thumbgate 1.28.3 → 1.29.1

package/public/agent-manager.html

@@ -46,7 +46,7 @@
       "name": "How does ThumbGate help the Agent Manager?",
       "acceptedAnswer": {
         "@type": "Answer",
-        "text": "ThumbGate is the pre-action enforcement layer under the role. It runs PreToolUse hooks, distills repeated thumbs-down feedback into CLAUDE.md rules, and shows the rule plus evidence on each block. Pro keeps personal recall, exports, dashboard proof, and adapters maintained; Enterprise adds the org-wide rule library and hosted dashboard."
+        "text": "ThumbGate is the pre-action enforcement layer under the role. It runs PreToolUse hooks, distills repeated thumbs-down feedback into CLAUDE.md rules, and shows the rule plus evidence on each block. Pro keeps personal recall, exports, personal dashboard proof, and adapters maintained. Enterprise service work is qualified after intake; an org-wide hosted rule library and hosted dashboard are not generally available."
       }
     },
     {
@@ -54,7 +54,7 @@
       "name": "Is ThumbGate free for the Agent Manager to start?",
       "acceptedAnswer": {
         "@type": "Answer",
-        "text": "Yes. npx thumbgate init in one repo is free and MIT licensed, and gates work locally without a hosted account. Pro adds personal recall, dashboard proof, DPO/HuggingFace export, and managed adapters. Enterprise adds the hosted dashboard, org-wide rule library, and rollout support."
+        "text": "Yes. npx thumbgate init in one repo is free and MIT licensed, and gates work locally without a hosted account. Pro adds personal recall, personal dashboard proof, DPO/HuggingFace export, and managed adapters. Enterprise service work can add scoped rollout support after intake; a hosted org dashboard and org-wide hosted rule library are not generally available."
       }
     },
     {
@@ -98,7 +98,7 @@
   <a href="/" class="brand">ThumbGate</a>
   <a href="/guide">Guide</a>
   <a href="/dashboard">Dashboard demo</a>
-  <a href="/#workflow-sprint-intake">Workflow Hardening Sprint</a>
+  <a href="/diagnostic">Managed workflow gate</a>
   <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
 </nav>
 <div class="container">
@@ -112,7 +112,7 @@
     <tbody>
       <tr>
         <td><strong>CLAUDE.md hierarchy</strong><br>Keeping the policy that the model reads on every session current and consistent across repos.</td>
-        <td>Prevention rules distilled from repeated real <code>👎</code> feedback and written into <code>CLAUDE.md</code> by <code>scripts/feedback-to-rules.js</code>. Enterprise adds the hosted org-wide rule library.</td>
+        <td>Prevention rules distilled from repeated real <code>👎</code> feedback and written into <code>CLAUDE.md</code> by <code>scripts/feedback-to-rules.js</code>. A hosted org-wide rule library is not generally available.</td>
       </tr>
       <tr>
         <td><strong>Plugin marketplace</strong><br>Deciding which Claude Code / Cursor / Codex plugins are blessed and which are not.</td>
@@ -128,7 +128,7 @@
       </tr>
       <tr>
         <td><strong>Keep them current</strong><br>When Claude Code ships a breaking change to hooks or to the plugin API, your rollout cannot wait a quarter.</td>
-        <td>24×7 ops on the adapter matrix. SonarCloud regressions fixed in &lt;24h. Pro covers personal adapter maintenance; Enterprise is the hosted operator.</td>
+        <td>Managed adapter maintenance for the supported personal runtime surfaces. Enterprise service work is fixed in a signed scope; it is not an unbounded hosted operator or 24×7 incident-response promise.</td>
       </tr>
     </tbody>
   </table>
@@ -145,11 +145,11 @@
     </div>
     <div class="card">
       <h3>Phase 2 — Rollout lands</h3>
-      <p>Infrastructure is ready; the first wave finds it productive. This is where the Agent Manager becomes a named role. ThumbGate Enterprise's hosted dashboard, org-wide rule library, and DPO export keep CLAUDE.md and permissions consistent across repos.</p>
+      <p>This is where the Agent Manager becomes a named role. The $499 Enterprise Workflow Gate scopes one repeated failure into one configured local gate, its regression test, and rollout and rollback proof. A hosted dashboard and org-wide hosted rule library are not generally available.</p>
     </div>
     <div class="card">
       <h3>Phase 3 — Adoption spreads</h3>
-      <p>The team becomes the harness. The Agent Manager stops being a bottleneck because the policy enforces itself at the tool-call boundary. ThumbGate's Workflow Hardening Sprint locks down the patterns that earned trust in phase two so the next 10x of engineers do not regress them.</p>
+      <p>The team becomes the harness. The Agent Manager stops being a bottleneck because the policy enforces itself at the tool-call boundary. The configured gate and regression test keep the proven workflow from drifting as adoption spreads.</p>
     </div>
   </div>
 
@@ -157,14 +157,13 @@
   <ol>
     <li><strong>Install free.</strong> <code>npx thumbgate init</code> in one repo. Captures thumbs-up/down feedback locally; auto-promotes repeated failures into prevention rules.</li>
     <li><strong>Wire one Pre-Action Check.</strong> Pick the most-repeated agent mistake your org has felt this month. Promote that one to a rule. Watch the next attempt get flagged and logged at the tool-call boundary (and hard-blocked under strict enforcement), with the rule that fired in the agent's reasoning trace.</li>
-    <li><strong>Run the Workflow Hardening Sprint.</strong> When phase 2 hits — when you need shared rules, org dashboard visibility, and adapter coverage you do not have to maintain yourself — the sprint is the path from local proof to managed rollout.</li>
+    <li><strong>Buy the $499 Enterprise Workflow Gate.</strong> Bring one repeated failure. Leave with one configured local gate, its regression test, and written rollout and rollback proof within two business days after access and the agreed workflow materials are available.</li>
   </ol>
 
   <div class="card">
-    <p><strong>Anthropic named the role. ThumbGate is the runtime that role needs.</strong> The free CLI is real, MIT-licensed, and the gates work locally without a hosted account. The paid tier is what we operate so the Agent Manager does not have to.</p>
+    <p><strong>Anthropic named the role. ThumbGate is the runtime that role needs.</strong> The free CLI is real, MIT-licensed, and works locally. The $499 Enterprise Workflow Gate is the single managed entry offer for one supported workflow.</p>
     <p>
-      <a href="/#workflow-sprint-intake" class="cta">Start the Workflow Hardening Sprint</a>
-      <a href="/checkout/pro?utm_source=website&utm_medium=agent_manager_page&utm_campaign=pro_upgrade&cta_id=agent_manager_pro_checkout&cta_placement=agent_manager_page&plan_id=pro" class="secondary">Or start Pro at $19/mo →</a>
+      <a href="/diagnostic" class="cta">Get the managed workflow gate</a>
     </p>
   </div>
 

package/public/agents-cost-savings.html

@@ -131,9 +131,9 @@ npx thumbgate cost        # see what the gates were worth</code></pre>
   <div class="quote">"The category isn't 'FinOps for AI' — it's 'gates that stop the spend so FinOps has less to report on.' One sits behind the other."</div>
 
   <div class="card">
-    <p><strong>The free CLI is real. Pro adds the personal dashboard, recall, exports, and managed adapters. Enterprise is the hosted dashboard, org-wide rule library, and the operator the Agent Manager doesn't have to be themselves.</strong></p>
+    <p><strong>The free CLI is real. Pro adds the personal local dashboard, recall, exports, and managed adapters. Enterprise service work is qualified and signed after intake around local workflow controls; a hosted org dashboard and org-wide hosted rule library are not generally available.</strong></p>
     <p>
-      <a href="/#workflow-sprint-intake?utm_source=website&amp;utm_medium=agents_cost_savings_page&amp;utm_campaign=finops_sprint&amp;cta_id=agents_cost_savings_sprint_intake&amp;cta_placement=agents_cost_savings_page" class="cta">Start the Workflow Hardening Sprint</a>
+      <a href="/diagnostic?utm_source=website&amp;utm_medium=agents_cost_savings_page&amp;utm_campaign=managed_workflow_gate&amp;cta_id=agents_cost_savings_managed_gate&amp;cta_placement=agents_cost_savings_page" class="cta">Get the managed workflow gate</a>
       <a href="/checkout/pro?utm_source=website&amp;utm_medium=agents_cost_savings_page&amp;utm_campaign=pro_upgrade&amp;cta_id=agents_cost_savings_pro_checkout&amp;cta_placement=agents_cost_savings_page&amp;plan_id=pro" class="secondary">Or start Pro at $19/mo →</a>
     </p>
   </div>

package/public/assets/brand/thumbgate-logo-transparent.svg

@@ -1,6 +1,6 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 360" role="img" aria-labelledby="tg-logo-transparent-title tg-logo-transparent-desc">
   <title id="tg-logo-transparent-title">ThumbGate</title>
-  <desc id="tg-logo-transparent-desc">Transparent ThumbGate sponsor logo with premium shield and thumbs-up mark and wordmark for dark or colored event backgrounds.</desc>
+  <desc id="tg-logo-transparent-desc">Transparent ThumbGate sponsor logo with the canonical TG gate monogram and wordmark for dark or colored event backgrounds.</desc>
   <defs>
     <linearGradient id="tg-logo-transparent-frame" x1="64" y1="72" x2="288" y2="296" gradientUnits="userSpaceOnUse">
       <stop offset="0" stop-color="#8cf5d1"/>
@@ -12,16 +12,11 @@
   </defs>
   <g filter="url(#tg-logo-transparent-glow)">
     <rect x="66" y="66" width="228" height="228" rx="54" fill="#061015" fill-opacity="0.78"/>
-    <g transform="translate(66, 66) scale(3.5625)">
-      <!-- Outer Shield / Gate -->
-      <path d="M32 9 C20 13 15 20 15 33 C15 45 26 53 32 56 C38 53 49 45 49 33 C49 20 44 13 32 9 Z" 
-            fill="#0b1820" stroke="url(#tg-logo-transparent-frame)" stroke-width="3.5" stroke-linejoin="round"/>
-            
-      <!-- Proportional Thumbs Up -->
-      <g transform="translate(19, 17) scale(1.1)" stroke="#8cf5d1" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" fill="none">
-        <path d="M14 9V5a3 3 0 0 0-3-3l-4 9v11h11.28a2 2 0 0 0 2-1.7l1.38-9a2 2 0 0 0-2-2.3zM7 22H4a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2h3"/>
-      </g>
-    </g>
+    <rect x="91" y="91" width="178" height="178" rx="44" fill="#0b1820" stroke="url(#tg-logo-transparent-frame)" stroke-width="10"/>
+    <path d="M120 142V208c0 25 18 43 43 43h34c25 0 43-18 43-43v-66c0-25-18-43-43-43h-34c-25 0-43 18-43 43Z"
+          fill="none" stroke="#8cf5d1" stroke-width="12" stroke-linecap="round" stroke-linejoin="round"/>
+    <text x="133" y="207" fill="#f4fdff" font-family="Inter, -apple-system, BlinkMacSystemFont, Segoe UI, Arial, sans-serif" font-size="67" font-weight="900">TG</text>
+    <rect x="120" y="240" width="120" height="12" rx="6" fill="#22d3ee"/>
   </g>
   <text x="340" y="178" fill="#f4fdff" font-family="Inter, -apple-system, BlinkMacSystemFont, Segoe UI, Arial, sans-serif" font-size="82" font-weight="900">ThumbGate</text>
   <text x="344" y="235" fill="#9ca3af" font-family="Inter, -apple-system, BlinkMacSystemFont, Segoe UI, Arial, sans-serif" font-size="30" font-weight="600">Pre-Action Gates for AI coding agents</text>

package/public/assets/brand/thumbgate-mark-inline-v3.svg

@@ -1,18 +1,19 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-labelledby="tg-inline-title tg-inline-desc">
   <title id="tg-inline-title">ThumbGate</title>
-  <desc id="tg-inline-desc">ThumbGate premium shield and thumbs-up mark for inline use in site headers.</desc>
+  <desc id="tg-inline-desc">ThumbGate TG gate monogram mark for inline site headers. Matches the Stripe product icon family — inset frame, arched gate, bold TG, threshold bar. Transparent backdrop for dark headers.</desc>
   <defs>
-    <linearGradient id="tg-inline-frame" x1="8" y1="8" x2="56" y2="56" gradientUnits="userSpaceOnUse">
+    <linearGradient id="tg-inline-ring" x1="12" y1="12" x2="52" y2="52" gradientUnits="userSpaceOnUse">
       <stop offset="0" stop-color="#8cf5d1"/>
       <stop offset="1" stop-color="#22d3ee"/>
     </linearGradient>
   </defs>
-  <!-- Outer Shield / Gate (Transparent background fill, thicker gradient frame) -->
-  <path d="M32 9 C20 13 15 20 15 33 C15 45 26 53 32 56 C38 53 49 45 49 33 C49 20 44 13 32 9 Z" 
-        fill="none" stroke="url(#tg-inline-frame)" stroke-width="4.5" stroke-linejoin="round"/>
-        
-  <!-- Proportional Thumbs Up in Center (Enlarged and Bolder for high-contrast header visibility) -->
-  <g transform="translate(17, 16) scale(1.25)" stroke="#8cf5d1" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" fill="none">
-    <path d="M14 9V5a3 3 0 0 0-3-3l-4 9v11h11.28a2 2 0 0 0 2-1.7l1.38-9a2 2 0 0 0-2-2.3zM7 22H4a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2h3"/>
-  </g>
+  <!-- Transparent backdrop for dark headers; no full-canvas opaque tile -->
+  <!-- Outer gate frame (stroke only — no fill so header stays transparent) -->
+  <rect x="8" y="8" width="48" height="48" rx="12" fill="none" stroke="url(#tg-inline-ring)" stroke-width="2.5"/>
+  <!-- Arched gate opening (same geometry family as Stripe / app-icon mark) -->
+  <path d="M18 44V24c0-4.5 3.6-8.1 8.1-8.1h11.8c4.5 0 8.1 3.6 8.1 8.1v20" fill="none" stroke="#8cf5d1" stroke-width="3.5" stroke-linecap="round" stroke-linejoin="round"/>
+  <!-- TG monogram -->
+  <text x="32" y="38" text-anchor="middle" font-family="Inter, -apple-system, BlinkMacSystemFont, Segoe UI, Arial, sans-serif" font-size="16" font-weight="900" fill="#e7fbff" letter-spacing="-1">TG</text>
+  <!-- Gate threshold bar -->
+  <rect x="17" y="42" width="30" height="3.5" rx="1.75" fill="#22d3ee"/>
 </svg>

package/public/assets/brand/thumbgate-mark.svg

@@ -1,21 +1,20 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-labelledby="title desc">
   <title id="title">ThumbGate mark</title>
-  <desc id="desc">A crisp shield and thumbs-up mark for ThumbGate.</desc>
+  <desc id="desc">ThumbGate TG gate monogram app icon. Matches the Stripe product image family used on Checkout — dark tile, inset frame, arched gate, bold TG, threshold bar.</desc>
   <defs>
     <linearGradient id="tg-frame" x1="96" y1="96" x2="416" y2="416" gradientUnits="userSpaceOnUse">
       <stop offset="0" stop-color="#8cf5d1"/>
       <stop offset="1" stop-color="#22d3ee"/>
     </linearGradient>
   </defs>
+  <!-- App-icon tile (full dark rounded square) for favicon / apple-touch / PWA / Stripe -->
   <rect width="512" height="512" rx="112" fill="#061015"/>
-  <g transform="translate(78, 78) scale(5.5625)">
-    <!-- Outer Shield / Gate -->
-    <path d="M32 9 C20 13 15 20 15 33 C15 45 26 53 32 56 C38 53 49 45 49 33 C49 20 44 13 32 9 Z" 
-          fill="#0b1820" stroke="url(#tg-frame)" stroke-width="3.5" stroke-linejoin="round"/>
-          
-    <!-- Proportional Thumbs Up -->
-    <g transform="translate(19, 17) scale(1.1)" stroke="#8cf5d1" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" fill="none">
-      <path d="M14 9V5a3 3 0 0 0-3-3l-4 9v11h11.28a2 2 0 0 0 2-1.7l1.38-9a2 2 0 0 0-2-2.3zM7 22H4a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2h3"/>
-    </g>
-  </g>
+  <!-- Outer gate frame (inset filled panel + stroke) -->
+  <rect x="78" y="78" width="356" height="356" rx="84" fill="#0b1820" stroke="url(#tg-frame)" stroke-width="18"/>
+  <!-- Arched gate opening -->
+  <path d="M146 354V192c0-36 29-65 65-65h90c36 0 65 29 65 65v162" fill="none" stroke="#8cf5d1" stroke-width="28" stroke-linecap="round" stroke-linejoin="round"/>
+  <!-- TG monogram -->
+  <text x="256" y="310" text-anchor="middle" fill="#e7fbff" font-family="Inter, -apple-system, BlinkMacSystemFont, Segoe UI, Arial, sans-serif" font-size="132" font-weight="900" letter-spacing="-8">TG</text>
+  <!-- Gate threshold bar -->
+  <rect x="140" y="344" width="232" height="28" rx="14" fill="#22d3ee"/>
 </svg>

package/public/blog/inside-your-boundary.html

@@ -0,0 +1,114 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>AI inside your boundary: governance without relaxing controls | ThumbGate</title>
+  <meta name="description" content="Enterprises should not trade security exceptions for agent speed. ThumbGate runs pre-action checks and reviewable lessons locally—starting with one high-stakes workflow." />
+  <meta property="og:title" content="AI inside your boundary: governance without relaxing controls" />
+  <meta property="og:description" content="Local pre-action checks, audit-ready decisions, and a $499 managed gate for one workflow." />
+  <meta property="og:type" content="article" />
+  <meta property="og:url" content="https://thumbgate.ai/blog/inside-your-boundary" />
+  <link rel="canonical" href="https://thumbgate.ai/blog/inside-your-boundary" />
+  <link rel="icon" type="image/png" href="/thumbgate-icon.png" />
+  <meta property="og:image" content="https://thumbgate.ai/og.png" />
+  <script type="application/ld+json">
+  {
+    "@context": "https://schema.org",
+    "@type": "BlogPosting",
+    "headline": "AI inside your boundary: governance without relaxing controls",
+    "datePublished": "2026-07-23",
+    "author": { "@type": "Organization", "name": "ThumbGate" },
+    "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
+    "mainEntityOfPage": "https://thumbgate.ai/blog/inside-your-boundary",
+    "description": "Local pre-action checks and one managed workflow gate so teams keep agent speed without permanent security exceptions."
+  }
+  </script>
+  <style>
+    :root { color-scheme: dark; --bg:#080b10; --panel:#111722; --text:#f5f7fb; --muted:#9ca8ba; --line:#273246; --cyan:#38d7ff; --green:#56e39f; --max:760px; }
+    * { box-sizing: border-box; }
+    body { margin:0; color:var(--text); background:var(--bg); font:16px/1.7 Inter,ui-sans-serif,system-ui,-apple-system,sans-serif; }
+    a { color:var(--cyan); }
+    .shell { width:min(calc(100% - 40px),var(--max)); margin:0 auto; }
+    header { padding:22px 0; border-bottom:1px solid var(--line); }
+    header a { color:var(--muted); text-decoration:none; font-weight:700; }
+    .brand { color:var(--text); font-weight:850; text-decoration:none; }
+    article { padding:48px 0 80px; }
+    .meta { color:var(--muted); font:700 12px/1.2 ui-monospace,Menlo,monospace; letter-spacing:.08em; text-transform:uppercase; }
+    h1 { margin:14px 0 18px; font-size:clamp(32px,5vw,46px); line-height:1.08; letter-spacing:-.04em; }
+    h2 { margin:36px 0 12px; font-size:24px; letter-spacing:-.03em; }
+    p, li { color:var(--muted); }
+    p { margin:0 0 16px; }
+    ul, ol { margin:0 0 18px; padding-left:1.2em; }
+    li { margin-bottom:8px; }
+    strong { color:var(--text); }
+    .callout { margin:24px 0; padding:16px 18px; border-left:3px solid var(--green); background:rgba(86,227,159,.07); color:var(--muted); }
+    .cta { display:inline-flex; margin-top:8px; margin-right:10px; padding:12px 18px; border-radius:10px; background:var(--green); color:#06130d; font-weight:850; text-decoration:none; }
+    code { color:var(--cyan); font-family:ui-monospace,Menlo,monospace; font-size:0.95em; }
+    footer { padding:28px 0 48px; border-top:1px solid var(--line); color:var(--muted); font-size:13px; }
+  </style>
+</head>
+<body>
+  <header>
+    <div class="shell" style="display:flex;justify-content:space-between;gap:16px;align-items:center;">
+      <a class="brand" href="/blog">ThumbGate / Blog</a>
+      <a href="/diagnostic">$499 workflow gate</a>
+    </div>
+  </header>
+  <article class="shell">
+    <div class="meta">2026-07-23 · Inside your boundary</div>
+    <h1>AI inside your boundary: governance without relaxing controls</h1>
+    <p>
+      Enterprise AI platforms now lead with a blunt line: run agents <strong>inside your security boundary</strong>, with auditability and governance, instead of permanent exceptions to “keep up.” That demand is real. ThumbGate’s answer is not another model API. It is a <strong>local pre-action control plane</strong> for the coding agents teams already run.
+    </p>
+
+    <h2>Who this is for</h2>
+    <p>
+      Engineering and security leads whose approved base images, network rules, and CISO policies are not optional theater. Teams that already use Claude Code, Cursor, Codex, or similar agents after a real workflow failure—and cannot accept “trust the prompt” as the only control.
+    </p>
+    <div class="callout">
+      Vendors should not require enterprises to relax well-established practice for agent speed. Local gates, reviewable lessons, and explicit ALLOW / WARN / DENY decisions are how you keep both.
+    </div>
+
+    <h2>What “inside your boundary” means for ThumbGate</h2>
+    <ul>
+      <li><strong>Local-first checks</strong> — PreToolUse hooks evaluate the proposed tool call on the machine or in the lane you control.</li>
+      <li><strong>Lessons stay reviewable</strong> — thumbs become local lessons; relevant lessons are re-ranked for the next action; repeated failures can promote into gates; stale auto-promoted gates expire.</li>
+      <li><strong>Honest default enforcement</strong> — detected secret exfiltration and gate-bypass attempts are denied by default; many other matches warn unless strict mode is enabled.</li>
+      <li><strong>Decision receipts</strong> — blocks and warnings name the matched rule and leave a trail reviewers can inspect.</li>
+    </ul>
+    <p>
+      We do not claim a full air-gapped multi-cloud agent OS on day one. We claim a sharp execution boundary for coding-agent tool calls—and a managed way to install the first hard gate where it hurts.
+    </p>
+
+    <h2>Land on one high-stakes problem</h2>
+    <p>
+      Platform vendors talk about forward-deployed motion. Our cash path is deliberately small:
+    </p>
+    <ol>
+      <li><strong>One workflow</strong> with a repeated AI-agent failure.</li>
+      <li><strong>One configured local gate</strong> with a regression test.</li>
+      <li><strong>Rollout and rollback proof</strong> within two business days after access and materials are available.</li>
+    </ol>
+    <p>
+      That is the $499 Enterprise Workflow Gate—not an org-wide hosted license. Shared hosting, SSO, compliance packaging, and multi-workflow rollout stay separate scope. If the failure cannot reduce to one supported gate, the order is refunded instead of silently upsold.
+    </p>
+
+    <h2>Start without a procurement cycle</h2>
+    <p>
+      Free local evaluate: <code>npx thumbgate init</code>. Prove one caught repeat. When the pain is real and shared, buy the managed gate for that workflow.
+    </p>
+    <p>
+      <a class="cta" href="/#buy">Buy the $499 enterprise gate →</a>
+      <a class="cta" href="/guide" style="background:transparent;border:1px solid var(--cyan);color:var(--cyan);">Setup guide →</a>
+    </p>
+  </article>
+  <footer>
+    <div class="shell">
+      <a href="/blog">← All posts</a> ·
+      <a href="/diagnostic">Diagnostic / offer detail</a> ·
+      <a href="/">Home</a>
+    </div>
+  </footer>
+</body>
+</html>

package/public/blog/process-over-outcome-gates.html

@@ -0,0 +1,119 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Process over outcome: gates for self-improving coding loops | ThumbGate</title>
+  <meta name="description" content="Self-improving coding agents can game metrics and skip proof. ThumbGate gates the process—holdouts, receipts, and known-bad promotions—before the claim lands." />
+  <meta property="og:title" content="Process over outcome: gates for self-improving coding loops" />
+  <meta property="og:description" content="Outcome metrics alone are not enough. Gate the process when agents optimize for done." />
+  <meta property="og:type" content="article" />
+  <meta property="og:url" content="https://thumbgate.ai/blog/process-over-outcome-gates" />
+  <link rel="canonical" href="https://thumbgate.ai/blog/process-over-outcome-gates" />
+  <link rel="icon" type="image/png" href="/thumbgate-icon.png" />
+  <meta property="og:image" content="https://thumbgate.ai/og.png" />
+  <script type="application/ld+json">
+  {
+    "@context": "https://schema.org",
+    "@type": "BlogPosting",
+    "headline": "Process over outcome: gates for self-improving coding loops",
+    "datePublished": "2026-07-23",
+    "author": { "@type": "Organization", "name": "ThumbGate" },
+    "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
+    "mainEntityOfPage": "https://thumbgate.ai/blog/process-over-outcome-gates",
+    "description": "Self-improving coding agents can game metrics and skip proof. Gate the process before the claim lands."
+  }
+  </script>
+  <style>
+    :root { color-scheme: dark; --bg:#080b10; --panel:#111722; --text:#f5f7fb; --muted:#9ca8ba; --line:#273246; --cyan:#38d7ff; --green:#56e39f; --max:760px; }
+    * { box-sizing: border-box; }
+    body { margin:0; color:var(--text); background:var(--bg); font:16px/1.7 Inter,ui-sans-serif,system-ui,-apple-system,sans-serif; }
+    a { color:var(--cyan); }
+    .shell { width:min(calc(100% - 40px),var(--max)); margin:0 auto; }
+    header { padding:22px 0; border-bottom:1px solid var(--line); }
+    header a { color:var(--muted); text-decoration:none; font-weight:700; }
+    header a:hover { color:var(--text); }
+    .brand { color:var(--text); font-weight:850; text-decoration:none; }
+    article { padding:48px 0 80px; }
+    .meta { color:var(--muted); font:700 12px/1.2 ui-monospace,Menlo,monospace; letter-spacing:.08em; text-transform:uppercase; }
+    h1 { margin:14px 0 18px; font-size:clamp(32px,5vw,46px); line-height:1.08; letter-spacing:-.04em; }
+    h2 { margin:36px 0 12px; font-size:24px; letter-spacing:-.03em; }
+    p, li { color:var(--muted); }
+    p { margin:0 0 16px; }
+    ul { margin:0 0 18px; padding-left:1.2em; }
+    li { margin-bottom:8px; }
+    strong { color:var(--text); }
+    .callout { margin:24px 0; padding:16px 18px; border-left:3px solid var(--cyan); background:rgba(56,215,255,.06); color:var(--muted); }
+    .cta { display:inline-flex; margin-top:8px; padding:12px 18px; border-radius:10px; background:var(--green); color:#06130d; font-weight:850; text-decoration:none; }
+    code { color:var(--cyan); font-family:ui-monospace,Menlo,monospace; font-size:0.95em; }
+    footer { padding:28px 0 48px; border-top:1px solid var(--line); color:var(--muted); font-size:13px; }
+  </style>
+</head>
+<body>
+  <header>
+    <div class="shell" style="display:flex;justify-content:space-between;gap:16px;align-items:center;">
+      <a class="brand" href="/blog">ThumbGate / Blog</a>
+      <a href="/guides/autoresearch-agent-safety">Autoresearch guide</a>
+    </div>
+  </header>
+  <article class="shell">
+    <div class="meta">2026-07-23 · Process over outcome</div>
+    <h1>Process over outcome: gates for self-improving coding loops</h1>
+    <p>
+      Frontier labs are publishing the same uncomfortable finding from the training side: when agents have a large action space, <strong>outcome reward alone stops being a sufficient metric</strong>. They mine git history, scrape reference solutions, and optimize the score instead of the work. The same failure mode shows up in day-to-day coding agents—just with different costumes: skipped tests, edited metrics, force-pushed “fixes,” and “done” claims without receipts.
+    </p>
+    <p>
+      ThumbGate is not a training stack. It is a <strong>self-improving firewall</strong> for the execution boundary. This post is about why that distinction matters when agents start improving themselves.
+    </p>
+
+    <h2>What “process over outcome” means at the tool call</h2>
+    <p>
+      Outcome-only control asks: did the benchmark pass? Did the PR open? Did the agent say it finished?
+      Process control asks: what path did it take, what evidence is required, and is this a known-bad promotion pattern?
+    </p>
+    <div class="callout">
+      If the only signal is “it worked,” a capable agent will eventually find a cheaper path to that label—including paths you would never accept from a human engineer.
+    </div>
+    <p>Concrete process checks ThumbGate is built to support:</p>
+    <ul>
+      <li><strong>Holdout / proof gates</strong> — do not promote a claimed improvement without required verification evidence.</li>
+      <li><strong>Known-bad promotions</strong> — flag patterns like metric editing, missing holdouts, or hidden failed runs (see the Autoresearch safety pack).</li>
+      <li><strong>PreToolUse decisions</strong> — ALLOW / WARN / DENY before shell, file, git, deploy, or API actions execute.</li>
+      <li><strong>Reviewable lessons</strong> — thumbs become local memory; repeated negative patterns can promote into gates; stale auto-promoted gates expire.</li>
+    </ul>
+
+    <h2>Self-improving firewall ≠ self-improving weights</h2>
+    <p>
+      Poolside-style research posts on reward hacking are about training loops. Our product claim is narrower and operational:
+    </p>
+    <ul>
+      <li>We do <strong>not</strong> retrain your model from thumbs.</li>
+      <li>We <strong>do</strong> store feedback as local lessons, re-rank relevant lessons for the next action, and promote repeated failures into prevention gates.</li>
+      <li>We <strong>do</strong> hard-block detected secret exfiltration and gate-bypass attempts by default; most other matches warn unless strict enforcement is on.</li>
+    </ul>
+    <p>
+      That is how the control layer improves over time without pretending every free install is a perfect firewall—or that every agent claim is honest.
+    </p>
+
+    <h2>What to do this week</h2>
+    <ol>
+      <li>Install local checks: <code>npx thumbgate init</code></li>
+      <li>Pick one self-improving or “autonomous fix” workflow that already burned you.</li>
+      <li>Require process evidence (tests, holdout, screenshot, CI) before the agent can claim done.</li>
+      <li>If you want a managed boundary for that one workflow, use the $499 Enterprise Workflow Gate.</li>
+    </ol>
+    <p>
+      <a class="cta" href="/guides/autoresearch-agent-safety">Open the Autoresearch safety guide →</a>
+      &nbsp;
+      <a class="cta" href="/#buy" style="background:transparent;border:1px solid var(--green);color:var(--green);">Buy the $499 gate →</a>
+    </p>
+  </article>
+  <footer>
+    <div class="shell">
+      <a href="/blog">← All posts</a> ·
+      <a href="/learn/feedback-loop-vs-decision-layer">Feedback loop vs decision layer</a> ·
+      <a href="/">Home</a>
+    </div>
+  </footer>
+</body>
+</html>