npm - thumbgate - Versions diffs - 1.27.12 → 1.27.14 - Mend

thumbgate 1.27.12 → 1.27.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (133) hide show

package/.claude-plugin/plugin.json +1 -1
package/.well-known/llms.txt +2 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +2 -4
package/adapters/claude/.mcp.json +2 -2
package/adapters/mcp/server-stdio.js +1 -1
package/adapters/opencode/opencode.json +1 -1
package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
package/bin/cli.js +78 -259
package/config/gate-templates.json +0 -228
package/config/gates/claim-verification.json +0 -18
package/package.json +35 -25
package/public/assets/brand/thumbgate-logo-transparent.svg +22 -0
package/public/assets/brand/thumbgate-mark-inline-v3.svg +19 -0
package/public/assets/brand/thumbgate-mark.svg +11 -5
package/public/blog.html +0 -30
package/public/brand/thumbgate-mark.svg +9 -5
package/public/chatgpt-app.html +2 -2
package/public/compare.html +2 -1
package/public/dashboard.html +1 -1
package/public/federal.html +1 -1
package/public/index.html +95 -216
package/public/learn.html +59 -35
package/public/lessons.html +1 -1
package/public/numbers.html +2 -2
package/public/pro.html +7 -7
package/scripts/agent-readiness.js +142 -0
package/scripts/aws-blocks-guardrails.js +228 -0
package/scripts/cli-schema.js +22 -10
package/scripts/dashboard-chat.js +2 -1
package/scripts/document-intake.js +1 -49
package/scripts/durability/step.js +3 -3
package/scripts/gate-stats.js +5 -11
package/scripts/gates-engine.js +0 -49
package/scripts/gemini-embedding-policy.js +2 -1
package/scripts/hook-stop-anti-claim.js +116 -184
package/scripts/hosted-config.js +0 -12
package/scripts/lesson-search.js +1 -15
package/scripts/llm-client.js +187 -5
package/scripts/plausible-domain-config.js +3 -1
package/scripts/seo-gsd.js +240 -1
package/scripts/tool-registry.js +2 -2
package/scripts/vector-store.js +44 -0
package/scripts/workspace-evolver.js +62 -2
package/src/api/server.js +340 -131
package/public/assets/brand/thumbgate-mark-inline.svg +0 -15
package/public/compare/adopt-ai.html +0 -219
package/public/compare/agentix-labs.html +0 -197
package/public/compare/ai-experience-orchestration.html +0 -216
package/public/compare/anthropic-claude-for-legal.html +0 -260
package/public/compare/anthropic-containment.html +0 -280
package/public/compare/arcade.html +0 -175
package/public/compare/arcjet.html +0 -239
package/public/compare/bumblebee.html +0 -307
package/public/compare/claude-code-hooks.html +0 -294
package/public/compare/databricks-unity-ai-gateway.html +0 -215
package/public/compare/fallow.html +0 -351
package/public/compare/heidi.html +0 -233
package/public/compare/mem0.html +0 -342
package/public/compare/oak-and-sparrow-gatekeeper.html +0 -289
package/public/compare/rein.html +0 -236
package/public/compare/sigmashake.html +0 -256
package/public/compare/speclock.html +0 -342
package/public/guides/agent-harness-optimization.html +0 -342
package/public/guides/agentic-web-governance.html +0 -406
package/public/guides/ai-agent-governance-sprint.html +0 -415
package/public/guides/ai-agent-pre-action-approval-gates.html +0 -401
package/public/guides/ai-agent-workflow-migration-checklist.html +0 -392
package/public/guides/ai-deployment-readiness.html +0 -415
package/public/guides/ai-mode-ads-agent-governance.html +0 -401
package/public/guides/ai-search-topical-presence.html +0 -342
package/public/guides/autoresearch-agent-safety.html +0 -342
package/public/guides/background-agent-governance.html +0 -358
package/public/guides/best-tools-stop-ai-agents-breaking-production.html +0 -363
package/public/guides/browser-automation-safety.html +0 -342
package/public/guides/chatgpt-ads-trust.html +0 -353
package/public/guides/claude-code-feedback.html +0 -339
package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
package/public/guides/claude-code-skills-guardrails.html +0 -343
package/public/guides/claude-desktop.html +0 -356
package/public/guides/code-knowledge-graph-guardrails.html +0 -365
package/public/guides/codex-cli-guardrails.html +0 -339
package/public/guides/cursor-agent-guardrails.html +0 -339
package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
package/public/guides/database-agent-safety.html +0 -406
package/public/guides/deepseek-v4-runtime-guardrails.html +0 -346
package/public/guides/developer-machine-supply-chain-guardrails.html +0 -358
package/public/guides/gcp-mcp-guardrails.html +0 -147
package/public/guides/gemini-cli-feedback-memory.html +0 -339
package/public/guides/gpt-5-5-model-evaluation.html +0 -358
package/public/guides/internal-ai-engineering-stack-guardrails.html +0 -348
package/public/guides/long-running-agent-context-management.html +0 -346
package/public/guides/mcp-tool-governance.html +0 -401
package/public/guides/multica-thumbgate-setup.html +0 -134
package/public/guides/native-messaging-host-security.html +0 -342
package/public/guides/policy-engine-pre-action-gates.html +0 -346
package/public/guides/pre-action-checks.html +0 -342
package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +0 -342
package/public/guides/prompt-tricks-to-workflow-rules.html +0 -365
package/public/guides/proxy-pointer-rag-guardrails.html +0 -352
package/public/guides/rag-precision-tuning-guardrails.html +0 -352
package/public/guides/reasoning-compression-guardrails.html +0 -346
package/public/guides/relational-knowledge-ai-recommendations.html +0 -342
package/public/guides/roo-code-alternative-cline.html +0 -339
package/public/guides/semantic-programmatic-seo-guardrails.html +0 -352
package/public/guides/seo-agent-skills-guardrails.html +0 -344
package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -342
package/public/learn/ac-dc-runtime-enforcement.html +0 -277
package/public/learn/agent-harness-pattern.html +0 -181
package/public/learn/agent-identity-connector-governance.html +0 -146
package/public/learn/agent-swarms-shared-gates.html +0 -173
package/public/learn/agentic-enterprise-context-brain.html +0 -117
package/public/learn/agentic-os-team-governance.html +0 -146
package/public/learn/ai-agent-governance.html +0 -158
package/public/learn/ai-agent-persistent-memory.html +0 -211
package/public/learn/anthropomorphic-claim-gates.html +0 -180
package/public/learn/background-agent-control-layer.html +0 -184
package/public/learn/claude-code-goal-with-rubrics.html +0 -205
package/public/learn/codex-role-plugins-need-governance.html +0 -125
package/public/learn/cost-aware-agent-gate-routing.html +0 -173
package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +0 -157
package/public/learn/deterministic-agent-workflows.html +0 -185
package/public/learn/feedback-loop-vs-decision-layer.html +0 -283
package/public/learn/from-prototype-to-production.html +0 -223
package/public/learn/learn.css +0 -51
package/public/learn/mcp-pre-action-checks-explained.html +0 -172
package/public/learn/pretix-stripe-connect-marketplaces.html +0 -161
package/public/learn/regulated-agent-execution-boundary.html +0 -196
package/public/learn/spec-driven-development.html +0 -168
package/public/learn/stop-ai-agent-force-push.html +0 -134
package/public/learn/vibe-coding-safety-net.html +0 -142
package/scripts/reddit-browser-notification-watch.js +0 -230

package/public/compare/ai-experience-orchestration.html DELETED Viewed

@@ -1,216 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>AI Experience Orchestration vs AI Agent Enforcement</title>
-<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="Broad orchestration platforms route data and decisions. ThumbGate enforces what an AI agent is allowed to execute. Compare orchestration vs enforcement for coding, CI, and approval workflows.">
-<meta name="keywords" content="AI experience orchestration, AI agent enforcement, ThumbGate, AI governance, pre-action checks, workflow orchestration, agent control plane">
-<meta property="og:title" content="AI Experience Orchestration vs AI Agent Enforcement">
-<meta property="og:description" content="Broad orchestration platforms route data and decisions. ThumbGate enforces what an AI agent is allowed to execute.">
-<meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate.ai/compare/ai-experience-orchestration">
-<link rel="canonical" href="https://thumbgate.ai/compare/ai-experience-orchestration">
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "AI Experience Orchestration vs AI Agent Enforcement",
-  "description": "Broad orchestration platforms route data and decisions. ThumbGate enforces what an AI agent is allowed to execute in coding, CI, and approval workflows.",
-  "author": {
-    "@type": "Person",
-    "name": "Igor Ganapolsky",
-    "url": "https://github.com/IgorGanapolsky"
-  },
-  "publisher": {
-    "@type": "Organization",
-    "name": "ThumbGate",
-    "url": "https://thumbgate.ai"
-  },
-  "datePublished": "2026-04-22",
-  "dateModified": "2026-04-22",
-  "mainEntityOfPage": "https://thumbgate.ai/compare/ai-experience-orchestration"
-}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "Is ThumbGate an orchestration platform?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. ThumbGate is the enforcement layer that sits under orchestration. It decides whether an AI agent is allowed to execute a risky action after a workflow engine or coding agent has already chosen what to do next."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Why do orchestration platforms still need enforcement?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Routing data, intents, and approvals is not the same as stopping a risky shell command, git action, deploy, or release step. Once an AI agent can act, buyers need a control point that can block known-bad behavior before execution."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Where does ThumbGate fit in the stack?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Use orchestration to decide what should happen next. Use ThumbGate to decide what is allowed to execute. That is the practical split for platform teams and regulated workflows."
-      }
-    }
-  ]
-}
-</script>
-<style>
-  *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
-  :root {
-    --bg: #0a0a0b;
-    --bg-card: #161618;
-    --border: #222225;
-    --text: #e8e8ec;
-    --muted: #8b8b94;
-    --cyan: #22d3ee;
-    --green: #34d399;
-    --amber: #fbbf24;
-  }
-  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text); line-height: 1.7; }
-  .container { max-width: 860px; margin: 0 auto; padding: 2rem 1.5rem 4rem; }
-  nav { padding: 1rem 2rem; border-bottom: 1px solid var(--border); display: flex; gap: 1.5rem; align-items: center; flex-wrap: wrap; }
-  nav a { color: var(--muted); text-decoration: none; font-size: 0.9rem; }
-  nav a:hover { color: var(--cyan); }
-  nav .brand { color: var(--text); font-weight: 700; font-size: 1.1rem; }
-  h1 { font-size: 2.25rem; line-height: 1.15; margin: 2rem 0 1rem; }
-  h2 { font-size: 1.5rem; margin: 2.5rem 0 1rem; color: var(--cyan); }
-  h3 { font-size: 1.1rem; margin: 0 0 0.5rem; }
-  p, li { color: var(--text); margin-bottom: 0.75rem; }
-  ul { padding-left: 1.25rem; }
-  code { background: #1a1a1e; padding: 0.15em 0.4em; border-radius: 4px; font-size: 0.9em; color: var(--cyan); }
-  .card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 1.25rem; margin: 1rem 0; }
-  .comparison-table { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.95rem; }
-  .comparison-table th, .comparison-table td { padding: 0.8rem; border: 1px solid var(--border); text-align: left; vertical-align: top; }
-  .comparison-table th { background: #111113; color: var(--cyan); }
-  .yes { color: var(--green); }
-  .partial { color: var(--amber); }
-  .cta { display: inline-block; background: var(--cyan); color: #000; padding: 0.8rem 1.25rem; border-radius: 8px; text-decoration: none; font-weight: 700; margin-right: 0.75rem; }
-  .secondary { color: var(--cyan); text-decoration: underline; }
-  .breadcrumb { color: var(--muted); font-size: 0.85rem; margin-bottom: 0.5rem; }
-  .grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 1rem; margin: 1rem 0 1.5rem; }
-  footer { border-top: 1px solid var(--border); padding: 2rem; text-align: center; color: var(--muted); font-size: 0.85rem; }
-  footer a { color: var(--muted); text-decoration: underline; }
-  @media (max-width: 640px) { h1 { font-size: 1.8rem; } .container { padding: 1rem; } .comparison-table { font-size: 0.84rem; } }
-</style>
-</head>
-<body>
-<nav>
-  <a href="/" class="brand">ThumbGate</a>
-  <a href="/guide">Guide</a>
-  <a href="/compare">Compare</a>
-  <a href="/dashboard">Dashboard</a>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a>
-</nav>
-<div class="container">
-  <p class="breadcrumb"><a href="/">Home</a> / <a href="/compare">Compare</a> / Orchestration vs Enforcement</p>
-  <h1>AI experience orchestration still needs an enforcement layer.</h1>
-  <p>Broad orchestration suites are built to unify signals, route decisions, and connect journeys across systems. That matters. But the buyer pain in engineering and agentic operations shows up one step later: the instant an agent is about to run a command, open a PR, ship a release, or repeat a mistake you already corrected.</p>
-  <p>ThumbGate is built for that execution boundary. It turns operator feedback into Pre-Action Checks that block repeat AI failures before the next tool call fires.</p>
-  <h2>Where the categories split</h2>
-  <div class="grid">
-    <div class="card">
-      <h3>Orchestration platforms</h3>
-      <p>Best for routing data, intents, content, approvals, and customer journeys across many systems.</p>
-    </div>
-    <div class="card">
-      <h3>ThumbGate</h3>
-      <p>Best for controlling what an AI coding or workflow agent is allowed to execute after the workflow has already selected a next action.</p>
-    </div>
-    <div class="card">
-      <h3>Why buyers add both</h3>
-      <p>Orchestration answers <em>what should happen next</em>. ThumbGate answers <em>what is safe to execute now</em>.</p>
-    </div>
-  </div>
-  <h2>Comparison table</h2>
-  <div style="overflow-x:auto;">
-    <table class="comparison-table">
-      <tr>
-        <th>Capability</th>
-        <th>Broad orchestration suites</th>
-        <th>ThumbGate</th>
-      </tr>
-      <tr>
-        <td>Unify data and decisions across many systems</td>
-        <td class="yes">Yes</td>
-        <td class="partial">Partial</td>
-      </tr>
-      <tr>
-        <td>Block a risky tool call before execution</td>
-        <td class="partial">Usually not the core product</td>
-        <td class="yes">Yes — Pre-Action Checks</td>
-      </tr>
-      <tr>
-        <td>Turn thumbs-up/down into enforceable rules</td>
-        <td class="partial">Rarely productized</td>
-        <td class="yes">Yes — feedback becomes checks</td>
-      </tr>
-      <tr>
-        <td>Work directly inside AI coding workflows</td>
-        <td class="partial">Indirectly</td>
-        <td class="yes">Yes — Claude Code, Cursor, Codex, Gemini, Amp, OpenCode</td>
-      </tr>
-      <tr>
-        <td>Ship fast without a services-heavy rollout</td>
-        <td class="partial">Often longer rollout</td>
-        <td class="yes">Yes — local-first CLI wedge</td>
-      </tr>
-      <tr>
-        <td>Keep proof attached to the blocked action</td>
-        <td class="partial">Depends on implementation</td>
-        <td class="yes">Yes — check reasoning, evidence, dashboard history</td>
-      </tr>
-    </table>
-  </div>
-  <h2>What ThumbGate is not trying to replace</h2>
-  <ul>
-    <li>Customer-data platforms</li>
-    <li>Journey orchestration engines</li>
-    <li>Enterprise integration buses</li>
-    <li>Support-ticket workflow routers</li>
-  </ul>
-  <h2>What ThumbGate is trying to control</h2>
-  <ul>
-    <li>AI coding agents with write access to repos and terminals</li>
-    <li>CI and release automations that need proof before promotion</li>
-    <li>Approval-heavy workflows where a repeated mistake is expensive</li>
-    <li>Platform rollouts where one team's lesson should become everyone else's guardrail</li>
-  </ul>
-  <h2>Why this matters commercially</h2>
-  <p>Once AI is trusted to act, the buyer stops asking whether the workflow is smart enough. The buyer asks whether the workflow is safe enough to leave unattended. That is the gap ThumbGate fills.</p>
-  <div class="card">
-    <p><strong>Short version:</strong> orchestration without enforcement still leaves the last mile exposed.</p>
-    <p>
-      <a href="/use-cases/platform-teams" class="cta">See the platform-team rollout</a>
-      <a href="/use-cases/regulated-workflows" class="secondary">See the regulated workflow pattern</a>
-    </p>
-  </div>
-</div>
-<footer>
-  <p>ThumbGate — Pre-Action Checks for AI coding agents</p>
-  <p><a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a> | <a href="https://www.npmjs.com/package/thumbgate">npm</a> | <a href="/compare">Compare</a> | <a href="/dashboard">Dashboard</a></p>
-</footer>
-</body>
-</html>

package/public/compare/anthropic-claude-for-legal.html DELETED Viewed

@@ -1,260 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>ThumbGate vs Claude for Legal | Runtime Gate Pairs With Anthropic's Practice-Area Plugins</title>
-  <meta name="description" content="Anthropic shipped Claude for Legal (May 2026): 12 practice-area plugins + 20+ connectors + Claude Opus 4.7 at 90.9% on Harvey's BigLaw Bench. It is a model + integrations bundle with 'human in the loop' as the safety story. ThumbGate is the runtime gate underneath: PreToolUse enforcement that fires before Claude's proposed tool call executes. Use both." />
-  <meta property="og:title" content="ThumbGate vs Claude for Legal | Runtime Gate Pairs With Anthropic's Practice-Area Plugins" />
-  <meta property="og:description" content="Claude for Legal generates the action; ThumbGate gates the action. Same architectural insight as Anthropic's published containment: deterministic enforcement at runtime, in your environment, with no LLM in the decision path. Complementary, not competitive." />
-  <meta property="og:type" content="article" />
-  <meta property="og:url" content="https://thumbgate.ai/compare/anthropic-claude-for-legal" />
-  <link rel="canonical" href="https://thumbgate.ai/compare/anthropic-claude-for-legal" />
-  <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
-  <link rel="icon" type="image/png" href="/thumbgate-icon.png" />
-  <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
-  <meta property="og:image" content="/og.png" />
-  <style>
-    :root { --bg: #0a0a0b; --bg-raised: #111113; --bg-card: #161618; --line: #222225; --text: #e8e8ec; --muted: #8b8b96; --cyan: #22d3ee; --green: #4ade80; --amber: #fbbf24; }
-    * { box-sizing: border-box; }
-    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: var(--bg); color: var(--text); line-height: 1.65; }
-    a { color: var(--cyan); text-decoration: none; }
-    a:hover { text-decoration: underline; }
-    .container { max-width: 980px; margin: 0 auto; padding: 0 24px; }
-    .topbar { position: sticky; top: 0; z-index: 20; backdrop-filter: blur(12px); background: rgba(10, 10, 11, 0.88); border-bottom: 1px solid var(--line); }
-    .topbar .container { display: flex; justify-content: space-between; align-items: center; padding-top: 14px; padding-bottom: 14px; }
-    .brand { font-weight: 700; color: var(--text); display: inline-flex; align-items: center; gap: 8px; text-decoration: none; }
-    .brand .logo-mark { width: 28px; height: 28px; display: block; }
-    .hero { padding: 72px 0 32px; }
-    .eyebrow { display: inline-flex; align-items: center; gap: 8px; padding: 6px 12px; border-radius: 999px; border: 1px solid rgba(34, 211, 238, 0.22); background: rgba(34, 211, 238, 0.1); color: var(--cyan); text-transform: uppercase; letter-spacing: 0.08em; font-size: 12px; font-weight: 700; }
-    h1 { font-size: clamp(34px, 5vw, 56px); line-height: 1.06; letter-spacing: -0.04em; margin: 16px 0; max-width: 860px; }
-    .hero p { max-width: 760px; color: var(--muted); font-size: 18px; }
-    .grid { display: grid; grid-template-columns: minmax(0, 2fr) minmax(280px, 1fr); gap: 24px; padding-bottom: 72px; }
-    .card, .detail-section, .sidebar-card { background: var(--bg-card); border: 1px solid var(--line); border-radius: 16px; }
-    .card { padding: 24px; }
-    .detail-section { padding: 24px; margin-bottom: 18px; }
-    .detail-section h2 { margin: 0 0 12px; font-size: 24px; letter-spacing: -0.03em; }
-    .detail-section p, .detail-section li, .sidebar-card p { color: var(--muted); }
-    .detail-section ul, .card ul { padding-left: 18px; color: var(--muted); }
-    .comparison-table { width: 100%; border-collapse: collapse; margin-top: 16px; font-size: 14px; }
-    .comparison-table th, .comparison-table td { border: 1px solid var(--line); padding: 12px; text-align: left; vertical-align: top; }
-    .comparison-table th { background: var(--bg-raised); color: var(--cyan); }
-    .pill-row { display: flex; flex-wrap: wrap; gap: 12px; margin-top: 24px; }
-    .pill { border: 1px solid var(--line); background: var(--bg-raised); border-radius: 999px; padding: 10px 14px; font-size: 14px; font-weight: 650; }
-    .pill.good { color: #b8f7c8; border-color: rgba(74, 222, 128, 0.28); background: rgba(74, 222, 128, 0.1); }
-    .pill.warn { color: #ffe2a4; border-color: rgba(251, 191, 36, 0.28); background: rgba(251, 191, 36, 0.1); }
-    .sidebar { display: flex; flex-direction: column; gap: 18px; }
-    .sidebar-card { padding: 20px; }
-    .sidebar-card:first-child { position: sticky; top: 84px; max-height: calc(100vh - 104px); overflow-y: auto; -webkit-overflow-scrolling: touch; }
-    .cta-button { display: inline-flex; align-items: center; justify-content: center; margin-top: 18px; padding: 12px 16px; border-radius: 10px; background: var(--cyan); color: #071116; font-weight: 700; text-decoration: none; }
-    .related-card { display: block; padding: 14px; border-radius: 12px; border: 1px solid var(--line); background: var(--bg-raised); margin-top: 12px; color: var(--text); }
-    .related-label { display: block; color: var(--muted); font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; margin-bottom: 4px; }
-    .faq-item { border-top: 1px solid var(--line); padding: 14px 0; }
-    .faq-item summary { cursor: pointer; font-weight: 600; }
-    .faq-item p { color: var(--muted); }
-    blockquote { border-left: 3px solid var(--cyan); margin: 14px 0; padding: 6px 16px; color: var(--text); font-style: italic; background: rgba(34, 211, 238, 0.05); }
-    @media (max-width: 860px) { .grid { grid-template-columns: 1fr; } .sidebar-card:first-child { position: static; max-height: none; overflow: visible; } }
-  </style>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs Claude for Legal",
-  "description": "Anthropic's Claude for Legal (launched 2026-05-12) ships 12 practice-area plugins + 20+ connectors + Claude Opus 4.7 at 90.9% on Harvey's BigLaw Bench. The safety story is 'human in the loop.' ThumbGate is the runtime gate underneath: PreToolUse enforcement that fires before Claude's proposed tool call executes. Same architectural insight as Anthropic's own published containment model, extended to the developer-agent layer.",
-  "about": ["thumbgate vs claude for legal", "Anthropic legal AI governance", "PreToolUse runtime enforcement for legal agents", "law firm agent safety architecture"],
-  "url": "https://thumbgate.ai/compare/anthropic-claude-for-legal",
-  "citation": [
-    "https://www.artificiallawyer.com/2026/05/12/claude-for-legal-launches-may-reshape-the-legal-tech-world/",
-    "https://fortune.com/2026/05/12/anthropic-legal-plug-in-release-claude-cowork-big-law/",
-    "https://www.anthropic.com/engineering/how-we-contain-claude"
-  ],
-  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
-  "mainEntityOfPage": "https://thumbgate.ai/compare/anthropic-claude-for-legal"
-}
-  </script>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "Is Claude for Legal a ThumbGate competitor?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. Claude for Legal is a vertical bundle: Claude Opus 4.7 plus 12 practice-area plugins (Commercial, Employment, Privacy, Product, Corporate, AI Governance, etc.) plus 20+ connectors (DocuSign, Ironclad, iManage, NetDocuments, LexisNexis, Thomson Reuters, Box, Everlaw, LSuite) embedded into Word, Outlook, Claude Cowork, and Claude Projects. It is what the agent uses to do legal work. ThumbGate is the runtime gate that runs at PreToolUse — the moment after Claude proposes a tool call (a fetch from LexisNexis, a write to iManage, an outbound LLM call) and before that tool actually fires. Anthropic generates the action; ThumbGate gates the action. Most BigLaw deployments need both."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Doesn't Claude for Legal already have safety built in?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Anthropic's published safety story for Claude for Legal is 'keep a human in the loop on decision making' — a workflow principle, not a runtime enforcement layer. That principle is correct and necessary, but it relies on the attorney to spot the wrong action before approving. Sullivan & Cromwell apologized to a federal judge in early 2026 for AI-hallucinated citations despite policies, mandatory training, and verification requirements. Policies are not enforcement. A runtime PreToolUse hook inspects the proposed tool call deterministically before the attorney sees it for approval — the gate fires whether or not the human is paying attention."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does ThumbGate work with Claude for Legal specifically?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. ThumbGate's enforcement runs at the agent runtime's PreToolUse boundary, which exists in every Claude surface that exposes tool calls — Claude Code, Claude Desktop (which is where Claude for Legal's M365 plugins surface for desktop users), and the Claude API when called from Cursor, Codex CLI, Gemini CLI, Sourcegraph Amp, Cline, or OpenCode. The same rule pack — unauthorized-practice patterns, conflict-checker, privilege-marker egress — fires regardless of whether the model proposing the action is Claude Opus 4.7 via Claude for Legal, Claude via direct API, or another vendor's model."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Anthropic's containment architecture also covers tool calls — isn't that the same thing as ThumbGate?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Anthropic's published containment architecture (gVisor ephemeral containers for claude.ai, Seatbelt/bubblewrap sandboxes for Claude Code, hypervisor VMs for Claude Cowork, MITM egress proxy after credential exfiltration was discovered) covers what Anthropic ships. It stops at the Claude Code process boundary. ThumbGate runs the same three-layer model at the IDE-agent layer for the agents that share a developer's environment with Claude — Cursor, Codex CLI, Gemini CLI, Amp, Cline, OpenCode — and at the firm-specific rule layer that Anthropic's general-purpose containment cannot encode (your adverse-parties list, your UPL phrasing, your privilege markers, your matter-specific allowlists). See our /compare/anthropic-containment page for the deeper architectural map."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Why would a BigLaw firm running Claude for Legal need a separate runtime gate?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Three reasons. First, regulatory: the firm-specific rules that satisfy ABA Formal Opinion 512 and state-bar Unauthorized-Practice-of-Law conventions are not in Anthropic's product — they live in your ethics team's policy memo. Second, evidentiary: a procurement review needs structured audit logs that show 'rule X version Y matched proposed action Z and blocked it' — Claude for Legal's safety story is process-level (human in the loop), not artifact-level. Third, vendor independence: the same rule pack must fire when associates use Cursor, Codex, or Gemini CLI alongside Claude for Legal, and Anthropic's safety architecture does not extend to other vendors' agents."
-      }
-    }
-  ]
-}
-  </script>
-</head>
-<body>
-  <header class="topbar">
-    <div class="container">
-      <a href="/" class="brand"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28" /><span>ThumbGate</span></a>
-      <nav><a href="/learn">Learn</a> &nbsp; <a href="/pro">Pro</a> &nbsp; <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a></nav>
-    </div>
-  </header>
-  <section class="hero">
-    <div class="container">
-      <span class="eyebrow">ThumbGate vs Claude for Legal</span>
-      <h1>Anthropic generates the legal action. ThumbGate learns from the attorney and gates the legal action.</h1>
-      <p><strong>Claude for Legal</strong> (launched 2026-05-12) is a vertical bundle: Claude Opus 4.7 (90.9% on Harvey's BigLaw Bench), 12 practice-area plugins (Commercial, Employment, Privacy, Corporate, AI Governance, and more), and 20+ connectors (DocuSign, Ironclad, iManage, NetDocuments, LexisNexis, Thomson Reuters, Box, Everlaw, LSuite) embedded into Word, Outlook, Claude Cowork, and Claude Projects. <strong>ThumbGate</strong> is the full feedback-to-enforcement loop underneath: every 👍 / 👎 an attorney gives on any AI answer becomes a lesson in a local lesson DB, recurring lessons get promoted to prevention rules, and those rules then fire at the PreToolUse hook before Claude's next proposed tool call executes. Anthropic's safety story is <em>"human in the loop on decision making."</em> Ours is <em>"the attorney's vote becomes the rule, and the rule fires deterministically before the next decision is even shown to a human."</em> Most regulated firms need both.</p>
-      <p style="margin-top:18px; padding:14px 18px; border-left:3px solid #a78bfa; background:rgba(167,139,250,0.08); border-radius:0 6px 6px 0; max-width:760px;">
-        <strong style="color:#a78bfa">No public-facing chatbot? You still have the risk surface.</strong>
-        Most BigLaw firms don't take client intake through a chatbot &mdash; but associates already paste matter context into Claude (including Claude for Legal), Cursor, Codex, and internal LLM gateways every day. The risk isn't a bot giving public advice; it's <em>internal</em> agent use the firm can't see. ThumbGate produces a searchable audit log + RAG of every gated detection &mdash; queryable by ethics, risk, and innovation owners. Your conflicts DB and document systems stay where they are.
-      </p>
-    </div>
-  </section>
-  <main class="container">
-    <div class="grid">
-      <div class="content">
-        <section class="detail-section">
-          <h2>Side-by-side scope comparison</h2>
-          <table class="comparison-table">
-            <thead>
-              <tr><th>Dimension</th><th>Claude for Legal</th><th>ThumbGate</th></tr>
-            </thead>
-            <tbody>
-              <tr><td><strong>Product category</strong></td><td>Vertical AI bundle: model + practice-area plugins + connectors</td><td>Runtime governance gate at PreToolUse</td></tr>
-              <tr><td><strong>What it does</strong></td><td>Generates legal work product across Word, Outlook, Cowork, Projects</td><td>Inspects the proposed tool call and returns allow / warn / block / route-to-human before the tool fires</td></tr>
-              <tr><td><strong>Surfaces</strong></td><td>Word, Outlook, Claude Cowork, Claude Projects, Claude.ai, Microsoft 365</td><td>Claude Code, Claude Desktop, Cursor, OpenAI Codex CLI, Google Gemini CLI, Sourcegraph Amp, Cline, OpenCode</td></tr>
-              <tr><td><strong>Safety story</strong></td><td>"Keep a human in the loop on decision making" (workflow principle)</td><td>Deterministic PreToolUse pattern-match against firm-configured rules (artifact)</td></tr>
-              <tr><td><strong>Firm-specific rule encoding</strong></td><td>Not in product &mdash; lives in your ethics team's policy memo</td><td>Your adverse-parties list, UPL phrasing, privilege markers, matter-specific allowlists as enforced rules</td></tr>
-              <tr><td><strong>Audit evidence</strong></td><td>Process-level (human approvals captured in workflow)</td><td>Artifact-level (rule ID + version + matched pattern + audit ID + ISO 27001 control mapping in downloadable JSON per blocked action)</td></tr>
-              <tr><td><strong>Vendor coverage</strong></td><td>Claude only</td><td>Claude + every other agent your associates use alongside it</td></tr>
-              <tr><td><strong>Pricing model</strong></td><td>Bundled with paid Claude subscriptions (no separate SKU disclosed at launch)</td><td>Open-source free tier + Pro/Team for hosted evidence, adapter coverage, audit-export</td></tr>
-            </tbody>
-          </table>
-        </section>
-        <section class="detail-section">
-          <h2>The full ThumbGate loop &mdash; not just the gate</h2>
-          <p>The PreToolUse hook is the endpoint of a four-stage loop, not the whole product. The loop is what makes the gate <em>your firm's gate</em>, not a generic one. Every stage is in your environment:</p>
-          <ol>
-            <li><strong>Capture.</strong> An attorney reviews an AI answer &mdash; a Claude for Legal drafted clause, a Cowork project summary, a proposed conflict-check action, a research citation. They click 👍 (the answer was good) or 👎 (the answer was wrong, unauthorized, or unsafe). One click. The feedback record is structured: the context, what worked or went wrong, and what should change next time.</li>
-            <li><strong>Memory.</strong> The feedback record lands in a local lesson DB (SQLite + LanceDB vector index) on the firm's infrastructure. The same record stores wins, mistakes, and edge cases. Nothing leaves the firm's perimeter. The lesson DB is searchable: when a new intake matches a prior pattern, the relevant lessons are retrieved before the agent answers.</li>
-            <li><strong>Rule promotion.</strong> When a 👎 pattern recurs across distinct sessions, Thompson Sampling promotes it from a one-off lesson to a deterministic prevention rule. The rule is human-readable and editable &mdash; your ethics team can audit, soften, or override it. Wins get reinforced the same way: patterns the attorneys consistently approved become the routing the agent prefers.</li>
-            <li><strong>Enforcement.</strong> The promoted rules fire at the PreToolUse hook before Claude's next proposed tool call executes. Allow, warn, block, or route-to-human, with an artifact-level audit log (rule ID, version, matched pattern, audit ID, ISO 27001 control mapping). The attorney's vote from stage 1 is now an enforced constraint that fires deterministically before any human is asked to approve again.</li>
-          </ol>
-          <p>That is what "infrastructure firewall for AI coding agents" means in practice. Claude for Legal generates the legal action. ThumbGate <em>learns from the attorney's vote on that action</em>, then <em>enforces the lesson on the next one</em>. The two products are stacked, not competing.</p>
-        </section>
-        <section class="detail-section">
-          <h2>The shared architectural insight, made explicit</h2>
-          <p>Anthropic's own published <a href="/compare/anthropic-containment">containment architecture</a> (gVisor ephemeral containers for claude.ai, Seatbelt/bubblewrap sandboxes for Claude Code, hypervisor VMs for Claude Cowork, MITM egress proxy added after credential exfiltration was discovered through approved domains, tool-output inspection before context insertion) is the strongest endorsement of ThumbGate's posture from the company that built Claude. They run runtime enforcement at every layer they ship.</p>
-          <p>Claude for Legal extends Anthropic's <em>capability</em> surface (legal plugins, M365 integration, connectors) but does not extend the <em>enforcement</em> surface. Their safety language for the legal product is "human in the loop." That principle is right. It is also the same principle Sullivan &amp; Cromwell had codified in policy when their associates filed hallucinated citations with a federal judge in early 2026. Gordon Rees same outcome on a bankruptcy filing. <a href="https://www.damiencharlotin.com/hallucinations/" target="_blank" rel="noopener">Damien Charlotin's public database</a> catalogs 1,369+ AI hallucination rulings. <strong>Policies are not enforcement.</strong> A runtime gate that inspects the proposed action <em>before</em> the human is asked to approve it is.</p>
-          <blockquote>"The legal sector is facing mounting pressure to adopt AI, and the firms and in-house teams that move are pulling ahead fast." &mdash; Anthropic, on Claude for Legal launch</blockquote>
-          <p>The firms moving fastest are also the firms most exposed to the failure modes Sullivan &amp; Cromwell hit. The combination of Anthropic's capability layer and a deterministic runtime gate is what separates "moves fast and apologizes to a judge" from "moves fast and ships audit evidence to procurement."</p>
-        </section>
-        <section class="detail-section">
-          <h2>The dual-deploy story for a regulated firm</h2>
-          <p>If your firm adopts Claude for Legal &mdash; or is already a paid Claude customer with the plugins available &mdash; the integration with ThumbGate is short and additive:</p>
-          <ol>
-            <li><strong>Claude for Legal handles capability.</strong> Associates use the Commercial, Corporate, Employment, Privacy, and IP plugins in Word, Outlook, Cowork, and Projects to generate work product. M365 connectors keep one context-carrying agent across tools.</li>
-            <li><strong>ThumbGate handles enforcement.</strong> Every tool call Claude proposes &mdash; a LexisNexis fetch, an iManage write, a DocuSign send, an outbound LLM call, a Box upload, a shell command in Claude Code &mdash; is inspected at PreToolUse against your firm-specific rule pack. Allow / warn / block / route-to-human, deterministically, with an audit log per decision.</li>
-            <li><strong>Vendor-agnostic coverage.</strong> When associates also use Cursor, Codex, or Gemini CLI alongside Claude for Legal &mdash; which most teams do &mdash; the same rule pack fires there too. Anthropic's containment does not extend to other vendors' agents. ThumbGate does.</li>
-          </ol>
-          <p>The result is what BigLaw procurement actually asks for: the capability gains Claude for Legal promises, plus the artifact-level audit evidence (rule ID, version, matched pattern, audit ID, ISO 27001 control mapping) a security review needs to sign off on the deployment. Our <a href="/ai-malpractice-prevention">legal-vertical pre-execution-controls page</a> shows the live demos: UPL Gate, Conflict Gate, Egress Gate.</p>
-        </section>
-        <section class="detail-section">
-          <h2>FAQ</h2>
-          <details class="faq-item" open>
-            <summary>If Anthropic is going direct to BigLaw, why does ThumbGate matter?</summary>
-            <p>Because the demand Anthropic just created &mdash; for AI inside legal workflows &mdash; is also the demand Sullivan &amp; Cromwell created when they apologized to a federal judge. The procurement question after a Claude for Legal pilot is the same question: how does your firm prove the model didn't take an unauthorized action? Anthropic's answer is "human in the loop." Procurement teams want an artifact-level answer too.</p>
-          </details>
-          <details class="faq-item">
-            <summary>Does ThumbGate need to be a Claude partner to gate Claude for Legal?</summary>
-            <p>No. The PreToolUse hook is a runtime boundary inside the agent process &mdash; it doesn't require an Anthropic partnership any more than a Node.js middleware library needs a partnership with the framework it sits in. Claude Code, Claude Desktop, and any tool that calls the Anthropic API ship the integration surface ThumbGate uses.</p>
-          </details>
-          <details class="faq-item">
-            <summary>What about firms that only use Claude for Legal, no other agents?</summary>
-            <p>Still relevant. Claude for Legal's enforcement is process-level ("human in the loop"); your firm's policy team probably wants rule-level enforcement for ABA Formal Opinion 512 + state-bar UPL conventions + your adverse-parties list. Those rules live in your ethics memo today. ThumbGate moves them into the runtime so they fire whether or not the associate notices the issue.</p>
-          </details>
-          <details class="faq-item">
-            <summary>Is this comparison sponsored or partnered?</summary>
-            <p>No. We don't have a partnership with Anthropic. We wrote this page because BigLaw prospects evaluate both products &mdash; we want them to choose by scope, not by confusion. If anything here misrepresents Claude for Legal, open an issue at <a href="https://github.com/IgorGanapolsky/ThumbGate/issues" target="_blank" rel="noopener">our repo</a> and we will correct it.</p>
-          </details>
-        </section>
-      </div>
-      <aside class="sidebar">
-        <div class="sidebar-card">
-          <span class="related-label">Install ThumbGate</span>
-          <p style="font-size: 14px;">Get PreToolUse rules running alongside Claude for Legal in two minutes.</p>
-          <a class="cta-button" href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">npx thumbgate init &rarr;</a>
-        </div>
-        <div class="sidebar-card">
-          <span class="related-label">Try Claude for Legal too</span>
-          <p style="font-size: 13px;">Anthropic's vertical bundle. Plugins + connectors in your Word/Outlook/Cowork workspace. Available to all paid Claude customers. <a href="https://www.anthropic.com/" target="_blank" rel="noopener">anthropic.com</a></p>
-        </div>
-        <div class="sidebar-card">
-          <span class="related-label">Related comparisons</span>
-          <a class="related-card" href="/compare/anthropic-containment">
-            <strong>ThumbGate vs Anthropic's Claude Containment</strong><br>
-            <span style="color: var(--muted); font-size: 13px;">IDE-agent extension of Anthropic's published architecture</span>
-          </a>
-          <a class="related-card" href="/compare/arcjet">
-            <strong>ThumbGate vs Arcjet</strong><br>
-            <span style="color: var(--muted); font-size: 13px;">Agent-outbound gate vs app-inbound firewall</span>
-          </a>
-          <a class="related-card" href="/compare/oak-and-sparrow-gatekeeper">
-            <strong>ThumbGate vs Gatekeeper (Oak &amp; Sparrow)</strong><br>
-            <span style="color: var(--muted); font-size: 13px;">Agent-action gate vs workforce-input gate</span>
-          </a>
-          <a class="related-card" href="/ai-malpractice-prevention">
-            <strong>Pre-Execution Controls for Legal AI Agents</strong><br>
-            <span style="color: var(--muted); font-size: 13px;">Live UPL / Conflict / Egress gate demos</span>
-          </a>
-        </div>
-        <div class="sidebar-card">
-          <span class="related-label">Sources</span>
-          <p style="font-size: 13px;">Claude for Legal product facts verified from <a href="https://www.artificiallawyer.com/2026/05/12/claude-for-legal-launches-may-reshape-the-legal-tech-world/" target="_blank" rel="noopener">Artificial Lawyer (2026-05-12)</a>, <a href="https://fortune.com/2026/05/12/anthropic-legal-plug-in-release-claude-cowork-big-law/" target="_blank" rel="noopener">Fortune (2026-05-12)</a>, and Anthropic's launch announcement. Sullivan &amp; Cromwell incident framing from <a href="https://compliancehub.wiki/legal-ai-hallucination-reckoning-2026/" target="_blank" rel="noopener">ComplianceHub</a>. Hallucination ruling count from <a href="https://www.damiencharlotin.com/hallucinations/" target="_blank" rel="noopener">Damien Charlotin's database</a> (1,369+ rulings as of 2026-05-27). If anything here misrepresents Claude for Legal, open an issue at <a href="https://github.com/IgorGanapolsky/ThumbGate/issues" target="_blank" rel="noopener">our repo</a> and we will correct it.</p>
-        </div>
-      </aside>
-    </div>
-  </main>
-</body>
-</html>