates as a Python decorator you wrap around each tool function. ThumbGate installs with npx thumbgate init, which auto-detects the agent and wires the PreToolUse hooks with zero workflow change. It runs out-of-process at the agent runtime boundary, so dangerous calls are caught before the agent's process even attempts them."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Is ThumbGate open source like Rein?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "ThumbGate's CLI and hook layer are MIT licensed — open-core, not viral — with commercial licensing for Pro and Team features. Rein's exact license should be confirmed at reinai.io before you make a distribution decision; a secondary source summarized it as AGPL, but we have not independently verified that, so check the primary source."
-      }
-    }
-  ]
-}
-</script>
-<link rel="stylesheet" href="/learn/learn.css">
-<style>
-  .matrix { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.95rem; }
-  .matrix th, .matrix td { padding: 12px 14px; text-align: left; border-bottom: 1px solid var(--border); vertical-align: top; }
-  .matrix th { background: var(--bg-card); font-weight: 600; }
-  .matrix td:nth-child(2) { color: var(--muted); }
-  .matrix td:nth-child(3) { color: var(--text); }
-  .verdict { font-weight: 600; color: var(--green); }
-  .pair { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; margin: 1.5rem 0; }
-  .pair > div { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 1rem; }
-  @media (max-width: 700px) { .pair { grid-template-columns: 1fr; } }
-</style>
-</head>
-<body>
-<nav>
-  <a href="/" class="brand"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate</span></a>
-  <a href="/pricing">Pricing</a>
-  <a href="/case-studies">Case Studies</a>
-  <a href="/compare">Compare</a>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
-</nav>
-<div class="container">
-  <div class="breadcrumb"><a href="/compare">Compare</a> / ThumbGate vs Rein</div>
-  <h1>ThumbGate vs Rein</h1>
-  <p style="color:var(--muted);">5 min read · For teams evaluating AI-agent runtime governance options</p>
-  <div class="tldr"><strong>TL;DR:</strong> Both Rein and ThumbGate intercept agent actions before they fire — that's the shared category. The honest differences: Rein is a <em>generic in-process decorator</em> aimed at production apps in regulated domains (trading, healthcare, legal). ThumbGate is the <em>coding-agent specialist</em> for Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, with a feedback loop that learns from thumbs-down corrections, plus MIT licensing on the core CLI + hook layer. <em>Note: Rein's exact license terms are documented at reinai.io; the source we read summarized them as "AGPL" but we have not independently verified — check the primary source before making a distribution decision.</em></div>
-  <h2>The shared thesis</h2>
-  <p>Both projects start from the same observation: most AI agent frameworks optimize for task completion, very few optimize for what happens when the agent does the wrong task. Both insert a gate <em>before</em> the action fires rather than trying to clean up after it.</p>
-  <p>Below is an honest side-by-side. We're not going to claim ThumbGate "wins" on every dimension — Rein is well-designed software with a legitimate niche. Pick by what you're actually building.</p>
-  <h2>Side-by-side</h2>
-  <table class="matrix">
-    <thead>
-      <tr><th style="width:28%;">Dimension</th><th style="width:36%;">Rein</th><th style="width:36%;">ThumbGate</th></tr>
-    </thead>
-    <tbody>
-      <tr>
-        <td><strong>Integration layer</strong></td>
-        <td>In-process Python decorator wrapping the agent's tool functions.</td>
-        <td>Out-of-process PreToolUse hook intercepting tool calls at the agent runtime boundary (Claude Code / Cursor / Codex / Gemini / Amp / Cline / OpenCode).</td>
-      </tr>
-      <tr>
-        <td><strong>Target domain</strong></td>
-        <td>Production apps in regulated domains: trading, healthcare, legal. High-stakes per-action.</td>
-        <td>AI coding agents. High-volume, high-frequency tool calls (file write, shell exec, git push, package install).</td>
-      </tr>
-      <tr>
-        <td><strong>Target user</strong></td>
-        <td>Engineering teams building production agent apps where each decision is consequential.</td>
-        <td>Developers and engineering teams running AI coding assistants who hit the same repeat mistake more than once.</td>
-      </tr>
-      <tr>
-        <td><strong>Core mechanisms</strong></td>
-        <td>Policy checks. Audit trails. Circuit breakers.</td>
-        <td>Pre-action checks. Thumbs-up/down feedback ledger. Auto-generated prevention rules. Lesson DB with semantic recall. Thompson Sampling for gate-policy bandits.</td>
-      </tr>
-      <tr>
-        <td><strong>Learning loop</strong></td>
-        <td>Not in the public framing. Policies are authored.</td>
-        <td>Yes. Thumbs-down feedback in one session auto-promotes to a prevention rule that blocks the same action in future sessions across machines.</td>
-      </tr>
-      <tr>
-        <td><strong>Domain skill packs</strong></td>
-        <td>Not in the public framing.</td>
-        <td>Ships Stripe, Railway, database-migration packs. Each pack is a set of pre-action rules specific to the domain's failure modes.</td>
-      </tr>
-      <tr>
-        <td><strong>License</strong></td>
-        <td>Open-source license per <a href="https://reinai.io">reinai.io</a> — verify the exact terms at the source before making a distribution decision. (Our secondary source summarized it as AGPL; we have not independently confirmed.)</td>
-        <td>MIT for the CLI and hook layer. Commercial license for Team / Pro features. Open-core, not viral.</td>
-      </tr>
-      <tr>
-        <td><strong>Installation</strong></td>
-        <td>Python decorator import.</td>
-        <td><code>npx thumbgate init</code> — auto-detects the agent, wires the hooks, zero workflow change.</td>
-      </tr>
-      <tr>
-        <td><strong>Cost when the agent is wrong</strong></td>
-        <td>Caught at the decorated function boundary.</td>
-        <td>Caught at the PreToolUse hook boundary, before the agent's process even attempts the call.</td>
-      </tr>
-    </tbody>
-  </table>
-  <h2>When to pick which</h2>
-  <div class="pair">
-    <div>
-      <h3 style="margin-top:0;">Use <strong>Rein</strong> if</h3>
-      <ul>
-        <li>You're building a production application (not a coding agent) in a regulated domain</li>
-        <li>You write your agent in Python and want decorator-level integration</li>
-        <li>Your team has policy-authoring resources to write rules upfront</li>
-        <li>Rein's licensing terms (verify at reinai.io) are acceptable for your distribution model</li>
-        <li>Per-action stakes are high enough that a decorator wrapper is the right tradeoff</li>
-      </ul>
-    </div>
-    <div>
-      <h3 style="margin-top:0;">Use <strong>ThumbGate</strong> if</h3>
-      <ul>
-        <li>Your agent is Claude Code, Cursor, Codex, Gemini, Amp, Cline, or OpenCode</li>
-        <li>You want the gate to learn from your corrections instead of being authored by hand</li>
-        <li>Your team writes code (vs. authoring policy) and wants thumbs-down feedback as the primary signal</li>
-        <li>You need an MIT-licensed core layer that can be embedded in commercial products</li>
-        <li>You ship Domain Skill Packs as a feature (Stripe, Railway, database migrations)</li>
-      </ul>
-    </div>
-  </div>
-  <h2>Both, side by side, in the same stack</h2>
-  <p>The two projects don't conflict. Rein governs your production app's agent at the function boundary. ThumbGate governs your engineering team's coding agents at the PreToolUse boundary. The pre-action gate pattern is the shared category; the specialization differs. A team operating both an AI coding workflow and a regulated production agent can use ThumbGate for the first and Rein for the second.</p>
-  <div class="callout callout-green">
-    <strong>Honest framing:</strong> Rein and ThumbGate are not direct alternatives. We share a thesis. We do not share a target user.
-  </div>
-  <h2>What the category gets right</h2>
-  <p>Both projects are correct that the dominant failure mode of agent frameworks today is "you can't undo an action after the model already took it." Prompt-level rules in <code>CLAUDE.md</code> or <code>.cursorrules</code> are eviction-prone under context pressure. Decorator-level wrappers are tighter. Hook-level intercepts are tighter still. Sandbox isolation is the strongest. Pick the layer that matches your operating model.</p>
-  <h2>Adoption in two minutes (ThumbGate)</h2>
-  <ol>
-    <li><strong>Install:</strong> <code>npx thumbgate init</code> — the CLI detects your agent and wires PreToolUse hooks. No workflow change.</li>
-    <li><strong>Give feedback when the agent is wrong:</strong> a thumbs-down with context becomes a structured failure record.</li>
-    <li><strong>Prevention rules generate themselves:</strong> after repeated failures in the same domain, ThumbGate auto-promotes a prevention rule that fires the next time the agent tries the same pattern.</li>
-    <li><strong>Pre-action checks block the mistake:</strong> the PreToolUse hook intercepts the call. The agent gets a structured error and a path back to the spec.</li>
-  </ol>
-  <div class="cta-box">
-    <h2 style="color:var(--text);font-size:1.3rem;margin:0 0 8px;">Pick the layer that matches your stack</h2>
-    <p>Building a Python production agent in a regulated domain? Look at Rein. Running AI coding agents and want them to stop repeating the same mistake? Start with ThumbGate.</p>
-    <div class="cta-install">$ npx thumbgate init</div>
-  </div>
-  <div class="related">
-    <h3>Related comparisons</h3>
-    <a href="/compare/heidi">ThumbGate vs Heidi (Meterian supply-chain) →</a>
-    <a href="/compare/mem0">ThumbGate vs Mem0 (memory layer) →</a>
-    <a href="/compare">All comparisons →</a>
-  </div>
-</div>
-  <div class="sticky-cta">
-    <span style="color:var(--muted)">Try it now:</span>
-    <code>npx thumbgate init</code>
-    <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub &rarr;</a>
-  </div>
-</body>
-</html>

package/public/compare/sigmashake.html DELETED Viewed

@@ -1,256 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)</title>
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="SigmaShake alternative? Honest comparison of ThumbGate, SigmaShake, APort, and agent-guardrails for gating AI coding agents. ThumbGate learns rules from your thumbs-down; SigmaShake ships a large ruleset hub and FORCE-substitution. Pick by what you need.">
-<meta name="keywords" content="SigmaShake alternative, AI agent guardrail comparison, PreToolUse gating, Claude Code guardrails, Cursor agent safety, ThumbGate vs SigmaShake, APort, agent-guardrails, AI agent firewall">
-<meta property="og:title" content="ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)">
-<meta property="og:description" content="Four ways to gate an AI coding agent before it acts. SigmaShake is the polished ruleset-hub product; ThumbGate learns the rule from your correction. Honest side-by-side.">
-<meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate.ai/compare/sigmashake">
-<link rel="canonical" href="https://thumbgate.ai/compare/sigmashake">
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)",
-  "description": "Side-by-side comparison of four pre-action gating tools for AI coding agents: ThumbGate, SigmaShake, APort, and roboticforce/agent-guardrails. Honest about where each is ahead.",
-  "author": { "@type": "Person", "name": "Igor Ganapolsky", "url": "https://github.com/IgorGanapolsky" },
-  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
-  "datePublished": "2026-06-09",
-  "dateModified": "2026-06-09",
-  "mainEntityOfPage": "https://thumbgate.ai/compare/sigmashake"
-}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "What's the difference between ThumbGate and SigmaShake?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Both gate an AI coding agent's tool calls before they run, across Claude Code, Cursor, Codex and others. The core difference is where the rules come from. SigmaShake gives you a hub of ready-made signed community rulesets and a three-tier enforcement model (DENY / ASK / FORCE-substitute-a-safe-command). ThumbGate generates the rule from your own correction: one thumbs-down on a mistake auto-writes the rule that blocks that exact mistake from then on, synced across your machines and team. SigmaShake is the broader, more mature catalog; ThumbGate is the learning loop for the mistakes no catalog has a rule for yet."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Is ThumbGate a good SigmaShake alternative?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "It depends what you're optimizing for. If you want a large library of ready-made signed rules and the ability to auto-substitute a safe command instead of just blocking, SigmaShake is genuinely strong and we won't pretend otherwise. If you keep hitting team-specific or codebase-specific mistakes that no generic ruleset covers, ThumbGate's edge is that it learns those rules from your thumbs-down instead of asking you to author or find them. Many teams could run both."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Can ThumbGate substitute a safe command like SigmaShake's FORCE mode?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Not today. SigmaShake's FORCE tier rewrites a dangerous command into a safe equivalent before it runs — a real capability ThumbGate doesn't yet match. ThumbGate's enforcement blocks the call and returns a structured error plus a path back to the spec; it does not auto-rewrite the command. If safe-command substitution is a hard requirement, SigmaShake is ahead here."
-      }
-    }
-  ]
-}
-</script>
-<link rel="stylesheet" href="/learn/learn.css">
-<style>
-  .matrix { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.9rem; }
-  .matrix th, .matrix td { padding: 10px 12px; text-align: left; border-bottom: 1px solid var(--border); vertical-align: top; }
-  .matrix th { background: var(--bg-card); font-weight: 600; }
-  .matrix td:first-child { font-weight: 600; }
-  .yes { color: var(--green); }
-  .no { color: var(--red); }
-  .partial { color: #fbbf24; }
-  .pair { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; margin: 1.5rem 0; }
-  .pair > div { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 1rem; }
-  @media (max-width: 700px) { .pair { grid-template-columns: 1fr; } .matrix { font-size: 0.82rem; } }
-</style>
-</head>
-<body>
-<nav>
-  <a href="/" class="brand"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate</span></a>
-  <a href="/pricing">Pricing</a>
-  <a href="/compare">Compare</a>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
-</nav>
-<div class="container">
-  <div class="breadcrumb"><a href="/compare">Compare</a> / ThumbGate vs SigmaShake</div>
-  <h1>ThumbGate vs SigmaShake (and APort, and agent-guardrails)</h1>
-  <p style="color:var(--muted);">For developers and teams choosing a pre-action gate for their AI coding agents</p>
-  <div class="tldr"><strong>TL;DR:</strong> Four tools gate an AI coding agent before it acts. <strong>SigmaShake</strong> is the most polished: a hub of ready-made signed rulesets, three-tier DENY/ASK/FORCE enforcement (including auto-substituting a safe command), a desktop app, and a tamper-evident audit log. <strong>ThumbGate</strong>'s one differentiator is the learning loop — a single thumbs-down auto-writes the rule that blocks that exact mistake forever, synced across machines and team, instead of asking you to find or author one. <strong>APort</strong> is the org-identity layer (agent "passports," central policy). <strong>agent-guardrails</strong> is a free MIT starting point. We're honest below about where SigmaShake is ahead.</div>
-  <h2>The shared category</h2>
-  <p>All four start from the same fact: prompt-level rules in <code>CLAUDE.md</code> or <code>.cursorrules</code> are suggestions the model can ignore under context pressure. To actually stop a force-push to main or a <code>DROP TABLE</code>, you need a gate that fires <em>before</em> the tool call executes — not a reviewer after the PR, not a git revert after the damage. ThumbGate, SigmaShake, and agent-guardrails all hook the PreToolUse boundary. APort sits one layer up, as an identity/authorization layer for organizations.</p>
-  <p>This page is not a hit piece. SigmaShake in particular is well-built software with a real lead on catalog breadth and enforcement modes. We'll tell you where it wins and where ThumbGate's learning loop is the better fit.</p>
-  <h2>Feature matrix</h2>
-  <table class="matrix">
-    <thead>
-      <tr>
-        <th style="width:22%;">Capability</th>
-        <th style="width:21%;">ThumbGate</th>
-        <th style="width:21%;">SigmaShake</th>
-        <th style="width:18%;">APort</th>
-        <th style="width:18%;">agent-guardrails</th>
-      </tr>
-    </thead>
-    <tbody>
-      <tr>
-        <td>Pre-action gating (blocks before execution)</td>
-        <td class="yes">Yes — PreToolUse hooks</td>
-        <td class="yes">Yes — PreToolUse</td>
-        <td class="partial">Authz layer, not a tool-call gate</td>
-        <td class="yes">Yes — PreToolUse hooks</td>
-      </tr>
-      <tr>
-        <td>Learns rules from your corrections</td>
-        <td class="yes">Yes — one thumbs-down auto-writes the rule</td>
-        <td class="no">No — rules installed or authored</td>
-        <td class="no">No — policy authored</td>
-        <td class="no">No — hand-written deny rules</td>
-      </tr>
-      <tr>
-        <td>Pre-built ruleset library</td>
-        <td class="partial">Domain skill packs (Stripe, Railway, DB migrations)</td>
-        <td class="yes">Large signed community ruleset hub</td>
-        <td class="no">N/A</td>
-        <td class="partial">Built-in deny rules (terraform/db/k8s/cloud/git)</td>
-      </tr>
-      <tr>
-        <td>Enforcement modes</td>
-        <td class="partial">Block + structured error (no auto-substitute)</td>
-        <td class="yes">DENY / ASK / FORCE (safe-command substitute)</td>
-        <td class="partial">Allow/deny by scoped permission</td>
-        <td class="partial">Deny / ask</td>
-      </tr>
-      <tr>
-        <td>Multi-agent support</td>
-        <td class="yes">Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode</td>
-        <td class="yes">Claude Code, Cursor, Codex, Copilot, Gemini</td>
-        <td class="yes">Claude, LangChain, CrewAI, Cursor</td>
-        <td class="partial">Claude Code (settings.json hooks)</td>
-      </tr>
-      <tr>
-        <td>Team / cross-machine sync of learned rules</td>
-        <td class="yes">Yes — hosted sync (Pro)</td>
-        <td class="partial">Local-first; optional cloud</td>
-        <td class="yes">Yes — central org policy</td>
-        <td class="no">No</td>
-      </tr>
-      <tr>
-        <td>Org identity / agent permissions</td>
-        <td class="no">Not the focus</td>
-        <td class="partial">Local rulesets, not identity</td>
-        <td class="yes">Yes — agent "passport" + scoped perms</td>
-        <td class="no">No</td>
-      </tr>
-      <tr>
-        <td>License / source</td>
-        <td class="partial">MIT core + hosted commercial layer</td>
-        <td class="no">Commercial, closed-source</td>
-        <td class="no">Commercial</td>
-        <td class="yes">Free, MIT</td>
-      </tr>
-      <tr>
-        <td>Pricing</td>
-        <td>Free tier; Pro $19/mo or $149/yr</td>
-        <td>Commercial paid tier (see their site)</td>
-        <td>No public pricing (design-partner)</td>
-        <td>Free</td>
-      </tr>
-      <tr>
-        <td>Maturity</td>
-        <td class="partial">Newer; learning loop is the bet</td>
-        <td class="yes">Polished, broad catalog</td>
-        <td class="partial">Early / design-partner stage</td>
-        <td class="partial">Minimal adoption</td>
-      </tr>
-    </tbody>
-  </table>
-  <h2>Where SigmaShake is genuinely ahead</h2>
-  <p>Saying this plainly builds more trust than pretending otherwise:</p>
-  <ul>
-    <li><strong>FORCE-substitution.</strong> SigmaShake can rewrite a dangerous command into a safe equivalent before it runs. ThumbGate blocks and explains; it doesn't auto-rewrite. If you want the gate to fix the command rather than stop it, SigmaShake wins.</li>
-    <li><strong>A large signed ruleset hub out of the box.</strong> For common, well-known footguns, SigmaShake means you're protected on install with zero authoring. ThumbGate ships a handful of domain skill packs and expects to <em>learn</em> the rest from your corrections — great for novel mistakes, slower for day-one coverage of the obvious ones.</li>
-    <li><strong>Maturity and polish.</strong> Desktop app, tamper-evident audit log, low-latency daemon, broad agent coverage including Copilot. SigmaShake is further along as a product.</li>
-  </ul>
-  <h2>Where ThumbGate is the better fit</h2>
-  <ul>
-    <li><strong>The mistakes no catalog has a rule for.</strong> Every team has codebase-specific footguns ("never edit the generated client," "this repo deploys from <code>release</code> not <code>main</code>"). No community hub ships those. ThumbGate writes the rule the first time you thumbs-down the mistake.</li>
-    <li><strong>Zero rule-authoring overhead.</strong> SigmaShake and agent-guardrails both ask you to install or write rules. ThumbGate's primary input is a thumbs-down — the correction <em>is</em> the rule authoring.</li>
-    <li><strong>MIT core.</strong> The CLI and hook layer are MIT; the hosted sync is the paid part. SigmaShake and APort are closed-source.</li>
-    <li><strong>Learned rules sync across the team.</strong> One engineer's thumbs-down becomes everyone's prevention rule.</li>
-  </ul>
-  <h2>And APort and agent-guardrails?</h2>
-  <p><strong>APort</strong> isn't really a head-to-head. It's an organizational authorization layer — agent "passports," scoped permissions, central policy and audit across Claude, LangChain, CrewAI, and Cursor. It positions as an <em>additional</em> authz layer for orgs and is at design-partner stage. If your problem is "which agents in my org are allowed to do what," APort solves a different problem than a tool-call gate. You could run APort for identity and ThumbGate for behavior.</p>
-  <p><strong>roboticforce/agent-guardrails</strong> is a free, MIT set of hand-written deny rules plus PreToolUse hooks for terraform/db/k8s/cloud/git. A fine zero-cost starting point. No dashboard, audit, team management, or learning — if you outgrow a static deny list, that's the moment to look at ThumbGate or SigmaShake.</p>
-  <h2>When to pick which</h2>
-  <div class="pair">
-    <div>
-      <h3 style="margin-top:0;">Pick <strong>SigmaShake</strong> if</h3>
-      <ul>
-        <li>You want day-one coverage from a large library of ready-made rules</li>
-        <li>Safe-command substitution (FORCE) is a requirement, not a nice-to-have</li>
-        <li>You want a mature desktop app and a tamper-evident audit log now</li>
-        <li>Closed-source commercial software is acceptable</li>
-      </ul>
-    </div>
-    <div>
-      <h3 style="margin-top:0;">Pick <strong>ThumbGate</strong> if</h3>
-      <ul>
-        <li>Your pain is repeat, team-specific mistakes no generic ruleset covers</li>
-        <li>You'd rather thumbs-down a mistake than hunt for or author a rule</li>
-        <li>You want learned rules to sync across machines and teammates</li>
-        <li>You want an MIT-licensed core you can read and embed</li>
-      </ul>
-    </div>
-  </div>
-  <div class="callout callout-green">
-    <strong>Honest framing:</strong> SigmaShake is the broader, more polished catalog-and-enforcement product today. ThumbGate's bet is narrower and sharper — the gate that learns the rule from your correction. They overlap, but optimize for different things, and running both is reasonable.
-  </div>
-  <h2>Adoption in two minutes (ThumbGate)</h2>
-  <ol>
-    <li><strong>Install:</strong> <code>npx thumbgate init</code> — detects your agent, wires PreToolUse hooks, no workflow change.</li>
-    <li><strong>Thumbs-down when the agent is wrong:</strong> a correction with context becomes a structured failure record.</li>
-    <li><strong>The rule writes itself:</strong> ThumbGate auto-promotes a prevention rule from the correction.</li>
-    <li><strong>Next time, it's blocked:</strong> the PreToolUse hook intercepts the call before it runs and points the agent back to the spec.</li>
-  </ol>
-  <div class="cta-box">
-    <h2 style="color:var(--text);font-size:1.3rem;margin:0 0 8px;">Tired of correcting the same mistake twice?</h2>
-    <p>SigmaShake gives you a catalog. ThumbGate writes the rule from your thumbs-down. Free tier, MIT core, two-minute install.</p>
-    <div class="cta-install">$ npx thumbgate init</div>
-  </div>
-  <div class="related">
-    <h3>Related comparisons</h3>
-    <a href="/compare/claude-code-hooks">ThumbGate vs claude-code-hooks &rarr;</a>
-    <a href="/compare">All comparisons &rarr;</a>
-  </div>
-</div>
-<div class="sticky-cta">
-  <span style="color:var(--muted)">Try it now:</span>
-  <code>npx thumbgate init</code>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub &rarr;</a>
-</div>
-</body>
-</html>