thumbgate 1.27.18 → 1.27.19

package/config/model-candidates.json

@@ -4,8 +4,8 @@
   "workloads": {
     "pretool-gating": {
       "label": "PreTool gating",
-      "summary": "Fast, reliable gate judgments for tool-use and agentic coding decisions before commands run.",
-      "desiredStrengths": ["agentic-coding", "tool-use", "reliability"],
+      "summary": "Fast, reliable gate judgments for tool-use and agentic coding decisions before commands run. Hybrid local-cloud candidates (e.g. perplexity/hybrid-local) excel here for privacy + low latency on sensitive paths.",
+      "desiredStrengths": ["agentic-coding", "tool-use", "reliability", "privacy", "fast-inference"],
       "targetContextWindow": 64000,
       "benchmarkCommands": [
         "npx thumbgate eval --from-feedback --json --min-score=0",
@@ -43,8 +43,8 @@
     },
     "cheap-fast-path": {
       "label": "Cheap fast path",
-      "summary": "Low-cost first-pass model for cheap approval triage before escalating ambiguous work.",
-      "desiredStrengths": ["agentic-coding", "tool-use"],
+      "summary": "Low-cost first-pass model for cheap approval triage before escalating ambiguous work. Perplexity hybrid-local is ideal: on-device for speed/privacy, escalate only when needed via orchestrator.",
+      "desiredStrengths": ["agentic-coding", "tool-use", "fast-inference", "privacy", "cost-efficiency"],
       "targetContextWindow": 32000,
       "benchmarkCommands": [
         "npx thumbgate eval --from-feedback --json --min-score=0",
@@ -60,8 +60,8 @@
     },
     "dashboard-analysis": {
       "label": "Dashboard and dataset analysis",
-      "summary": "Evaluate frontier models for dataset analysis, chart generation, dashboard planning, and proof-backed insight quality before routing expensive analytical work.",
-      "desiredStrengths": ["data-analysis", "dashboard-creation", "charting", "long-context", "reliability"],
+      "summary": "Evaluate frontier models for dataset analysis, chart generation, dashboard planning, and proof-backed insight quality before routing expensive analytical work. Perplexity hybrid excels for sensitive lessons/feedback data (local for privacy, cloud for depth).",
+      "desiredStrengths": ["data-analysis", "dashboard-creation", "charting", "long-context", "reliability", "privacy"],
       "targetContextWindow": 200000,
       "benchmarkCommands": [
         "npx thumbgate eval --from-feedback --json --min-score=0",
@@ -77,6 +77,27 @@
         "costPerAnalysisUsd"
       ]
     },
+    "claw-style-enterprise-agent": {
+      "label": "Claw-style enterprise agent governance",
+      "summary": "Governance, gating, and feedback for autonomous 'claw-style' agents (Automation Anywhere EnterpriseClaw, Nvidia OpenShell-inspired) that have device file system access, runtime dynamic tool creation, screen/UI interaction, and multi-platform orchestration. Especially relevant for on-prem/air-gapped/hybrid enterprise data realities.",
+      "desiredStrengths": ["agentic-coding", "tool-use", "reliability", "security", "orchestration", "audit-trail", "privacy"],
+      "targetContextWindow": 128000,
+      "benchmarkCommands": [
+        "npx thumbgate eval --from-feedback --json --min-score=0",
+        "node scripts/gate-eval.js run",
+        "npx thumbgate bench --json --min-score=90"
+      ],
+      "metrics": [
+        "passRate",
+        "falsePositiveRate",
+        "agentIdentitySeparation",
+        "dynamicToolSafety",
+        "screenInteractionAudit",
+        "orchestrationCompliance",
+        "medianLatencyMs",
+        "costPer1kActionsUsd"
+      ]
+    },
     "tokenizer-brittleness": {
       "label": "Tokenizer brittleness and byte-level robustness",
       "summary": "Evaluate models for malformed JSONL, Unicode confusables, stack traces, secrets, SQL snippets, file paths, and code-symbol-heavy inputs before routing log, code, or security workloads.",
@@ -95,6 +116,23 @@
         "medianLatencyMs",
         "memoryBandwidthEstimate"
       ]
+    },
+    "self-improving-agent-skill-synthesis": {
+      "label": "Self-improving agent skill synthesis",
+      "summary": "Evaluate models on their ability to self-improve, generate safe Markdown skills, and correctly check synthesized skills against existing gate/prevention rules.",
+      "desiredStrengths": ["agentic-coding", "tool-use", "self-evolving", "skill-synthesis", "reliability"],
+      "targetContextWindow": 128000,
+      "benchmarkCommands": [
+        "npx thumbgate eval --from-feedback --json --min-score=0",
+        "node scripts/gate-eval.js run"
+      ],
+      "metrics": [
+        "passRate",
+        "skillSafetyCheckAccuracy",
+        "ruleBypassDetectionRate",
+        "medianLatencyMs",
+        "costPerEvolutionUsd"
+      ]
     }
   },
   "candidates": [
@@ -214,6 +252,83 @@
       "costClass": "low",
       "strengths": ["agentic-coding", "tool-use", "fast-inference"],
       "notes": "Cheapest Tinker candidate for the fast gate path; use when latency/cost matter most."
+    },
+    {
+      "id": "perplexity/hybrid-local-cloud",
+      "vendor": "Perplexity",
+      "family": "hybrid",
+      "provider": "perplexity",
+      "model": "hybrid-local-cloud-orchestrator",
+      "contextWindow": 200000,
+      "costClass": "variable",
+      "strengths": ["agentic-coding", "tool-use", "privacy", "cost-efficiency", "fast-inference", "long-context", "reliability"],
+      "notes": "Perplexity hybrid local-cloud inference orchestrator (announced Computex 2026, part of Personal Computer). Autonomously routes: sensitive/privacy work to local on-device models, complex reasoning to frontier cloud. High-ROI for pretool-gating (local fast/privacy path), cheap-fast-path, and dashboard-analysis with sensitive data/lessons. Pair with ThumbGate hybrid-routing gates (see adapters/perplexity/HYBRID.md). Coming July 2026 for local inference."
+    },
+    {
+      "id": "perplexity/hybrid-local",
+      "vendor": "Perplexity",
+      "family": "hybrid",
+      "provider": "perplexity",
+      "model": "local-inference",
+      "contextWindow": 128000,
+      "costClass": "low",
+      "strengths": ["fast-inference", "privacy", "tool-use", "reliability"],
+      "notes": "Local-only mode of Perplexity hybrid for on-device pre-action gating, sensitivity classification, and low-latency checks on AI PCs (Intel, NVIDIA). Escalate via orchestrator for full capability. Use for cheap-fast-path and pretool-gating workloads."
+    },
+    {
+      "id": "automation-anywhere/enterprise-claw",
+      "vendor": "Automation Anywhere",
+      "family": "claw-style",
+      "provider": "automation-anywhere",
+      "model": "enterprise-claw",
+      "contextWindow": 200000,
+      "costClass": "variable",
+      "strengths": ["agentic-coding", "tool-use", "orchestration", "audit-trail", "security", "on-prem", "airgap", "dynamic-tool-creation", "screen-interaction"],
+      "notes": "Claw-style autonomous enterprise agents (EnterpriseClaw, inspired by Nvidia OpenShell). Device-level access, runtime tool creation, screen/UI interaction, multi-platform orchestration. Governance infrastructure (ThumbGate) is explicitly called out as catching up. High-ROI for enterprise on-prem/hybrid use cases. Pair with perplexity/hybrid for inference routing. See adapters/claw/CLAW.md and new gate templates."
+    },
+    {
+      "id": "nvidia/openshell-claw",
+      "vendor": "NVIDIA",
+      "family": "claw-style",
+      "provider": "nvidia",
+      "model": "openshell",
+      "contextWindow": 128000,
+      "costClass": "medium",
+      "strengths": ["agentic-coding", "tool-use", "dynamic-tool-creation", "screen-interaction", "on-prem", "self-evolving"],
+      "notes": "Nvidia OpenShell runtime for autonomous self-evolving claw-style agents (basis for Automation Anywhere EnterpriseClaw). Run locally/on-prem. ThumbGate provides the missing governance layer (gates, feedback, rules). Use with hybrid local-cloud for full enterprise deployment."
+    },
+    {
+      "id": "nousresearch/hermes-3-llama-3.1-70b",
+      "vendor": "Nous Research",
+      "family": "hermes",
+      "provider": "openrouter",
+      "model": "hermes-3-llama-3.1-70b",
+      "contextWindow": 128000,
+      "costClass": "medium",
+      "strengths": ["agentic-coding", "tool-use", "self-evolving", "skill-synthesis", "multi-platform", "reasoning"],
+      "notes": "Nous Research's Hermes 3 model family, optimized for autonomous reasoning, tool-use, and self-improvement loops. Benchmark KV caching, trace-length constraints, and dynamic skill synthesis validation rules before deploying."
+    },
+    {
+      "id": "anthropic/claude-opus-4-8",
+      "vendor": "Anthropic",
+      "family": "claude",
+      "provider": "anthropic",
+      "model": "claude-opus-4.8",
+      "contextWindow": 200000,
+      "costClass": "high",
+      "strengths": ["agentic-coding", "tool-use", "reliability", "long-context", "long-horizon-coding", "multi-agent"],
+      "notes": "Frontier coding model with 56.7 Coding Index. Grew 140% WoW on OpenRouter to 1.33T tokens. Ideal for long trace reviews and complex reasoning steps, despite higher latency and cost."
+    },
+    {
+      "id": "google/gemini-3.1-pro-preview",
+      "vendor": "Google",
+      "family": "gemini",
+      "provider": "google",
+      "model": "gemini-3.1-pro-preview",
+      "contextWindow": 2000000,
+      "costClass": "medium",
+      "strengths": ["agentic-coding", "tool-use", "reliability", "long-context", "data-analysis", "cost-efficiency"],
+      "notes": "Google's 3.1 Pro Preview model with 55.5 Coding Index and massive 2M token context window. Strong choice for complex RAG tasks, repository-scale auditing, and long-context trace analysis."
     }
   ]
 }

package/config/post-deploy-marketing-pages.json

@@ -0,0 +1,80 @@
+{
+  "$comment": "Sentinel manifest for post-deploy verification of top-level marketing pages. Each entry is curled against the live production URL after every push to main; if the sentinel string is missing from the response body, the deploy is flagged as broken and the workflow comments on the associated PR. Adding a new top-level marketing page? Add it here so the deploy-verify workflow catches a route regression before a real visitor does. Keep sentinel strings short and stable (visible body copy, not styling classes or hashed assets).",
+  "version": 1,
+  "pages": [
+    {
+      "route": "/",
+      "sentinel": "Stop paying for the same AI mistake twice",
+      "description": "Home page hero (lifeblood — never regress)"
+    },
+    {
+      "route": "/pro",
+      "sentinel": "ThumbGate Pro",
+      "description": "Pro landing page"
+    },
+    {
+      "route": "/checkout/pro",
+      "sentinel": "Optional. Stripe can collect your email on the secure checkout page.",
+      "mustNotContain": [
+        "Required for your Stripe receipt and checkout recovery link."
+      ],
+      "userAgent": "curl/8.0.0",
+      "description": "Pro checkout interstitial must not require email before Stripe"
+    },
+    {
+      "route": "/diagnostic",
+      "sentinel": "Workflow Hardening Diagnostic",
+      "description": "Workflow Hardening Diagnostic intake page for high-intent warm traffic"
+    },
+    {
+      "route": "/dashboard",
+      "sentinel": "ThumbGate Dashboard",
+      "description": "Dashboard demo (already enforced by /dashboard step; included here for symmetry with PR comment surface)"
+    },
+    {
+      "route": "/federal",
+      "sentinel": "ThumbGate",
+      "description": "Federal lead-gen page (SBIR / GSA arrivals)"
+    },
+    {
+      "route": "/numbers",
+      "sentinel": "ThumbGate",
+      "description": "First-party numbers / data transparency page"
+    },
+    {
+      "route": "/ai-malpractice-prevention",
+      "sentinel": "Pre-Execution Controls for Legal AI Agents",
+      "description": "Legal AI intake risk-controls page for law-firm pilot conversations"
+    },
+    {
+      "route": "/learn/background-agent-control-layer",
+      "sentinel": "Background agents need a control layer outside the model",
+      "description": "Background-agent AI-SDLC control-layer positioning page"
+    },
+    {
+      "route": "/llm-context.md",
+      "sentinel": "## What ThumbGate Is",
+      "description": "Canonical declarative summary AI crawlers read"
+    },
+    {
+      "route": "/robots.txt",
+      "sentinel": "User-agent",
+      "description": "Crawl directives (mandatory per Google's 2026-05-15 AI features guide)"
+    },
+    {
+      "route": "/sitemap.xml",
+      "sentinel": "<urlset",
+      "description": "XML sitemap for search-engine discoverability"
+    },
+    {
+      "route": "/about",
+      "sentinel": "Igor Ganapolsky",
+      "description": "About page for GEO discoverability"
+    },
+    {
+      "route": "/leash-beta",
+      "sentinel": "Stop Runaway AI Agents From Freezing Your Machine",
+      "description": "Hermes Mobile founding beta / Leash Pro pricing landing"
+    }
+  ]
+}

package/config/tessl-tiles.json

@@ -2,9 +2,7 @@
   "version": 1,
   "defaultWorkspace": "thumbgate",
   "proofLinks": {
-    "verificationEvidence": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md",
-    "compatibilityReport": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/compatibility/report.json",
-    "automationReport": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json"
+    "verificationEvidence": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md"
   },
   "tiles": [
     {

package/openapi/openapi.yaml

@@ -72,6 +72,11 @@ components:
           description: Optional domain tags. If omitted, ThumbGate infers one from the feedback text before promotion.
         skill:
           type: string
+        source:
+          type: string
+          enum: [chatgpt_gpt]
+          default: chatgpt_gpt
+          description: Attribution marker for ThumbGate analytics. The published ThumbGate GPT should send `chatgpt_gpt` so owner dashboards can distinguish GPT Action calls from local API calls.
     IntentPlanRequest:
       type: object
       required: [intentId]
@@ -89,6 +94,8 @@ components:
         delegationMode:
           type: string
           enum: [off, auto, sequential]
+        enforcePlanQuality:
+          type: boolean
         approved:
           type: boolean
         repoPath:
@@ -880,6 +887,11 @@ paths:
                 toolName:
                   type: string
                   description: Tool name is optional when provider-native tool call payload is supplied.
+                source:
+                  type: string
+                  enum: [chatgpt_gpt]
+                  default: chatgpt_gpt
+                  description: Attribution marker for ThumbGate analytics. The published ThumbGate GPT should send `chatgpt_gpt` so owner dashboards can distinguish GPT Action calls from local API calls.
                 provider:
                   type: string
                 model:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.27.18",
+  "version": "1.27.19",
   "description": "ThumbGate self-improving agent governance: thumbs-up/down turns every mistake into a prevention rule and blocks repeat patterns. 33 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {

package/public/blog.html

@@ -4,14 +4,14 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>ThumbGate Blog — Agent Governance Engineering</title>
-    <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+    <script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
     <meta
       name="description"
       content="Technical breakdowns, release notes, and agent governance insights from the ThumbGate team."
     />
     <link
       rel="canonical"
-      href="https://thumbgate-production.up.railway.app/blog"
+      href="https://thumbgate.ai/blog"
     />
     <meta
       property="og:title"
@@ -24,14 +24,14 @@
     <meta property="og:type" content="website" />
     <meta
       property="og:url"
-      content="https://thumbgate-production.up.railway.app/blog"
+      content="https://thumbgate.ai/blog"
     />
     <script type="application/ld+json">
       {
         "@context": "https://schema.org",
         "@type": "Blog",
         "name": "ThumbGate Blog",
-        "url": "https://thumbgate-production.up.railway.app/blog",
+        "url": "https://thumbgate.ai/blog",
         "publisher": { "@type": "Organization", "name": "ThumbGate" },
         "blogPost": [
           {

package/public/codex-plugin.html

@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>ThumbGate for Codex - Auto-Updating MCP Plugin</title>
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="Install ThumbGate for Codex with an auto-updating MCP plugin, Pre-Action Checks, thumbs-up/down feedback memory, and a local-first Reliability Gateway.">
+<title>ThumbGate for Codex - CLI Setup and Plugin Bundle</title>
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
+<meta name="description" content="Install ThumbGate for Codex with CLI setup first, plus a portable Codex plugin bundle for review, marketplace, and offline workflows. Includes Pre-Action Checks and thumbs-up/down feedback memory.">
 <meta name="keywords" content="ThumbGate Codex plugin, Codex MCP server, Codex pre-action checks, Codex guardrails, thumbgate latest, AI coding agent reliability">
 <meta property="og:title" content="ThumbGate for Codex">
-<meta property="og:description" content="Auto-updating MCP and hook launcher for Codex. One install, then ThumbGate resolves the latest npm runtime when Codex starts.">
+<meta property="og:description" content="CLI-first Codex setup with auto-updating MCP, hooks, and a portable plugin bundle for review or marketplace workflows.">
 <meta property="og:type" content="website">
-<meta property="og:url" content="https://thumbgate-production.up.railway.app/codex-plugin">
-<link rel="canonical" href="https://thumbgate-production.up.railway.app/codex-plugin">
-<link rel="llm-context" href="/public/llm-context.md" type="text/markdown">
+<meta property="og:url" content="https://thumbgate.ai/codex-plugin">
+<link rel="canonical" href="https://thumbgate.ai/codex-plugin">
+<link rel="llm-context" href="/llm-context.md" type="text/markdown">
 
 <script type="application/ld+json">
 {
@@ -21,10 +21,10 @@
   "name": "ThumbGate for Codex",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "macOS, Linux, Windows with Node.js",
-  "description": "ThumbGate for Codex installs an MCP server and hook launcher that resolves thumbgate@latest at startup, captures thumbs-up/down feedback, and enforces Pre-Action Checks before risky agent actions run.",
-  "url": "https://thumbgate-production.up.railway.app/codex-plugin",
+  "description": "ThumbGate for Codex installs an MCP server and hook launcher that resolves thumbgate@latest at startup, captures thumbs-up/down feedback, and enforces Pre-Action Checks before risky agent actions run. The supported fast path is npx thumbgate init --agent codex; the zip is a portable plugin bundle, not a double-click desktop installer.",
+  "url": "https://thumbgate.ai/codex-plugin",
   "downloadUrl": "https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip",
-  "installUrl": "https://thumbgate-production.up.railway.app/codex-plugin",
+  "installUrl": "https://thumbgate.ai/codex-plugin",
   "license": "https://opensource.org/licenses/MIT",
   "dateModified": "2026-04-20",
   "creator": {
@@ -71,7 +71,15 @@
       "name": "What is the fastest Codex install path?",
       "acceptedAnswer": {
         "@type": "Answer",
-        "text": "Run npx thumbgate init --agent codex for the automatic local setup, or use the standalone Codex plugin bundle if you want a portable plugin surface."
+        "text": "Run npx thumbgate init --agent codex for the automatic local setup. Use the standalone Codex plugin bundle only when you want a portable plugin folder for review, marketplace wiring, offline handoff, or a Codex build that exposes local plugin import."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "Does the release zip install itself in Codex Desktop?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "No. The zip is not a double-click installer. Extract it and install the folder through a Codex plugin directory or marketplace flow if your Codex build exposes one. Otherwise use npx thumbgate init --agent codex."
       }
     }
   ]
@@ -220,9 +228,9 @@
       <p class="sub" style="font-size:13px;opacity:0.85;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
       <p class="sub">ThumbGate wires Codex into local-first feedback memory, MCP tools, and hook enforcement. The launcher resolves <code>thumbgate@latest</code> when Codex starts, so published npm fixes reach your active MCP server after a restart.</p>
       <div class="actions">
-        <a class="button primary" href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener" onclick="if(typeof plausible==='function')plausible('codex_plugin_download')">Download Codex plugin</a>
+        <a class="button primary" href="/guide" onclick="if(typeof plausible==='function')plausible('codex_cli_setup')">Install with CLI setup</a>
         <a class="button secondary" href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/plugins/codex-profile/INSTALL.md" target="_blank" rel="noopener">Read install docs</a>
-        <a class="button secondary" href="/guide">Use CLI setup</a>
+        <a class="button secondary" href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener" onclick="if(typeof plausible==='function')plausible('codex_plugin_download')">Download zip for review</a>
       </div>
       <nav class="proof-bar" aria-label="Codex proof and conversion links">
         <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Verification evidence</a>
@@ -231,8 +239,9 @@
         <a href="/?utm_source=codex&utm_medium=plugin_page&utm_campaign=codex_team_follow_on&utm_content=workflow_sprint&campaign_variant=teams_follow_on&offer_code=CODEX-TEAMS_FOLLOW_ON&cta_id=codex_team_follow_on&cta_placement=plugin_page&surface=codex_plugin#workflow-sprint-intake">Team workflow sprint</a>
       </nav>
       <pre class="terminal">$ npx thumbgate init --agent codex
+$ npx thumbgate feedback-self-test
 # Writes ~/.codex/config.toml and ~/.codex/config.json
-# MCP + hooks install thumbgate@latest before serving or checking gates</pre>
+# Restart Codex, then confirm ThumbGate is enabled in Plugins or MCP settings</pre>
     </div>
   </section>
 
@@ -251,11 +260,31 @@
     </div>
   </section>
 
+  <section class="wrap">
+    <div class="eyebrow">Role plugins, Sites, and team OS</div>
+    <h2>Codex is becoming a business-work surface. ThumbGate is the action boundary.</h2>
+    <div class="steps">
+      <div class="step">
+        <h3>Role plugins</h3>
+        <p>Codex plugins bundle skills, apps, and MCP servers. ThumbGate checks role-specific writes before sales, analytics, design, finance, or support agents modify business systems.</p>
+      </div>
+      <div class="step">
+        <h3>Sites deploys</h3>
+        <p>Before a Sites workflow publishes or widens access, ThumbGate can require build proof, intended audience, secret handling, and deployment evidence.</p>
+      </div>
+      <div class="step">
+        <h3>Team Agentic OS</h3>
+        <p>Human-editable docs, agent-operating files, and git backups still need runtime checks. ThumbGate gates protected skills, MCP config, memory scope, and workflow contracts.</p>
+      </div>
+    </div>
+    <p><a href="/learn/codex-role-plugins-need-governance">Read the Codex role-plugin governance guide</a> · <a href="/learn/agentic-os-team-governance">Read the Agentic OS team governance guide</a> · <a href="/learn/cost-aware-agent-gate-routing">Read cost-aware gate routing</a></p>
+  </section>
+
   <section class="wrap split">
     <div>
       <div class="eyebrow">What Codex gets</div>
       <h2>MCP memory, hook checks, and a dashboard lane in the same install path.</h2>
-      <p>Use the standalone plugin when you want a portable Codex bundle. Use <code>npx thumbgate init --agent codex</code> when you want the shortest path on this machine. Both paths point at the same Reliability Gateway and the same npm runtime.</p>
+      <p>Use <code>npx thumbgate init --agent codex</code> when you want the shortest path on this machine. Use the standalone zip only when you need a portable plugin folder for audit, offline handoff, marketplace wiring, or a Codex build that exposes local plugin import.</p>
       <p class="status">The Codex launcher checks npm on startup. Restart Codex after a ThumbGate publish to let the MCP server and hook bundle pick up the latest runtime.</p>
     </div>
     <figure class="proof">
@@ -273,12 +302,31 @@
         <p>Run <code>npx thumbgate init --agent codex</code>. ThumbGate writes the MCP server block and hook bundle into your Codex config files.</p>
       </div>
       <div class="step">
-        <h3>2. Standalone plugin</h3>
-        <p>Use the release bundle when Codex loads plugin surfaces directly. The bundle includes the manifest, MCP config, marketplace entry, and install docs.</p>
+        <h3>2. Plugin directory</h3>
+        <p>For a true plugin install, use Codex Plugins or a marketplace source. In the Add marketplace dialog, do not keep Codex's default <code>plugins/codex</code> sparse path for this repo; use <code>.agents/plugins/marketplace.json</code> and <code>plugins/codex-profile</code>, or leave sparse paths blank for a local checkout.</p>
       </div>
       <div class="step">
-        <h3>3. Verify in Codex</h3>
-        <p>Open Codex settings, confirm <code>thumbgate</code> is toggled on, then restart Codex after npm releases to pick up the latest runtime.</p>
+        <h3>3. Zip for review</h3>
+        <p>The zip is a portable folder, not a double-click installer. Extract it, inspect <code>.codex-plugin/plugin.json</code>, and use CLI setup when local plugin import is unavailable.</p>
+      </div>
+    </div>
+  </section>
+
+  <section class="wrap">
+    <div class="eyebrow">Desktop install reality</div>
+    <h2>Do not make users guess what to do with a zip.</h2>
+    <div class="steps">
+      <div class="step">
+        <h3>Use first</h3>
+        <p><code>npx thumbgate init --agent codex</code> is the supported self-serve path. It configures MCP, hooks, and the status line without asking the user to understand plugin internals.</p>
+      </div>
+      <div class="step">
+        <h3>Use when available</h3>
+        <p>If Codex shows Plugins, open the directory, clear restrictive filters like <code>Built by OpenAI</code>, install ThumbGate from a marketplace or shared plugin entry, then start a new thread after install.</p>
+      </div>
+      <div class="step">
+        <h3>Use for operators</h3>
+        <p>Download the zip only for security review, offline delivery, or manual marketplace wiring. The user selects the extracted folder, never the compressed file.</p>
       </div>
     </div>
   </section>
@@ -312,7 +360,11 @@
       </div>
       <div class="faq">
         <h3>Where is the direct asset?</h3>
-        <p>The standalone zip remains available at <a href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener">GitHub Releases</a>. This page is the human install surface so users do not land on an unexplained file download.</p>
+        <p>The standalone zip remains available at <a href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener">GitHub Releases</a>. It is for review, offline delivery, and manual marketplace workflows. It is not a double-click Codex Desktop installer.</p>
+      </div>
+      <div class="faq">
+        <h3>I searched Plugins for ThumbGate. Why is it missing?</h3>
+        <p>First clear the <code>Built by OpenAI</code> filter. ThumbGate is a local or third-party marketplace plugin, so an OpenAI-only filter hides it. Then confirm the marketplace includes <code>.agents/plugins/marketplace.json</code> and <code>plugins/codex-profile</code>; the default <code>plugins/codex</code> sparse path will miss this repo.</p>
       </div>
     </div>
   </section>

package/public/compare.html

@@ -5,14 +5,14 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Best Pre-Action Check Tools for AI Coding Agents (2026 Comparison)</title>
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="Compare pre-action check tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
 <meta name="keywords" content="AI agent safety, pre-action checks, AI coding agent comparison, ThumbGate vs manual review, AI agent guardrails, PreToolUse hooks, Claude Code safety, Codex safety, Gemini safety, Cursor rules alternative">
 <meta property="og:title" content="Best Pre-Action Check Tools for AI Coding Agents (2026 Comparison)">
 <meta property="og:description" content="Compare pre-action check tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
 <meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate-production.up.railway.app/compare">
-<link rel="canonical" href="https://thumbgate-production.up.railway.app/compare">
+<meta property="og:url" content="https://thumbgate.ai/compare">
+<link rel="canonical" href="https://thumbgate.ai/compare">
 
 <script type="application/ld+json">
 {
@@ -28,11 +28,11 @@
   "publisher": {
     "@type": "Organization",
     "name": "ThumbGate",
-    "url": "https://thumbgate-production.up.railway.app"
+    "url": "https://thumbgate.ai"
   },
   "datePublished": "2026-04-08",
   "dateModified": "2026-04-08",
-  "mainEntityOfPage": "https://thumbgate-production.up.railway.app/compare"
+  "mainEntityOfPage": "https://thumbgate.ai/compare"
 }
 </script>
 
@@ -62,7 +62,7 @@
       "name": "Is ThumbGate free?",
       "acceptedAnswer": {
         "@type": "Answer",
-        "text": "ThumbGate has a free tier that includes local enforcement with unlimited feedback captures, up to 5 active auto-promoted prevention rules, and pre-action check blocking. Pro ($19/mo or $149/yr) adds a personal local dashboard, recall, lesson search, unlimited rules, and DPO export. Team rollout ($49/seat/mo) adds a shared lesson database and org dashboard."
+        "text": "ThumbGate has a free tier that includes local enforcement with 2 feedback captures/day, 10 total captures, up to 3 active auto-promoted prevention rules, and pre-action check blocking. Pro ($19/mo or $149/yr) adds hosted sync, a personal local dashboard, recall, lesson search, unlimited captures/rules, and DPO export. Enterprise (custom pricing, scoped after intake) adds a shared lesson database and org dashboard."
       }
     },
     {
@@ -263,10 +263,33 @@
 
 <div class="card">
   <h3>Evaluating Rein for AI agent governance?</h3>
-  <p>Rein is a Python decorator that wraps tool functions with policy checks, audit trails, and circuit breakers — targeted at production apps in trading, healthcare, and legal. ThumbGate is the coding-agent specialist with a learning feedback loop and MIT licensing. Same category (pre-action gates), different layer and stack.</p>
+  <p>Rein is a Python decorator that wraps tool functions with policy checks, audit trails, and circuit breakers — targeted at production apps in trading, healthcare, and legal. ThumbGate is the coding-agent specialist with a learning feedback loop and MIT licensing. Same category (infrastructure firewalls), different layer and stack.</p>
   <p><a href="/compare/rein" class="cta">Read ThumbGate vs Rein</a></p>
 </div>
 
+<h2>All ThumbGate comparisons</h2>
+<p style="color:var(--muted);">Every head-to-head in one place. ThumbGate is the local-first, learning enforcement layer at the tool-call boundary — most of these tools sit at a different layer and are complementary.</p>
+<ul class="compare-index">
+  <li><a href="/compare/sigmashake">ThumbGate vs SigmaShake</a> — learns the rule from your thumbs-down vs a hand-picked ruleset hub</li>
+  <li><a href="/compare/claude-code-hooks">ThumbGate vs claude-code-hooks</a> — hosted sync &amp; learning on top of local shell-script hooks</li>
+  <li><a href="/compare/arcjet">ThumbGate vs Arcjet</a> — agent-outbound gate pairs with an app-inbound firewall</li>
+  <li><a href="/compare/bumblebee">ThumbGate vs Bumblebee</a> — runtime enforcement pairs with static inventory</li>
+  <li><a href="/compare/anthropic-containment">ThumbGate vs Anthropic's Claude Containment</a> — an IDE-agent extension of Anthropic's published architecture</li>
+  <li><a href="/compare/oak-and-sparrow-gatekeeper">ThumbGate vs Gatekeeper (Oak &amp; Sparrow)</a> — agent-action gate pairs with a workforce-input gate</li>
+  <li><a href="/compare/fallow">ThumbGate vs Fallow</a> — static analysis vs agent-action enforcement</li>
+  <li><a href="/compare/heidi">ThumbGate vs HEIDI</a> — behavior enforcement vs supply-chain scanning</li>
+  <li><a href="/compare/rein">ThumbGate vs Rein</a> — coding-agent governance vs generic decorator governance</li>
+  <li><a href="/compare/anthropic-claude-for-legal">ThumbGate vs Claude for Legal</a> — runtime gate pairs with Anthropic's practice-area plugins</li>
+  <li><a href="/compare/mem0">ThumbGate vs Mem0</a> — enforcement vs memory for AI agents</li>
+  <li><a href="/compare/speclock">ThumbGate vs SpecLock</a> — thumbs-feedback enforcement vs manual specs</li>
+  <li><a href="/compare/ai-experience-orchestration">ThumbGate vs AI Experience Orchestration</a> — orchestration vs execution enforcement</li>
+  <li><a href="/compare/agentix-labs">ThumbGate vs Agentix Labs</a> — productized enforcement vs custom AI-agent services</li>
+  <li><a href="/compare/adopt-ai">ThumbGate vs Adopt AI</a> — pre-execution firewall vs evals-first gating for production blast radius</li>
+  <li><a href="/compare/arcade">ThumbGate vs Arcade</a> — coding-agent guardrails vs enterprise API auth delegation</li>
+  <li><a href="/compare/databricks-unity-ai-gateway">ThumbGate vs Databricks Unity AI Gateway</a> — enterprise gateway vs local pre-action gates</li>
+  <li><a href="/compare/hermes-everos-memory">ThumbGate vs Hermes and EverOS</a> — local-first behavior gates vs passive agent memory stores</li>
+</ul>
+
 <h2>How It Works</h2>
 <div class="step-grid">
   <div class="step-card">
@@ -311,7 +334,7 @@
 
 <div class="card">
   <h3>Is ThumbGate free?</h3>
-  <p>ThumbGate has a free tier that includes local enforcement with unlimited feedback captures, up to 5 active auto-promoted prevention rules, and pre-action check blocking. Pro ($19/mo or $149/yr) adds a personal local dashboard, recall, lesson search, unlimited rules, and DPO export. Team rollout ($49/seat/mo) adds a shared lesson database and org dashboard.</p>
+  <p>ThumbGate has a free tier that includes local enforcement with 2 feedback captures/day, 10 total captures, up to 3 active auto-promoted prevention rules, and pre-action check blocking. Pro ($19/mo or $149/yr) adds hosted sync, a personal local dashboard, recall, lesson search, unlimited captures/rules, and DPO export. Enterprise (custom pricing, scoped after intake) adds a shared lesson database and org dashboard.</p>
 </div>
 
 <div class="card">