npm - thumbgate - Versions diffs - 1.27.7 → 1.27.9 - Mend

thumbgate 1.27.7 → 1.27.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (106) hide show

package/.well-known/llms.txt +1 -2
package/README.md +0 -2
package/bin/cli.js +259 -78
package/package.json +12 -18
package/public/blog.html +30 -0
package/public/compare/adopt-ai.html +219 -0
package/public/compare/agentix-labs.html +197 -0
package/public/compare/ai-experience-orchestration.html +216 -0
package/public/compare/anthropic-claude-for-legal.html +260 -0
package/public/compare/anthropic-containment.html +280 -0
package/public/compare/arcade.html +175 -0
package/public/compare/arcjet.html +239 -0
package/public/compare/bumblebee.html +307 -0
package/public/compare/claude-code-hooks.html +294 -0
package/public/compare/databricks-unity-ai-gateway.html +215 -0
package/public/compare/fallow.html +351 -0
package/public/compare/heidi.html +233 -0
package/public/compare/mem0.html +342 -0
package/public/compare/oak-and-sparrow-gatekeeper.html +289 -0
package/public/compare/rein.html +236 -0
package/public/compare/sigmashake.html +256 -0
package/public/compare/speclock.html +342 -0
package/public/compare.html +2 -0
package/public/guides/agent-harness-optimization.html +342 -0
package/public/guides/agentic-web-governance.html +406 -0
package/public/guides/ai-agent-governance-sprint.html +415 -0
package/public/guides/ai-agent-pre-action-approval-gates.html +401 -0
package/public/guides/ai-agent-workflow-migration-checklist.html +392 -0
package/public/guides/ai-deployment-readiness.html +415 -0
package/public/guides/ai-mode-ads-agent-governance.html +401 -0
package/public/guides/ai-search-topical-presence.html +342 -0
package/public/guides/autoresearch-agent-safety.html +342 -0
package/public/guides/background-agent-governance.html +358 -0
package/public/guides/best-tools-stop-ai-agents-breaking-production.html +363 -0
package/public/guides/browser-automation-safety.html +342 -0
package/public/guides/chatgpt-ads-trust.html +353 -0
package/public/guides/claude-code-feedback.html +339 -0
package/public/guides/claude-code-prevent-repeated-mistakes.html +161 -0
package/public/guides/claude-code-skills-guardrails.html +343 -0
package/public/guides/claude-desktop.html +356 -0
package/public/guides/code-knowledge-graph-guardrails.html +365 -0
package/public/guides/codex-cli-guardrails.html +339 -0
package/public/guides/cursor-agent-guardrails.html +339 -0
package/public/guides/cursor-prevent-repeated-mistakes.html +161 -0
package/public/guides/database-agent-safety.html +406 -0
package/public/guides/deepseek-v4-runtime-guardrails.html +346 -0
package/public/guides/developer-machine-supply-chain-guardrails.html +358 -0
package/public/guides/gcp-mcp-guardrails.html +147 -0
package/public/guides/gemini-cli-feedback-memory.html +339 -0
package/public/guides/gpt-5-5-model-evaluation.html +358 -0
package/public/guides/internal-ai-engineering-stack-guardrails.html +348 -0
package/public/guides/long-running-agent-context-management.html +346 -0
package/public/guides/mcp-tool-governance.html +401 -0
package/public/guides/multica-thumbgate-setup.html +134 -0
package/public/guides/native-messaging-host-security.html +342 -0
package/public/guides/policy-engine-pre-action-gates.html +346 -0
package/public/guides/pre-action-checks.html +342 -0
package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +342 -0
package/public/guides/prompt-tricks-to-workflow-rules.html +365 -0
package/public/guides/proxy-pointer-rag-guardrails.html +352 -0
package/public/guides/rag-precision-tuning-guardrails.html +352 -0
package/public/guides/reasoning-compression-guardrails.html +346 -0
package/public/guides/relational-knowledge-ai-recommendations.html +342 -0
package/public/guides/roo-code-alternative-cline.html +339 -0
package/public/guides/semantic-programmatic-seo-guardrails.html +352 -0
package/public/guides/seo-agent-skills-guardrails.html +344 -0
package/public/guides/stop-repeated-ai-agent-mistakes.html +342 -0
package/public/index.html +10 -48
package/public/learn/ac-dc-runtime-enforcement.html +277 -0
package/public/learn/agent-harness-pattern.html +181 -0
package/public/learn/agent-swarms-shared-gates.html +173 -0
package/public/learn/agentic-enterprise-context-brain.html +117 -0
package/public/learn/agentic-os-team-governance.html +146 -0
package/public/learn/ai-agent-governance.html +158 -0
package/public/learn/ai-agent-persistent-memory.html +211 -0
package/public/learn/background-agent-control-layer.html +184 -0
package/public/learn/claude-code-goal-with-rubrics.html +205 -0
package/public/learn/codex-role-plugins-need-governance.html +125 -0
package/public/learn/cost-aware-agent-gate-routing.html +173 -0
package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +157 -0
package/public/learn/deterministic-agent-workflows.html +185 -0
package/public/learn/feedback-loop-vs-decision-layer.html +283 -0
package/public/learn/from-prototype-to-production.html +223 -0
package/public/learn/learn.css +51 -0
package/public/learn/mcp-pre-action-checks-explained.html +172 -0
package/public/learn/pretix-stripe-connect-marketplaces.html +161 -0
package/public/learn/regulated-agent-execution-boundary.html +196 -0
package/public/learn/spec-driven-development.html +168 -0
package/public/learn/stop-ai-agent-force-push.html +134 -0
package/public/learn/vibe-coding-safety-net.html +142 -0
package/public/learn.html +6 -50
package/public/pro.html +6 -6
package/scripts/cli-schema.js +10 -22
package/scripts/dashboard-chat.js +1 -2
package/scripts/document-intake.js +49 -1
package/scripts/gemini-embedding-policy.js +1 -2
package/scripts/hosted-config.js +12 -0
package/scripts/plausible-domain-config.js +1 -3
package/scripts/reddit-browser-notification-watch.js +230 -0
package/scripts/seo-gsd.js +0 -239
package/scripts/vector-store.js +0 -44
package/scripts/workspace-evolver.js +2 -62
package/src/api/server.js +124 -335
package/adapters/policy-engine/ethicore-guardian-client.js +0 -68
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +0 -260
package/scripts/hook-stop-anti-claim.js +0 -227

package/public/compare/sigmashake.html ADDED Viewed

@@ -0,0 +1,256 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)</title>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<meta name="description" content="SigmaShake alternative? Honest comparison of ThumbGate, SigmaShake, APort, and agent-guardrails for gating AI coding agents. ThumbGate learns rules from your thumbs-down; SigmaShake ships a large ruleset hub and FORCE-substitution. Pick by what you need.">
+<meta name="keywords" content="SigmaShake alternative, AI agent guardrail comparison, PreToolUse gating, Claude Code guardrails, Cursor agent safety, ThumbGate vs SigmaShake, APort, agent-guardrails, AI agent firewall">
+<meta property="og:title" content="ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)">
+<meta property="og:description" content="Four ways to gate an AI coding agent before it acts. SigmaShake is the polished ruleset-hub product; ThumbGate learns the rule from your correction. Honest side-by-side.">
+<meta property="og:type" content="article">
+<meta property="og:url" content="https://thumbgate.ai/compare/sigmashake">
+<link rel="canonical" href="https://thumbgate.ai/compare/sigmashake">
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "TechArticle",
+  "headline": "ThumbGate vs SigmaShake — AI Agent Guardrail Comparison (2026)",
+  "description": "Side-by-side comparison of four pre-action gating tools for AI coding agents: ThumbGate, SigmaShake, APort, and roboticforce/agent-guardrails. Honest about where each is ahead.",
+  "author": { "@type": "Person", "name": "Igor Ganapolsky", "url": "https://github.com/IgorGanapolsky" },
+  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
+  "datePublished": "2026-06-09",
+  "dateModified": "2026-06-09",
+  "mainEntityOfPage": "https://thumbgate.ai/compare/sigmashake"
+}
+</script>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "FAQPage",
+  "mainEntity": [
+    {
+      "@type": "Question",
+      "name": "What's the difference between ThumbGate and SigmaShake?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "Both gate an AI coding agent's tool calls before they run, across Claude Code, Cursor, Codex and others. The core difference is where the rules come from. SigmaShake gives you a hub of ready-made signed community rulesets and a three-tier enforcement model (DENY / ASK / FORCE-substitute-a-safe-command). ThumbGate generates the rule from your own correction: one thumbs-down on a mistake auto-writes the rule that blocks that exact mistake from then on, synced across your machines and team. SigmaShake is the broader, more mature catalog; ThumbGate is the learning loop for the mistakes no catalog has a rule for yet."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "Is ThumbGate a good SigmaShake alternative?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "It depends what you're optimizing for. If you want a large library of ready-made signed rules and the ability to auto-substitute a safe command instead of just blocking, SigmaShake is genuinely strong and we won't pretend otherwise. If you keep hitting team-specific or codebase-specific mistakes that no generic ruleset covers, ThumbGate's edge is that it learns those rules from your thumbs-down instead of asking you to author or find them. Many teams could run both."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "Can ThumbGate substitute a safe command like SigmaShake's FORCE mode?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "Not today. SigmaShake's FORCE tier rewrites a dangerous command into a safe equivalent before it runs — a real capability ThumbGate doesn't yet match. ThumbGate's enforcement blocks the call and returns a structured error plus a path back to the spec; it does not auto-rewrite the command. If safe-command substitution is a hard requirement, SigmaShake is ahead here."
+      }
+    }
+  ]
+}
+</script>
+<link rel="stylesheet" href="/learn/learn.css">
+<style>
+  .matrix { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.9rem; }
+  .matrix th, .matrix td { padding: 10px 12px; text-align: left; border-bottom: 1px solid var(--border); vertical-align: top; }
+  .matrix th { background: var(--bg-card); font-weight: 600; }
+  .matrix td:first-child { font-weight: 600; }
+  .yes { color: var(--green); }
+  .no { color: var(--red); }
+  .partial { color: #fbbf24; }
+  .pair { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; margin: 1.5rem 0; }
+  .pair > div { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 1rem; }
+  @media (max-width: 700px) { .pair { grid-template-columns: 1fr; } .matrix { font-size: 0.82rem; } }
+</style>
+</head>
+<body>
+<nav>
+  <a href="/" class="brand"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate</span></a>
+  <a href="/pricing">Pricing</a>
+  <a href="/compare">Compare</a>
+  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
+</nav>
+<div class="container">
+  <div class="breadcrumb"><a href="/compare">Compare</a> / ThumbGate vs SigmaShake</div>
+  <h1>ThumbGate vs SigmaShake (and APort, and agent-guardrails)</h1>
+  <p style="color:var(--muted);">For developers and teams choosing a pre-action gate for their AI coding agents</p>
+  <div class="tldr"><strong>TL;DR:</strong> Four tools gate an AI coding agent before it acts. <strong>SigmaShake</strong> is the most polished: a hub of ready-made signed rulesets, three-tier DENY/ASK/FORCE enforcement (including auto-substituting a safe command), a desktop app, and a tamper-evident audit log. <strong>ThumbGate</strong>'s one differentiator is the learning loop — a single thumbs-down auto-writes the rule that blocks that exact mistake forever, synced across machines and team, instead of asking you to find or author one. <strong>APort</strong> is the org-identity layer (agent "passports," central policy). <strong>agent-guardrails</strong> is a free MIT starting point. We're honest below about where SigmaShake is ahead.</div>
+  <h2>The shared category</h2>
+  <p>All four start from the same fact: prompt-level rules in <code>CLAUDE.md</code> or <code>.cursorrules</code> are suggestions the model can ignore under context pressure. To actually stop a force-push to main or a <code>DROP TABLE</code>, you need a gate that fires <em>before</em> the tool call executes — not a reviewer after the PR, not a git revert after the damage. ThumbGate, SigmaShake, and agent-guardrails all hook the PreToolUse boundary. APort sits one layer up, as an identity/authorization layer for organizations.</p>
+  <p>This page is not a hit piece. SigmaShake in particular is well-built software with a real lead on catalog breadth and enforcement modes. We'll tell you where it wins and where ThumbGate's learning loop is the better fit.</p>
+  <h2>Feature matrix</h2>
+  <table class="matrix">
+    <thead>
+      <tr>
+        <th style="width:22%;">Capability</th>
+        <th style="width:21%;">ThumbGate</th>
+        <th style="width:21%;">SigmaShake</th>
+        <th style="width:18%;">APort</th>
+        <th style="width:18%;">agent-guardrails</th>
+      </tr>
+    </thead>
+    <tbody>
+      <tr>
+        <td>Pre-action gating (blocks before execution)</td>
+        <td class="yes">Yes — PreToolUse hooks</td>
+        <td class="yes">Yes — PreToolUse</td>
+        <td class="partial">Authz layer, not a tool-call gate</td>
+        <td class="yes">Yes — PreToolUse hooks</td>
+      </tr>
+      <tr>
+        <td>Learns rules from your corrections</td>
+        <td class="yes">Yes — one thumbs-down auto-writes the rule</td>
+        <td class="no">No — rules installed or authored</td>
+        <td class="no">No — policy authored</td>
+        <td class="no">No — hand-written deny rules</td>
+      </tr>
+      <tr>
+        <td>Pre-built ruleset library</td>
+        <td class="partial">Domain skill packs (Stripe, Railway, DB migrations)</td>
+        <td class="yes">Large signed community ruleset hub</td>
+        <td class="no">N/A</td>
+        <td class="partial">Built-in deny rules (terraform/db/k8s/cloud/git)</td>
+      </tr>
+      <tr>
+        <td>Enforcement modes</td>
+        <td class="partial">Block + structured error (no auto-substitute)</td>
+        <td class="yes">DENY / ASK / FORCE (safe-command substitute)</td>
+        <td class="partial">Allow/deny by scoped permission</td>
+        <td class="partial">Deny / ask</td>
+      </tr>
+      <tr>
+        <td>Multi-agent support</td>
+        <td class="yes">Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode</td>
+        <td class="yes">Claude Code, Cursor, Codex, Copilot, Gemini</td>
+        <td class="yes">Claude, LangChain, CrewAI, Cursor</td>
+        <td class="partial">Claude Code (settings.json hooks)</td>
+      </tr>
+      <tr>
+        <td>Team / cross-machine sync of learned rules</td>
+        <td class="yes">Yes — hosted sync (Pro)</td>
+        <td class="partial">Local-first; optional cloud</td>
+        <td class="yes">Yes — central org policy</td>
+        <td class="no">No</td>
+      </tr>
+      <tr>
+        <td>Org identity / agent permissions</td>
+        <td class="no">Not the focus</td>
+        <td class="partial">Local rulesets, not identity</td>
+        <td class="yes">Yes — agent "passport" + scoped perms</td>
+        <td class="no">No</td>
+      </tr>
+      <tr>
+        <td>License / source</td>
+        <td class="partial">MIT core + hosted commercial layer</td>
+        <td class="no">Commercial, closed-source</td>
+        <td class="no">Commercial</td>
+        <td class="yes">Free, MIT</td>
+      </tr>
+      <tr>
+        <td>Pricing</td>
+        <td>Free tier; Pro $19/mo or $149/yr</td>
+        <td>Commercial paid tier (see their site)</td>
+        <td>No public pricing (design-partner)</td>
+        <td>Free</td>
+      </tr>
+      <tr>
+        <td>Maturity</td>
+        <td class="partial">Newer; learning loop is the bet</td>
+        <td class="yes">Polished, broad catalog</td>
+        <td class="partial">Early / design-partner stage</td>
+        <td class="partial">Minimal adoption</td>
+      </tr>
+    </tbody>
+  </table>
+  <h2>Where SigmaShake is genuinely ahead</h2>
+  <p>Saying this plainly builds more trust than pretending otherwise:</p>
+  <ul>
+    <li><strong>FORCE-substitution.</strong> SigmaShake can rewrite a dangerous command into a safe equivalent before it runs. ThumbGate blocks and explains; it doesn't auto-rewrite. If you want the gate to fix the command rather than stop it, SigmaShake wins.</li>
+    <li><strong>A large signed ruleset hub out of the box.</strong> For common, well-known footguns, SigmaShake means you're protected on install with zero authoring. ThumbGate ships a handful of domain skill packs and expects to <em>learn</em> the rest from your corrections — great for novel mistakes, slower for day-one coverage of the obvious ones.</li>
+    <li><strong>Maturity and polish.</strong> Desktop app, tamper-evident audit log, low-latency daemon, broad agent coverage including Copilot. SigmaShake is further along as a product.</li>
+  </ul>
+  <h2>Where ThumbGate is the better fit</h2>
+  <ul>
+    <li><strong>The mistakes no catalog has a rule for.</strong> Every team has codebase-specific footguns ("never edit the generated client," "this repo deploys from <code>release</code> not <code>main</code>"). No community hub ships those. ThumbGate writes the rule the first time you thumbs-down the mistake.</li>
+    <li><strong>Zero rule-authoring overhead.</strong> SigmaShake and agent-guardrails both ask you to install or write rules. ThumbGate's primary input is a thumbs-down — the correction <em>is</em> the rule authoring.</li>
+    <li><strong>MIT core.</strong> The CLI and hook layer are MIT; the hosted sync is the paid part. SigmaShake and APort are closed-source.</li>
+    <li><strong>Learned rules sync across the team.</strong> One engineer's thumbs-down becomes everyone's prevention rule.</li>
+  </ul>
+  <h2>And APort and agent-guardrails?</h2>
+  <p><strong>APort</strong> isn't really a head-to-head. It's an organizational authorization layer — agent "passports," scoped permissions, central policy and audit across Claude, LangChain, CrewAI, and Cursor. It positions as an <em>additional</em> authz layer for orgs and is at design-partner stage. If your problem is "which agents in my org are allowed to do what," APort solves a different problem than a tool-call gate. You could run APort for identity and ThumbGate for behavior.</p>
+  <p><strong>roboticforce/agent-guardrails</strong> is a free, MIT set of hand-written deny rules plus PreToolUse hooks for terraform/db/k8s/cloud/git. A fine zero-cost starting point. No dashboard, audit, team management, or learning — if you outgrow a static deny list, that's the moment to look at ThumbGate or SigmaShake.</p>
+  <h2>When to pick which</h2>
+  <div class="pair">
+    <div>
+      <h3 style="margin-top:0;">Pick <strong>SigmaShake</strong> if</h3>
+      <ul>
+        <li>You want day-one coverage from a large library of ready-made rules</li>
+        <li>Safe-command substitution (FORCE) is a requirement, not a nice-to-have</li>
+        <li>You want a mature desktop app and a tamper-evident audit log now</li>
+        <li>Closed-source commercial software is acceptable</li>
+      </ul>
+    </div>
+    <div>
+      <h3 style="margin-top:0;">Pick <strong>ThumbGate</strong> if</h3>
+      <ul>
+        <li>Your pain is repeat, team-specific mistakes no generic ruleset covers</li>
+        <li>You'd rather thumbs-down a mistake than hunt for or author a rule</li>
+        <li>You want learned rules to sync across machines and teammates</li>
+        <li>You want an MIT-licensed core you can read and embed</li>
+      </ul>
+    </div>
+  </div>
+  <div class="callout callout-green">
+    <strong>Honest framing:</strong> SigmaShake is the broader, more polished catalog-and-enforcement product today. ThumbGate's bet is narrower and sharper — the gate that learns the rule from your correction. They overlap, but optimize for different things, and running both is reasonable.
+  </div>
+  <h2>Adoption in two minutes (ThumbGate)</h2>
+  <ol>
+    <li><strong>Install:</strong> <code>npx thumbgate init</code> — detects your agent, wires PreToolUse hooks, no workflow change.</li>
+    <li><strong>Thumbs-down when the agent is wrong:</strong> a correction with context becomes a structured failure record.</li>
+    <li><strong>The rule writes itself:</strong> ThumbGate auto-promotes a prevention rule from the correction.</li>
+    <li><strong>Next time, it's blocked:</strong> the PreToolUse hook intercepts the call before it runs and points the agent back to the spec.</li>
+  </ol>
+  <div class="cta-box">
+    <h2 style="color:var(--text);font-size:1.3rem;margin:0 0 8px;">Tired of correcting the same mistake twice?</h2>
+    <p>SigmaShake gives you a catalog. ThumbGate writes the rule from your thumbs-down. Free tier, MIT core, two-minute install.</p>
+    <div class="cta-install">$ npx thumbgate init</div>
+  </div>
+  <div class="related">
+    <h3>Related comparisons</h3>
+    <a href="/compare/claude-code-hooks">ThumbGate vs claude-code-hooks &rarr;</a>
+    <a href="/compare">All comparisons &rarr;</a>
+  </div>
+</div>
+<div class="sticky-cta">
+  <span style="color:var(--muted)">Try it now:</span>
+  <code>npx thumbgate init</code>
+  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub &rarr;</a>
+</div>
+</body>
+</html>

package/public/compare/speclock.html ADDED Viewed

@@ -0,0 +1,342 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>ThumbGate vs SpecLock | Thumbs Feedback vs Manual Specs</title>
+  <meta name="description" content="SpecLock starts from manually written constraints. ThumbGate starts from thumbs-up/down feedback and turns it into pre-action checks that block repeated mist..." />
+  <meta property="og:title" content="ThumbGate vs SpecLock | Thumbs Feedback vs Manual Specs" />
+  <meta property="og:description" content="SpecLock starts from manually written constraints. ThumbGate starts from thumbs-up/down feedback and turns it into pre-action checks that block repeated mist..." />
+  <meta property="og:type" content="article" />
+  <meta property="og:url" content="https://thumbgate.ai/compare/speclock" />
+  <link rel="canonical" href="https://thumbgate.ai/compare/speclock" />
+  <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
+  <link rel="icon" type="image/svg+xml" href="/thumbgate-icon.png" />
+  <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
+  <meta property="og:image" content="/og.png" />
+  <style>
+    :root {
+      --bg: #0a0a0b;
+      --bg-raised: #111113;
+      --bg-card: #161618;
+      --line: #222225;
+      --text: #e8e8ec;
+      --muted: #8b8b96;
+      --cyan: #22d3ee;
+      --green: #4ade80;
+      --red: #f87171;
+    }
+    * { box-sizing: border-box; }
+    body {
+      margin: 0;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: var(--bg);
+      color: var(--text);
+      line-height: 1.65;
+    }
+    a { color: var(--cyan); text-decoration: none; }
+    a:hover { text-decoration: underline; }
+    .container { max-width: 980px; margin: 0 auto; padding: 0 24px; }
+    .topbar {
+      position: sticky;
+      top: 0;
+      z-index: 20;
+      backdrop-filter: blur(12px);
+      background: rgba(10, 10, 11, 0.88);
+      border-bottom: 1px solid var(--line);
+    }
+    .topbar .container {
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      padding-top: 14px;
+      padding-bottom: 14px;
+    }
+    .brand {
+      font-weight: 700;
+      color: var(--text);
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      text-decoration: none;
+    }
+    .brand .logo-mark { width: 28px; height: 28px; display: block; }
+    .hero { padding: 72px 0 32px; }
+    .eyebrow {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      padding: 6px 12px;
+      border-radius: 999px;
+      border: 1px solid rgba(34, 211, 238, 0.22);
+      background: rgba(34, 211, 238, 0.1);
+      color: var(--cyan);
+      text-transform: uppercase;
+      letter-spacing: 0.08em;
+      font-size: 12px;
+      font-weight: 700;
+    }
+    h1 {
+      font-size: clamp(34px, 5vw, 56px);
+      line-height: 1.06;
+      letter-spacing: -0.04em;
+      margin: 16px 0;
+      max-width: 760px;
+    }
+    .hero p {
+      max-width: 720px;
+      color: var(--muted);
+      font-size: 18px;
+    }
+    .signal-row {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 12px;
+      margin: 28px 0 0;
+    }
+    .signal-pill {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      padding: 10px 14px;
+      border-radius: 999px;
+      border: 1px solid var(--line);
+      background: var(--bg-raised);
+      font-weight: 600;
+      font-size: 14px;
+    }
+    .signal-pill.up {
+      border-color: rgba(74, 222, 128, 0.28);
+      color: #b8f7c8;
+      background: rgba(74, 222, 128, 0.1);
+    }
+    .signal-pill.down {
+      border-color: rgba(248, 113, 113, 0.28);
+      color: #ffc0c0;
+      background: rgba(248, 113, 113, 0.1);
+    }
+    .grid {
+      display: grid;
+      grid-template-columns: minmax(0, 2fr) minmax(280px, 1fr);
+      gap: 24px;
+      padding-bottom: 72px;
+    }
+    .card, .detail-section, .sidebar-card {
+      background: var(--bg-card);
+      border: 1px solid var(--line);
+      border-radius: 16px;
+    }
+    .card { padding: 24px; }
+    .detail-section { padding: 24px; margin-bottom: 18px; }
+    .detail-section h2 { margin: 0 0 12px; font-size: 24px; letter-spacing: -0.03em; }
+    .detail-section p { color: var(--muted); }
+    .detail-section ul, .card ul { padding-left: 18px; color: var(--muted); }
+    .card h2 { margin-top: 0; }
+    .sidebar {
+      display: flex;
+      flex-direction: column;
+      gap: 18px;
+    }
+    .sidebar-card {
+      padding: 20px;
+    }
+    /* Only the first sidebar card sticks. Stacking multiple stickies at the
+       same top offset makes them overlap each other on scroll. The related-
+       pages card flows normally below. */
+    .sidebar-card:first-child {
+      position: sticky;
+      top: 84px;
+      max-height: calc(100vh - 104px);
+      overflow-y: auto;
+      -webkit-overflow-scrolling: touch;
+    }
+    .proof-links {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 12px;
+      margin-top: 16px;
+    }
+    .cta-button {
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+      margin-top: 18px;
+      padding: 12px 16px;
+      border-radius: 10px;
+      background: var(--cyan);
+      color: #071116;
+      font-weight: 700;
+      text-decoration: none;
+    }
+    .faq-item {
+      border-top: 1px solid var(--line);
+      padding: 14px 0;
+    }
+    .faq-item summary {
+      cursor: pointer;
+      font-weight: 600;
+    }
+    .faq-item p {
+      color: var(--muted);
+    }
+    .related-card {
+      display: block;
+      padding: 14px;
+      border-radius: 12px;
+      border: 1px solid var(--line);
+      background: var(--bg-raised);
+      margin-top: 12px;
+      color: var(--text);
+    }
+    .related-label {
+      display: block;
+      color: var(--muted);
+      font-size: 12px;
+      text-transform: uppercase;
+      letter-spacing: 0.08em;
+      margin-bottom: 4px;
+    }
+    @media (max-width: 860px) {
+      .grid {
+        grid-template-columns: 1fr;
+      }
+      .sidebar-card:first-child {
+        position: static;
+        max-height: none;
+        overflow: visible;
+      }
+    }
+  </style>
+  <script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "TechArticle",
+  "headline": "ThumbGate vs SpecLock",
+  "description": "SpecLock starts from manually written constraints. ThumbGate starts from thumbs-up/down feedback and turns it into pre-action checks that block repeated mist...",
+  "about": [
+    "thumbgate vs speclock",
+    "thumbgate vs mem0",
+    "thumbgate vs fallow",
+    "roo code alternative cline"
+  ],
+  "url": "https://thumbgate.ai/compare/speclock",
+  "publisher": {
+    "@type": "Organization",
+    "name": "ThumbGate",
+    "url": "https://thumbgate.ai"
+  },
+  "mainEntityOfPage": "https://thumbgate.ai/compare/speclock"
+}
+  </script>
+  <script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "FAQPage",
+  "mainEntity": [
+    {
+      "@type": "Question",
+      "name": "Is ThumbGate trying to replace specs?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "No. ThumbGate complements specs by capturing thumbs-up/down feedback from live agent behavior and enforcing the learned rules as pre-action checks."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "What does ThumbGate do that SpecLock does not?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "ThumbGate turns explicit feedback into searchable memory, auto-generated prevention rules, and runtime checks that block repeated mistakes before the next tool call executes."
+      }
+    }
+  ]
+}
+  </script>
+</head>
+<body>
+  <div class="topbar">
+    <div class="container">
+      <a class="brand" href="/"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate</span></a>
+      <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Verification evidence</a>
+    </div>
+  </div>
+  <main class="container">
+    <section class="hero">
+      <div class="eyebrow">comparison | thumbgate vs speclock</div>
+      <h1>ThumbGate vs SpecLock</h1>
+      <p>SpecLock starts from manually written constraints. ThumbGate starts from thumbs-up/down feedback and turns it into pre-action checks that block repeated mistakes.</p>
+      <div class="signal-row">
+        <div class="signal-pill up">👍 Thumbs up reinforces good behavior</div>
+        <div class="signal-pill down">👎 Thumbs down blocks repeated mistakes</div>
+      </div>
+    </section>
+    <section class="grid">
+      <div>
+        <div class="card">
+          <h2>Why this page exists</h2>
+          <ul><li>ThumbGate learns from thumbs-up and thumbs-down feedback without requiring a separate spec-writing workflow.</li><li>SpecLock is strongest when a team already has strong specifications and wants enforcement tied to those documents.</li><li>ThumbGate is strongest when the pain is repeated agent mistakes across Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode.</li></ul>
+        </div>
+      <section class="detail-section">
+        <h2>The product difference in one sentence</h2>
+        <p>SpecLock helps a team codify rules before the work begins. ThumbGate helps a team convert real thumbs-up/down feedback into live pre-action checks after the work reveals what actually breaks.</p><p>That means ThumbGate is better for fast-moving agent workflows where the problem is not writing more specs, but preventing the same mistake from happening again tomorrow.</p>
+      </section>
+      <section class="detail-section">
+        <h2>Choose ThumbGate when</h2>
+        <ul><li>Your agent already repeats known mistakes and you need the block to happen before tool execution.</li><li>You want one feedback loop that supports both reinforcement from thumbs up and prevention from thumbs down.</li><li>You need proof assets, automation reports, and compatibility across multiple coding agents.</li></ul>
+      </section>
+      <section class="detail-section">
+        <h2>Choose SpecLock when</h2>
+        <ul><li>Your team already maintains strong PRDs or system specs and wants the model constrained against those artifacts.</li><li>Your primary problem is uncontrolled file edits, not a missing feedback-to-enforcement loop.</li><li>You are willing to invest in manual constraint authoring as part of the workflow.</li></ul>
+      </section>
+        <div class="detail-section">
+          <h2>FAQ</h2>
+      <details class="faq-item">
+        <summary>Is ThumbGate trying to replace specs?</summary>
+        <p>No. ThumbGate complements specs by capturing thumbs-up/down feedback from live agent behavior and enforcing the learned rules as pre-action checks.</p>
+      </details>
+      <details class="faq-item">
+        <summary>What does ThumbGate do that SpecLock does not?</summary>
+        <p>ThumbGate turns explicit feedback into searchable memory, auto-generated prevention rules, and runtime checks that block repeated mistakes before the next tool call executes.</p>
+      </details>
+        </div>
+      </div>
+      <aside class="sidebar">
+        <div class="sidebar-card">
+          <h2>GSD execution brief</h2>
+          <p>This page was prioritized because it captures high-intent demand around thumbgate vs speclock and feeds directly into ThumbGate's proof-led conversion path.</p>
+          <p><strong>Opportunity score:</strong> 100</p>
+          <p><strong>Primary persona:</strong> tool-evaluator</p>
+          <p><strong>Keyword cluster:</strong> thumbgate vs speclock, thumbgate vs mem0, thumbgate vs fallow, roo code alternative cline</p>
+          <p><strong>Pricing:</strong> Pro $19/mo or $149/yr. Team $49/seat/mo.</p>
+          <div class="proof-links"><a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Verification evidence</a><a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json" target="_blank" rel="noopener">Automation proof</a><a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub repository</a></div>
+          <a class="cta-button" href="/checkout/pro?utm_source=website&amp;utm_medium=seo_page&amp;utm_campaign=compare_speclock&amp;cta_placement=seo_brief&amp;plan_id=pro" target="_blank" rel="noopener">Go Pro — $19/mo</a>
+        </div>
+        <div class="sidebar-card">
+          <h2>Related pages</h2>
+        <a class="related-card" href="/compare/mem0">
+          <span class="related-label">Related page</span>
+          <strong>ThumbGate vs Mem0</strong>
+        </a>
+        <a class="related-card" href="/guides/pre-action-checks">
+          <span class="related-label">Related page</span>
+          <strong>What Are Pre-Action Checks?</strong>
+        </a>
+        </div>
+      </aside>
+    </section>
+  </main>
+</body>
+</html>

package/public/compare.html CHANGED Viewed

@@ -272,6 +272,7 @@
 <ul class="compare-index">
   <li><a href="/compare/sigmashake">ThumbGate vs SigmaShake</a> — learns the rule from your thumbs-down vs a hand-picked ruleset hub</li>
   <li><a href="/compare/claude-code-hooks">ThumbGate vs claude-code-hooks</a> — hosted sync &amp; learning on top of local shell-script hooks</li>
+  <li><a href="/compare/databricks-unity-ai-gateway">ThumbGate vs Databricks Unity AI Gateway</a> — enterprise gateway governance pairs with local pre-action gates</li>
   <li><a href="/compare/arcjet">ThumbGate vs Arcjet</a> — agent-outbound gate pairs with an app-inbound firewall</li>
   <li><a href="/compare/bumblebee">ThumbGate vs Bumblebee</a> — runtime enforcement pairs with static inventory</li>
   <li><a href="/compare/anthropic-containment">ThumbGate vs Anthropic's Claude Containment</a> — an IDE-agent extension of Anthropic's published architecture</li>
@@ -285,6 +286,7 @@
   <li><a href="/compare/ai-experience-orchestration">ThumbGate vs AI Experience Orchestration</a> — orchestration vs execution enforcement</li>
   <li><a href="/compare/agentix-labs">ThumbGate vs Agentix Labs</a> — productized enforcement vs custom AI-agent services</li>
   <li><a href="/compare/adopt-ai">ThumbGate vs Adopt AI</a> — pre-execution firewall vs evals-first gating for production blast radius</li>
+  <li><a href="/compare/arcade">ThumbGate vs Arcade</a> — coding-agent guardrails vs enterprise API auth delegation</li>
 </ul>
 <h2>How It Works</h2>