thumbgate 1.27.12 → 1.27.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (132) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/.well-known/llms.txt +2 -1
  3. package/.well-known/mcp/server-card.json +1 -1
  4. package/README.md +2 -4
  5. package/adapters/claude/.mcp.json +2 -2
  6. package/adapters/mcp/server-stdio.js +1 -1
  7. package/adapters/opencode/opencode.json +1 -1
  8. package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
  9. package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
  10. package/bin/cli.js +78 -259
  11. package/config/gate-templates.json +0 -228
  12. package/config/gates/claim-verification.json +0 -18
  13. package/package.json +35 -25
  14. package/public/assets/brand/thumbgate-logo-transparent.svg +22 -0
  15. package/public/assets/brand/thumbgate-mark-inline-v3.svg +19 -0
  16. package/public/assets/brand/thumbgate-mark.svg +11 -5
  17. package/public/blog.html +0 -30
  18. package/public/brand/thumbgate-mark.svg +9 -5
  19. package/public/chatgpt-app.html +2 -2
  20. package/public/compare.html +2 -1
  21. package/public/dashboard.html +1 -1
  22. package/public/federal.html +1 -1
  23. package/public/index.html +95 -216
  24. package/public/learn.html +59 -35
  25. package/public/lessons.html +1 -1
  26. package/public/numbers.html +2 -2
  27. package/public/pro.html +7 -7
  28. package/scripts/aws-blocks-guardrails.js +228 -0
  29. package/scripts/cli-schema.js +22 -10
  30. package/scripts/dashboard-chat.js +2 -1
  31. package/scripts/document-intake.js +1 -49
  32. package/scripts/durability/step.js +3 -3
  33. package/scripts/gate-stats.js +5 -11
  34. package/scripts/gates-engine.js +0 -49
  35. package/scripts/gemini-embedding-policy.js +2 -1
  36. package/scripts/hook-stop-anti-claim.js +116 -184
  37. package/scripts/hosted-config.js +0 -12
  38. package/scripts/lesson-search.js +1 -15
  39. package/scripts/llm-client.js +187 -5
  40. package/scripts/plausible-domain-config.js +3 -1
  41. package/scripts/seo-gsd.js +240 -1
  42. package/scripts/tool-registry.js +2 -2
  43. package/scripts/vector-store.js +44 -0
  44. package/scripts/workspace-evolver.js +62 -2
  45. package/src/api/server.js +340 -131
  46. package/public/assets/brand/thumbgate-mark-inline.svg +0 -15
  47. package/public/compare/adopt-ai.html +0 -219
  48. package/public/compare/agentix-labs.html +0 -197
  49. package/public/compare/ai-experience-orchestration.html +0 -216
  50. package/public/compare/anthropic-claude-for-legal.html +0 -260
  51. package/public/compare/anthropic-containment.html +0 -280
  52. package/public/compare/arcade.html +0 -175
  53. package/public/compare/arcjet.html +0 -239
  54. package/public/compare/bumblebee.html +0 -307
  55. package/public/compare/claude-code-hooks.html +0 -294
  56. package/public/compare/databricks-unity-ai-gateway.html +0 -215
  57. package/public/compare/fallow.html +0 -351
  58. package/public/compare/heidi.html +0 -233
  59. package/public/compare/mem0.html +0 -342
  60. package/public/compare/oak-and-sparrow-gatekeeper.html +0 -289
  61. package/public/compare/rein.html +0 -236
  62. package/public/compare/sigmashake.html +0 -256
  63. package/public/compare/speclock.html +0 -342
  64. package/public/guides/agent-harness-optimization.html +0 -342
  65. package/public/guides/agentic-web-governance.html +0 -406
  66. package/public/guides/ai-agent-governance-sprint.html +0 -415
  67. package/public/guides/ai-agent-pre-action-approval-gates.html +0 -401
  68. package/public/guides/ai-agent-workflow-migration-checklist.html +0 -392
  69. package/public/guides/ai-deployment-readiness.html +0 -415
  70. package/public/guides/ai-mode-ads-agent-governance.html +0 -401
  71. package/public/guides/ai-search-topical-presence.html +0 -342
  72. package/public/guides/autoresearch-agent-safety.html +0 -342
  73. package/public/guides/background-agent-governance.html +0 -358
  74. package/public/guides/best-tools-stop-ai-agents-breaking-production.html +0 -363
  75. package/public/guides/browser-automation-safety.html +0 -342
  76. package/public/guides/chatgpt-ads-trust.html +0 -353
  77. package/public/guides/claude-code-feedback.html +0 -339
  78. package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
  79. package/public/guides/claude-code-skills-guardrails.html +0 -343
  80. package/public/guides/claude-desktop.html +0 -356
  81. package/public/guides/code-knowledge-graph-guardrails.html +0 -365
  82. package/public/guides/codex-cli-guardrails.html +0 -339
  83. package/public/guides/cursor-agent-guardrails.html +0 -339
  84. package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
  85. package/public/guides/database-agent-safety.html +0 -406
  86. package/public/guides/deepseek-v4-runtime-guardrails.html +0 -346
  87. package/public/guides/developer-machine-supply-chain-guardrails.html +0 -358
  88. package/public/guides/gcp-mcp-guardrails.html +0 -147
  89. package/public/guides/gemini-cli-feedback-memory.html +0 -339
  90. package/public/guides/gpt-5-5-model-evaluation.html +0 -358
  91. package/public/guides/internal-ai-engineering-stack-guardrails.html +0 -348
  92. package/public/guides/long-running-agent-context-management.html +0 -346
  93. package/public/guides/mcp-tool-governance.html +0 -401
  94. package/public/guides/multica-thumbgate-setup.html +0 -134
  95. package/public/guides/native-messaging-host-security.html +0 -342
  96. package/public/guides/policy-engine-pre-action-gates.html +0 -346
  97. package/public/guides/pre-action-checks.html +0 -342
  98. package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +0 -342
  99. package/public/guides/prompt-tricks-to-workflow-rules.html +0 -365
  100. package/public/guides/proxy-pointer-rag-guardrails.html +0 -352
  101. package/public/guides/rag-precision-tuning-guardrails.html +0 -352
  102. package/public/guides/reasoning-compression-guardrails.html +0 -346
  103. package/public/guides/relational-knowledge-ai-recommendations.html +0 -342
  104. package/public/guides/roo-code-alternative-cline.html +0 -339
  105. package/public/guides/semantic-programmatic-seo-guardrails.html +0 -352
  106. package/public/guides/seo-agent-skills-guardrails.html +0 -344
  107. package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -342
  108. package/public/learn/ac-dc-runtime-enforcement.html +0 -277
  109. package/public/learn/agent-harness-pattern.html +0 -181
  110. package/public/learn/agent-identity-connector-governance.html +0 -146
  111. package/public/learn/agent-swarms-shared-gates.html +0 -173
  112. package/public/learn/agentic-enterprise-context-brain.html +0 -117
  113. package/public/learn/agentic-os-team-governance.html +0 -146
  114. package/public/learn/ai-agent-governance.html +0 -158
  115. package/public/learn/ai-agent-persistent-memory.html +0 -211
  116. package/public/learn/anthropomorphic-claim-gates.html +0 -180
  117. package/public/learn/background-agent-control-layer.html +0 -184
  118. package/public/learn/claude-code-goal-with-rubrics.html +0 -205
  119. package/public/learn/codex-role-plugins-need-governance.html +0 -125
  120. package/public/learn/cost-aware-agent-gate-routing.html +0 -173
  121. package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +0 -157
  122. package/public/learn/deterministic-agent-workflows.html +0 -185
  123. package/public/learn/feedback-loop-vs-decision-layer.html +0 -283
  124. package/public/learn/from-prototype-to-production.html +0 -223
  125. package/public/learn/learn.css +0 -51
  126. package/public/learn/mcp-pre-action-checks-explained.html +0 -172
  127. package/public/learn/pretix-stripe-connect-marketplaces.html +0 -161
  128. package/public/learn/regulated-agent-execution-boundary.html +0 -196
  129. package/public/learn/spec-driven-development.html +0 -168
  130. package/public/learn/stop-ai-agent-force-push.html +0 -134
  131. package/public/learn/vibe-coding-safety-net.html +0 -142
  132. package/scripts/reddit-browser-notification-watch.js +0 -230
package/public/guides/ai-agent-workflow-migration-checklist.html DELETED
@@ -1,392 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8" />
5
- <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
- <title>AI Agent Workflow Migration Checklist | ThumbGate</title>
7
- <meta name="description" content="A practical checklist for moving from ad hoc AI coding agents to governed background-agent workflows with gates, evidence, ownership, and audit-ready controls." />
8
- <meta property="og:title" content="AI Agent Workflow Migration Checklist" />
9
- <meta property="og:description" content="Move agent coding from ad hoc use to governed workflows: scope, gates, evidence, ownership, approvals, and audit-ready controls." />
10
- <meta property="og:type" content="article" />
11
- <meta property="og:url" content="https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist" />
12
- <link rel="canonical" href="https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist" />
13
- <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
14
- <link rel="icon" type="image/svg+xml" href="/thumbgate-icon.png" />
15
- <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
16
- <meta property="og:image" content="/og.png" />
17
- <style>
18
- :root {
19
- --bg: #0a0a0b;
20
- --bg-raised: #111113;
21
- --bg-card: #161618;
22
- --line: #242428;
23
- --text: #e8e8ec;
24
- --muted: #9a9aa6;
25
- --cyan: #22d3ee;
26
- --green: #4ade80;
27
- --amber: #fbbf24;
28
- --red: #f87171;
29
- }
30
- * { box-sizing: border-box; }
31
- body {
32
- margin: 0;
33
- font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
34
- background: var(--bg);
35
- color: var(--text);
36
- line-height: 1.65;
37
- }
38
- a { color: var(--cyan); text-decoration: none; }
39
- a:hover { text-decoration: underline; }
40
- .container { max-width: 1080px; margin: 0 auto; padding: 0 24px; }
41
- .topbar {
42
- position: sticky;
43
- top: 0;
44
- z-index: 20;
45
- backdrop-filter: blur(12px);
46
- background: rgba(10, 10, 11, 0.9);
47
- border-bottom: 1px solid var(--line);
48
- }
49
- .topbar .container {
50
- display: flex;
51
- justify-content: space-between;
52
- align-items: center;
53
- padding-top: 14px;
54
- padding-bottom: 14px;
55
- }
56
- .brand {
57
- display: inline-flex;
58
- align-items: center;
59
- gap: 8px;
60
- color: var(--text);
61
- font-weight: 700;
62
- text-decoration: none;
63
- }
64
- .logo-mark { width: 28px; height: 28px; display: block; }
65
- .hero { padding: 72px 0 30px; }
66
- .eyebrow {
67
- display: inline-flex;
68
- align-items: center;
69
- padding: 6px 12px;
70
- border-radius: 999px;
71
- border: 1px solid rgba(34, 211, 238, 0.22);
72
- background: rgba(34, 211, 238, 0.1);
73
- color: var(--cyan);
74
- text-transform: uppercase;
75
- letter-spacing: 0.08em;
76
- font-size: 12px;
77
- font-weight: 700;
78
- }
79
- h1 {
80
- max-width: 820px;
81
- margin: 16px 0;
82
- font-size: clamp(34px, 5vw, 58px);
83
- line-height: 1.06;
84
- letter-spacing: 0;
85
- }
86
- .hero p {
87
- max-width: 760px;
88
- color: var(--muted);
89
- font-size: 18px;
90
- }
91
- .signal-row {
92
- display: flex;
93
- flex-wrap: wrap;
94
- gap: 12px;
95
- margin-top: 28px;
96
- }
97
- .signal-pill {
98
- display: inline-flex;
99
- align-items: center;
100
- padding: 10px 14px;
101
- border-radius: 999px;
102
- border: 1px solid var(--line);
103
- background: var(--bg-raised);
104
- font-size: 14px;
105
- font-weight: 650;
106
- }
107
- .signal-pill.good { color: #b8f7c8; border-color: rgba(74, 222, 128, 0.28); background: rgba(74, 222, 128, 0.1); }
108
- .signal-pill.warn { color: #fde68a; border-color: rgba(251, 191, 36, 0.28); background: rgba(251, 191, 36, 0.1); }
109
- .grid {
110
- display: grid;
111
- grid-template-columns: minmax(0, 2fr) minmax(290px, 1fr);
112
- gap: 24px;
113
- padding-bottom: 72px;
114
- }
115
- .card, .detail-section, .sidebar-card {
116
- background: var(--bg-card);
117
- border: 1px solid var(--line);
118
- border-radius: 8px;
119
- }
120
- .card, .detail-section, .sidebar-card { padding: 24px; }
121
- .detail-section { margin-bottom: 18px; }
122
- .detail-section h2, .card h2, .sidebar-card h2 {
123
- margin: 0 0 12px;
124
- font-size: 24px;
125
- letter-spacing: 0;
126
- }
127
- .detail-section p, .card p, .sidebar-card p, li { color: var(--muted); }
128
- ul, ol { padding-left: 22px; }
129
- li { margin: 8px 0; }
130
- .checklist {
131
- display: grid;
132
- grid-template-columns: 1fr;
133
- gap: 10px;
134
- margin-top: 14px;
135
- }
136
- .check-item {
137
- border: 1px solid var(--line);
138
- border-radius: 8px;
139
- background: var(--bg-raised);
140
- padding: 14px 16px;
141
- }
142
- .check-item strong { display: block; color: var(--text); margin-bottom: 4px; }
143
- .offer {
144
- border-color: rgba(34, 211, 238, 0.4);
145
- background: linear-gradient(180deg, rgba(34, 211, 238, 0.12), rgba(22, 22, 24, 1));
146
- }
147
- .cta-button, .secondary-button {
148
- display: inline-flex;
149
- align-items: center;
150
- justify-content: center;
151
- width: 100%;
152
- margin-top: 14px;
153
- padding: 12px 16px;
154
- border-radius: 8px;
155
- font-weight: 750;
156
- text-align: center;
157
- text-decoration: none;
158
- }
159
- .cta-button { background: var(--cyan); color: #061116; }
160
- .quick-button { background: var(--green); color: #05130a; }
161
- .secondary-button { border: 1px solid var(--line); color: var(--text); background: var(--bg-raised); }
162
- .sidebar { display: flex; flex-direction: column; gap: 18px; }
163
- .sidebar-card:first-child {
164
- position: sticky;
165
- top: 84px;
166
- max-height: calc(100vh - 104px);
167
- overflow-y: auto;
168
- }
169
- .related-card {
170
- display: block;
171
- padding: 14px;
172
- border: 1px solid var(--line);
173
- border-radius: 8px;
174
- background: var(--bg-raised);
175
- color: var(--text);
176
- margin-top: 12px;
177
- }
178
- .related-label {
179
- display: block;
180
- color: var(--muted);
181
- font-size: 12px;
182
- text-transform: uppercase;
183
- letter-spacing: 0.08em;
184
- margin-bottom: 4px;
185
- }
186
- pre {
187
- overflow-x: auto;
188
- padding: 16px;
189
- border-radius: 8px;
190
- border: 1px solid var(--line);
191
- background: #070708;
192
- color: #d7f9ff;
193
- line-height: 1.5;
194
- white-space: pre-wrap;
195
- }
196
- .faq-item {
197
- border-top: 1px solid var(--line);
198
- padding: 14px 0;
199
- }
200
- .faq-item summary { cursor: pointer; font-weight: 650; }
201
- .faq-item p { color: var(--muted); }
202
- @media (max-width: 860px) {
203
- .grid { grid-template-columns: 1fr; }
204
- .sidebar-card:first-child { position: static; max-height: none; overflow: visible; }
205
- .topbar .container { align-items: flex-start; gap: 10px; flex-direction: column; }
206
- }
207
- </style>
208
- <script type="application/ld+json">
209
- {
210
- "@context": "https://schema.org",
211
- "@type": "TechArticle",
212
- "headline": "AI Agent Workflow Migration Checklist",
213
- "description": "A practical checklist for moving from ad hoc AI coding agents to governed background-agent workflows with gates, evidence, ownership, and audit-ready controls.",
214
- "about": [
215
- "AI agent workflow migration",
216
- "background agent governance",
217
- "agent coding audit trail",
218
- "software supply chain controls",
219
- "AI coding agent rollout"
220
- ],
221
- "url": "https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist",
222
- "publisher": {
223
- "@type": "Organization",
224
- "name": "ThumbGate",
225
- "url": "https://thumbgate.ai"
226
- },
227
- "mainEntityOfPage": "https://thumbgate.ai/guides/ai-agent-workflow-migration-checklist"
228
- }
229
- </script>
230
- <script type="application/ld+json">
231
- {
232
- "@context": "https://schema.org",
233
- "@type": "FAQPage",
234
- "mainEntity": [
235
- {
236
- "@type": "Question",
237
- "name": "Why do AI agent workflow migrations fail?",
238
- "acceptedAnswer": {
239
- "@type": "Answer",
240
- "text": "They usually fail when teams change the coding surface without mapping the surrounding gates, exceptions, approvals, ownership, evidence, and audit narrative."
241
- }
242
- },
243
- {
244
- "@type": "Question",
245
- "name": "Is an SBOM enough for agent-generated code?",
246
- "acceptedAnswer": {
247
- "@type": "Answer",
248
- "text": "No. SBOMs help inventory components, but agent workflows also need code-level attribution, review evidence, tool boundaries, and controls that prove who authorized the change."
249
- }
250
- },
251
- {
252
- "@type": "Question",
253
- "name": "What does the $499 diagnostic produce?",
254
- "acceptedAnswer": {
255
- "@type": "Answer",
256
- "text": "The diagnostic maps one real agent workflow, identifies unsafe gates and audit gaps, and returns a prioritized migration plan for enforceable controls."
257
- }
258
- }
259
- ]
260
- }
261
- </script>
262
- </head>
263
- <body>
264
- <div class="topbar">
265
- <div class="container">
266
- <a class="brand" href="/"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span>ThumbGate</span></a>
267
- <a href="/guides/ai-agent-governance-sprint">Workflow Hardening Sprint</a>
268
- </div>
269
- </div>
270
-
271
- <main class="container">
272
- <section class="hero">
273
- <div class="eyebrow">checklist | agent workflow migration</div>
274
- <h1>AI Agent Workflow Migration Checklist</h1>
275
- <p>Most AI coding rollouts will not fail because the agent cannot write code. They will fail because the team never mapped the gates, exceptions, audit trail, ownership model, and review evidence before giving agents more surface area.</p>
276
- <div class="signal-row">
277
- <div class="signal-pill good">ThumbGate blocks repeat agent failures before execution</div>
278
- <div class="signal-pill warn">Pro $19/mo or $149/yr. Team $49/seat/mo.</div>
279
- </div>
280
- </section>
281
-
282
- <section class="grid">
283
- <div>
284
- <div class="card">
285
- <h2>Why this matters now</h2>
286
- <p>Software teams are moving from ad hoc assistant sessions into background agents, repo-level automation, and autonomous PR queues. That migration has the same hidden risk as SCA platform changes: the tool is visible, but the surrounding control system is where rollout risk lives.</p>
287
- <p>If you cannot explain who approved the agent run, what it was allowed to touch, which gates fired, how ownership was attributed, and what evidence reached review, you do not have an agent workflow. You have a lucky transcript.</p>
288
- </div>
289
-
290
- <section class="detail-section">
291
- <h2>The migration checklist</h2>
292
- <div class="checklist">
293
- <div class="check-item"><strong>1. Workflow owner</strong> Name the team and human owner for the agent workflow. No orphaned automations.</div>
294
- <div class="check-item"><strong>2. Allowed surfaces</strong> Define repos, branches, directories, package files, infra files, secrets, generated assets, and production paths the agent may or may not touch.</div>
295
- <div class="check-item"><strong>3. Context source of truth</strong> Capture the issue, ticket, plan, or prompt that authorized the run so reviewers see the original intent.</div>
296
- <div class="check-item"><strong>4. Tool boundaries</strong> Separate read-only inspection, local file edits, shell commands, package installs, network calls, deploys, and GitHub mutations.</div>
297
- <div class="check-item"><strong>5. Pre-action gates</strong> Block known-bad actions before execution: destructive git commands, unsafe prod edits, secret exposure, unreviewed dependency changes, and repeat failure patterns.</div>
298
- <div class="check-item"><strong>6. Attribution evidence</strong> Record agent ID, model/tooling, branch, PR, changed files, dependency impact, CI result, and human feedback.</div>
299
- <div class="check-item"><strong>7. Exception policy</strong> Track when a gate is overridden, who approved it, why it was safe, and when the exception expires.</div>
300
- <div class="check-item"><strong>8. Review routing</strong> Route low-risk edits differently from protected branches, dependency/SBOM-sensitive files, auth, billing, data retention, and deployment code.</div>
301
- <div class="check-item"><strong>9. Rollback path</strong> Define how to revert an agent change, disable the workflow, revoke credentials, and preserve evidence after an incident.</div>
302
- <div class="check-item"><strong>10. Overhead budget</strong> Measure whether the agent reduces review load or just moves work into cleanup, duplicated PRs, and audit archaeology.</div>
303
- </div>
304
- </section>
305
-
306
- <section class="detail-section">
307
- <h2>Copy-paste audit prompt</h2>
308
- <pre>Audit this AI agent workflow before we expand it.
309
-
310
- Map:
311
- - owner and approval source
312
- - allowed repos, branches, files, and commands
313
- - blocked actions and override rules
314
- - CI, review, and merge evidence
315
- - dependency, SBOM, secret, and production-touching paths
316
- - attribution gaps where the code can change without a durable reason
317
- - the first three ThumbGate pre-action checks we should enforce</pre>
318
- </section>
319
-
320
- <section class="detail-section">
321
- <h2>Where ThumbGate fits</h2>
322
- <p>ThumbGate turns repeated human feedback and CI failures into enforcement. The useful control is not another dashboard. It is a pre-action rule that stops the already-rejected mistake from happening again.</p>
323
- <ul>
324
- <li>Use ThumbGate locally to capture thumbs-up and thumbs-down feedback from real agent sessions.</li>
325
- <li>Promote repeated failures into gates before risky commands, file writes, or PR actions.</li>
326
- <li>Attach run evidence so reviewers can see what the agent attempted, what was blocked, and what still needs human judgment.</li>
327
- </ul>
328
- </section>
329
-
330
- <section class="detail-section">
331
- <h2>FAQ</h2>
332
- <details class="faq-item">
333
- <summary>Why do AI agent workflow migrations fail?</summary>
334
- <p>They usually fail when teams change the coding surface without mapping the surrounding gates, exceptions, approvals, ownership, evidence, and audit narrative.</p>
335
- </details>
336
- <details class="faq-item">
337
- <summary>Is an SBOM enough for agent-generated code?</summary>
338
- <p>No. SBOMs help inventory components, but agent workflows also need code-level attribution, review evidence, tool boundaries, and controls that prove who authorized the change.</p>
339
- </details>
340
- <details class="faq-item">
341
- <summary>What does the $499 diagnostic produce?</summary>
342
- <p>The diagnostic maps one real agent workflow, identifies unsafe gates and audit gaps, and returns a prioritized migration plan for enforceable controls.</p>
343
- </details>
344
- </section>
345
- </div>
346
-
347
- <aside class="sidebar">
348
- <div class="sidebar-card offer">
349
- <h2>Start With One Failure</h2>
350
- <p>Fastest paid path: send one repeated agent failure and get the likely prevention-rule shape plus proof check. Use the diagnostic when you want the whole workflow mapped.</p>
351
- <a class="cta-button quick-button" href="https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=quick_read" target="_blank" rel="noopener">Pay $19 quick read</a>
352
- <a class="secondary-button" href="https://buy.stripe.com/fZu28rfCY6zcbO99uj3sI2G?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=first_rule" target="_blank" rel="noopener">Pay $1 first rule</a>
353
- <h2>$499 Agent Workflow Migration Diagnostic</h2>
354
- <p>Send one real agent workflow. We map the control gaps, repeated-failure risks, review evidence, and first enforceable gates.</p>
355
- <p><strong>Best fit:</strong> platform, security, OSPO, and engineering teams rolling out background agents or AI-assisted PR automation.</p>
356
- <a class="cta-button" href="https://buy.stripe.com/00w14neyUcXA5pL5e33sI0e?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=diagnostic" target="_blank" rel="noopener">Pay $499 diagnostic</a>
357
- <a class="secondary-button optional-payment-link" href="__PAYPAL_DIAGNOSTIC_CHECKOUT_URL__" target="_blank" rel="noopener">Pay $499 diagnostic with PayPal</a>
358
- <h2>$__SNAPSHOT_PRICE_DOLLARS__ Snapshot</h2>
359
- <p>Smallest paid proof: one repeated failure, the likely prevention-rule shape, and the proof check to run before a full Diagnostic.</p>
360
- <a class="secondary-button optional-payment-link" href="__MOR_SNAPSHOT_CHECKOUT_URL__" target="_blank" rel="noopener">Buy $__SNAPSHOT_PRICE_DOLLARS__ snapshot via __MOR_PROVIDER__</a>
361
- <a class="secondary-button" href="/?utm_source=background_agent_checklist&amp;utm_medium=landing_page&amp;utm_campaign=agent_workflow_migration&amp;utm_content=intake#workflow-sprint-intake">Send workflow first</a>
362
- </div>
363
-
364
- <div class="sidebar-card">
365
- <h2>Related pages</h2>
366
- <a class="related-card" href="/guides/background-agent-governance">
367
- <span class="related-label">Related page</span>
368
- <strong>Background Agent Governance for Agent PRs</strong>
369
- </a>
370
- <a class="related-card" href="/guides/ai-agent-governance-sprint">
371
- <span class="related-label">Paid path</span>
372
- <strong>AI Agent Governance Sprint</strong>
373
- </a>
374
- <a class="related-card" href="/guides/developer-machine-supply-chain-guardrails">
375
- <span class="related-label">Related page</span>
376
- <strong>Developer Machine Supply Chain Guardrails</strong>
377
- </a>
378
- </div>
379
- </aside>
380
- </section>
381
- </main>
382
- <script>
383
- document.querySelectorAll('.optional-payment-link').forEach(function(link) {
384
- var href = link.getAttribute('href') || '';
385
- if (!href || href.indexOf('__') !== -1) {
386
- link.hidden = true;
387
- link.setAttribute('aria-hidden', 'true');
388
- }
389
- });
390
- </script>
391
- </body>
392
- </html>