thumbgate 1.29.2 → 1.31.0

package/public/assets/diagrams/loop.svg

@@ -0,0 +1,40 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 300" role="img" aria-labelledby="t d">
+  <title id="t">ThumbGate feedback loop</title>
+  <desc id="d">Agent proposes a tool call, ThumbGate decides allow warn or deny, thumbs feedback becomes a rule that closes the loop.</desc>
+  <rect width="960" height="300" rx="24" fill="#0a0a0b"/>
+  <defs>
+    <marker id="arr" markerWidth="10" markerHeight="10" refX="8" refY="4" orient="auto"><path d="M0,0 L8,4 L0,8 Z" fill="#22d3ee"/></marker>
+    <marker id="arrG" markerWidth="10" markerHeight="10" refX="8" refY="4" orient="auto"><path d="M0,0 L8,4 L0,8 Z" fill="#4ade80"/></marker>
+    <linearGradient id="g" x1="0" y1="0" x2="1" y2="1"><stop offset="0" stop-color="#22d3ee"/><stop offset="1" stop-color="#4ade80"/></linearGradient>
+  </defs>
+
+  <!-- Step 1 -->
+  <rect x="40" y="70" width="180" height="120" rx="18" fill="#161618" stroke="#333"/>
+  <circle cx="70" cy="100" r="16" fill="#222" stroke="#22d3ee" stroke-width="2"/>
+  <text x="70" y="105" text-anchor="middle" fill="#22d3ee" font-family="system-ui,sans-serif" font-size="14" font-weight="800">1</text>
+  <text x="130" y="118" text-anchor="middle" fill="#f5f5f7" font-family="system-ui,sans-serif" font-size="18" font-weight="800">Agent</text>
+  <text x="130" y="146" text-anchor="middle" fill="#9ca3af" font-family="system-ui,sans-serif" font-size="13">proposes a tool</text>
+  <line x1="230" y1="130" x2="290" y2="130" stroke="#22d3ee" stroke-width="3" marker-end="url(#arr)"/>
+
+  <!-- Step 2 -->
+  <rect x="300" y="50" width="240" height="160" rx="18" fill="#07151a" stroke="url(#g)" stroke-width="2.5"/>
+  <circle cx="340" cy="90" r="16" fill="#0d2530" stroke="#22d3ee" stroke-width="2"/>
+  <text x="340" y="95" text-anchor="middle" fill="#22d3ee" font-family="system-ui,sans-serif" font-size="14" font-weight="800">2</text>
+  <text x="420" y="95" text-anchor="middle" fill="#22d3ee" font-family="system-ui,sans-serif" font-size="20" font-weight="900">ThumbGate</text>
+  <text x="420" y="130" text-anchor="middle" fill="#f5f5f7" font-family="system-ui,sans-serif" font-size="16" font-weight="700">ALLOW · WARN · DENY</text>
+  <text x="420" y="158" text-anchor="middle" fill="#9ca3af" font-family="system-ui,sans-serif" font-size="13">before the tool runs</text>
+  <text x="420" y="184" text-anchor="middle" fill="#4ade80" font-family="system-ui,sans-serif" font-size="18" font-weight="800">👍  👎</text>
+  <line x1="550" y1="130" x2="610" y2="130" stroke="#22d3ee" stroke-width="3" marker-end="url(#arr)"/>
+
+  <!-- Step 3 -->
+  <rect x="620" y="70" width="180" height="120" rx="18" fill="#161618" stroke="#333"/>
+  <circle cx="650" cy="100" r="16" fill="#222" stroke="#4ade80" stroke-width="2"/>
+  <text x="650" y="105" text-anchor="middle" fill="#4ade80" font-family="system-ui,sans-serif" font-size="14" font-weight="800">3</text>
+  <text x="710" y="118" text-anchor="middle" fill="#f5f5f7" font-family="system-ui,sans-serif" font-size="18" font-weight="800">Action</text>
+  <text x="710" y="146" text-anchor="middle" fill="#9ca3af" font-family="system-ui,sans-serif" font-size="13">shell · git · db</text>
+
+  <!-- Feedback loop -->
+  <path d="M710 200 C710 250 130 250 130 200" fill="none" stroke="#4ade80" stroke-width="3" stroke-dasharray="6 4" marker-end="url(#arrG)"/>
+  <rect x="260" y="232" width="320" height="40" rx="20" fill="#0d1b14" stroke="#4ade80"/>
+  <text x="420" y="258" text-anchor="middle" fill="#4ade80" font-family="system-ui,sans-serif" font-size="15" font-weight="800">👍 👎 feedback → lesson → rule → gate</text>
+</svg>

package/public/assets/diagrams/pre-action-gate-loop.svg

@@ -0,0 +1,59 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="520" viewBox="0 0 1200 520" role="img" aria-labelledby="title desc">
+  <title id="title">ThumbGate pre-action gate loop</title>
+  <desc id="desc">Diagram showing an AI agent proposing a tool call, ThumbGate checking it before execution, then either blocking repeated failures or allowing safe actions with an audit receipt.</desc>
+  <defs>
+    <linearGradient id="bg" x1="0" x2="1" y1="0" y2="1">
+      <stop offset="0%" stop-color="#081014"/>
+      <stop offset="100%" stop-color="#111113"/>
+    </linearGradient>
+    <linearGradient id="cyan" x1="0" x2="1" y1="0" y2="0">
+      <stop offset="0%" stop-color="#22d3ee"/>
+      <stop offset="100%" stop-color="#4ade80"/>
+    </linearGradient>
+    <filter id="shadow" x="-10%" y="-10%" width="120%" height="120%">
+      <feDropShadow dx="0" dy="16" stdDeviation="18" flood-color="#000000" flood-opacity="0.35"/>
+    </filter>
+    <marker id="arrow" markerWidth="12" markerHeight="12" refX="10" refY="6" orient="auto">
+      <path d="M2,2 L10,6 L2,10 Z" fill="#22d3ee"/>
+    </marker>
+  </defs>
+  <rect width="1200" height="520" rx="28" fill="url(#bg)"/>
+  <text x="60" y="72" fill="#e8e8ec" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="34" font-weight="800">ThumbGate checks agent intent before execution</text>
+  <text x="60" y="106" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="17">Feedback becomes rules. Rules become PreToolUse gates. Gates produce receipts before files, APIs, or production systems change.</text>
+
+  <g filter="url(#shadow)">
+    <rect x="60" y="170" width="235" height="145" rx="18" fill="#161618" stroke="#222225"/>
+    <text x="86" y="205" fill="#22d3ee" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="800" letter-spacing="1.4">AGENT INTENT</text>
+    <text x="86" y="244" fill="#e8e8ec" font-family="SFMono-Regular,Consolas,monospace" font-size="18">git push --force</text>
+    <text x="86" y="272" fill="#e8e8ec" font-family="SFMono-Regular,Consolas,monospace" font-size="18">origin main</text>
+    <text x="86" y="296" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13">Still only proposed. Nothing has run.</text>
+
+    <rect x="390" y="160" width="270" height="165" rx="18" fill="#10181a" stroke="#22d3ee" stroke-opacity="0.52"/>
+    <text x="416" y="196" fill="#22d3ee" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="800" letter-spacing="1.4">PRETOOLUSE GATE</text>
+    <text x="416" y="232" fill="#e8e8ec" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="700">Known repeated failure?</text>
+    <text x="416" y="262" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="14">Checks active rules, protected paths, approvals,</text>
+    <text x="416" y="284" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="14">secrets, evidence, and workflow scope.</text>
+
+    <rect x="755" y="120" width="245" height="135" rx="18" fill="#201113" stroke="#f87171" stroke-opacity="0.55"/>
+    <text x="781" y="154" fill="#f87171" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="800" letter-spacing="1.4">BLOCK</text>
+    <text x="781" y="191" fill="#e8e8ec" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="700">Stop before damage</text>
+    <text x="781" y="220" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="14">Return the rule and safer next step.</text>
+
+    <rect x="755" y="305" width="245" height="135" rx="18" fill="#102017" stroke="#4ade80" stroke-opacity="0.55"/>
+    <text x="781" y="339" fill="#4ade80" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="800" letter-spacing="1.4">ALLOW</text>
+    <text x="781" y="376" fill="#e8e8ec" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="700">Run and log receipt</text>
+    <text x="781" y="405" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="14">Safe actions keep moving with proof.</text>
+  </g>
+
+  <path d="M310 242 H370" stroke="#22d3ee" stroke-width="3" marker-end="url(#arrow)"/>
+  <path d="M670 230 C710 190 725 175 745 170" stroke="#f87171" stroke-width="3" fill="none" marker-end="url(#arrow)"/>
+  <path d="M670 270 C710 335 725 365 745 375" stroke="#4ade80" stroke-width="3" fill="none" marker-end="url(#arrow)"/>
+
+  <g>
+    <rect x="60" y="380" width="600" height="70" rx="16" fill="#0a0a0b" stroke="#222225"/>
+    <text x="86" y="412" fill="#8b8b96" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="800" letter-spacing="1.4">FEEDBACK LOOP</text>
+    <text x="86" y="438" fill="#e8e8ec" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="16">Thumbs-down becomes a lesson, then a prevention rule shared across agents.</text>
+  </g>
+  <path d="M820 120 C760 70 240 72 196 165" stroke="url(#cyan)" stroke-width="3" fill="none" stroke-dasharray="8 8" marker-end="url(#arrow)"/>
+  <text x="900" y="486" fill="#22d3ee" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="16" font-weight="800">npx thumbgate init</text>
+</svg>

package/public/assets/diagrams/self-improving-thumbs-loop.svg

@@ -0,0 +1,105 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 420" role="img" aria-labelledby="title desc">
+  <title id="title">How ThumbGate self-improves from thumbs up and thumbs down</title>
+  <desc id="desc">Closed loop: you give thumbs up or thumbs down, ThumbGate stores a local lesson, promotes a prevention rule, and gates the next tool call before it runs.</desc>
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#081018"/>
+      <stop offset="100%" stop-color="#0d121c"/>
+    </linearGradient>
+    <linearGradient id="ring" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#22d3ee"/>
+      <stop offset="100%" stop-color="#4ade80"/>
+    </linearGradient>
+    <linearGradient id="upGlow" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0%" stop-color="#56e39f"/>
+      <stop offset="100%" stop-color="#1f9d62"/>
+    </linearGradient>
+    <linearGradient id="downGlow" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0%" stop-color="#ff8a9a"/>
+      <stop offset="100%" stop-color="#e11d48"/>
+    </linearGradient>
+    <filter id="soft" x="-20%" y="-20%" width="140%" height="140%">
+      <feDropShadow dx="0" dy="12" stdDeviation="16" flood-color="#000" flood-opacity="0.45"/>
+    </filter>
+    <marker id="arr" markerWidth="10" markerHeight="10" refX="8" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#22d3ee"/>
+    </marker>
+    <marker id="arrG" markerWidth="10" markerHeight="10" refX="8" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#4ade80"/>
+    </marker>
+  </defs>
+
+  <rect width="1100" height="420" rx="28" fill="url(#bg)"/>
+
+  <!-- Header -->
+  <text x="48" y="48" fill="#e8eef7" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="28" font-weight="800">Yes — self-improving. Not the model. The gate.</text>
+  <text x="48" y="78" fill="#9ca8ba" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="15">Your 👍 / 👎 teach local rules. Next matching tool call is checked before it runs.</text>
+
+  <!-- Giant thumbs pair -->
+  <g filter="url(#soft)" transform="translate(48, 110)">
+    <!-- Thumbs up card -->
+    <rect x="0" y="0" width="150" height="180" rx="22" fill="#0d1f18" stroke="#4ade80" stroke-width="2"/>
+    <circle cx="75" cy="72" r="42" fill="url(#upGlow)" opacity="0.18"/>
+    <!-- thumbs-up hand icon -->
+    <g transform="translate(42, 38) scale(1.45)" fill="none" stroke="#4ade80" stroke-width="3.2" stroke-linecap="round" stroke-linejoin="round">
+      <path d="M7 22V13a2 2 0 0 1 2-2h2.5l3.2-7.2A2.5 2.5 0 0 1 17 2.5 3.5 3.5 0 0 1 20.5 6v5H28a3 3 0 0 1 3 3.4l-1.6 9A3 3 0 0 1 26.5 26H9a2 2 0 0 1-2-2z"/>
+      <path d="M7 13H4a2 2 0 0 0-2 2v9a2 2 0 0 0 2 2h3"/>
+    </g>
+    <text x="75" y="148" text-anchor="middle" fill="#4ade80" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="800">👍 Keep</text>
+    <text x="75" y="170" text-anchor="middle" fill="#8fa09a" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="12">reinforce good pattern</text>
+
+    <!-- Thumbs down card -->
+    <rect x="170" y="0" width="150" height="180" rx="22" fill="#1f1014" stroke="#ff6480" stroke-width="2"/>
+    <circle cx="245" cy="72" r="42" fill="url(#downGlow)" opacity="0.18"/>
+    <!-- thumbs-down hand icon -->
+    <g transform="translate(212, 38) scale(1.45)" fill="none" stroke="#ff6480" stroke-width="3.2" stroke-linecap="round" stroke-linejoin="round">
+      <path d="M7 2v9a2 2 0 0 0 2 2h2.5l3.2 7.2A2.5 2.5 0 0 0 17 21.5 3.5 3.5 0 0 0 20.5 18v-5H28a3 3 0 0 0 3-3.4l-1.6-9A3 3 0 0 0 26.5-2H9a2 2 0 0 0-2 2z" transform="translate(0 8)"/>
+      <path d="M7 11H4a2 2 0 0 1-2-2V0a2 2 0 0 1 2-2h3" transform="translate(0 8)"/>
+    </g>
+    <text x="245" y="148" text-anchor="middle" fill="#ff8a9a" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="800">👎 Fix</text>
+    <text x="245" y="170" text-anchor="middle" fill="#b08a93" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="12">never repeat this</text>
+  </g>
+
+  <!-- Arrow to lesson -->
+  <path d="M340 200 H390" stroke="#22d3ee" stroke-width="3" marker-end="url(#arr)"/>
+
+  <!-- Step 2: Local lesson -->
+  <g filter="url(#soft)">
+    <rect x="400" y="130" width="180" height="140" rx="20" fill="#111722" stroke="#273246" stroke-width="2"/>
+    <text x="490" y="168" text-anchor="middle" fill="#22d3ee" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="12" font-weight="800" letter-spacing="1.2">LOCAL LESSON</text>
+    <text x="490" y="202" text-anchor="middle" fill="#f5f7fb" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="800">SQLite memory</text>
+    <text x="490" y="228" text-anchor="middle" fill="#9ca8ba" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13">survives sessions</text>
+    <text x="490" y="248" text-anchor="middle" fill="#9ca8ba" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13">not model weights</text>
+  </g>
+
+  <path d="M590 200 H640" stroke="#22d3ee" stroke-width="3" marker-end="url(#arr)"/>
+
+  <!-- Step 3: Rule / gate -->
+  <g filter="url(#soft)">
+    <rect x="650" y="130" width="180" height="140" rx="20" fill="#0c1820" stroke="url(#ring)" stroke-width="2.5"/>
+    <text x="740" y="168" text-anchor="middle" fill="#22d3ee" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="12" font-weight="800" letter-spacing="1.2">PREVENTION RULE</text>
+    <text x="740" y="202" text-anchor="middle" fill="#f5f7fb" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="800">Auto-promoted</text>
+    <text x="740" y="228" text-anchor="middle" fill="#9ca8ba" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13">from repeats</text>
+    <text x="740" y="248" text-anchor="middle" fill="#9ca8ba" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13">stale rules expire</text>
+  </g>
+
+  <path d="M840 200 H890" stroke="#22d3ee" stroke-width="3" marker-end="url(#arr)"/>
+
+  <!-- Step 4: Gate next action -->
+  <g filter="url(#soft)">
+    <rect x="900" y="118" width="168" height="164" rx="20" fill="#111722" stroke="#273246" stroke-width="2"/>
+    <text x="984" y="152" text-anchor="middle" fill="#22d3ee" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="12" font-weight="800" letter-spacing="1.2">NEXT TOOL CALL</text>
+    <rect x="922" y="168" width="52" height="26" rx="13" fill="rgba(86,227,159,0.12)" stroke="#56e39f"/>
+    <text x="948" y="186" text-anchor="middle" fill="#56e39f" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="11" font-weight="800">ALLOW</text>
+    <rect x="982" y="168" width="48" height="26" rx="13" fill="rgba(255,209,102,0.12)" stroke="#ffd166"/>
+    <text x="1006" y="186" text-anchor="middle" fill="#ffd166" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="11" font-weight="800">WARN</text>
+    <rect x="948" y="206" width="52" height="26" rx="13" fill="rgba(255,100,124,0.12)" stroke="#ff647c"/>
+    <text x="974" y="224" text-anchor="middle" fill="#ff647c" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="11" font-weight="800">DENY</text>
+    <text x="984" y="258" text-anchor="middle" fill="#f5f7fb" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="15" font-weight="700">before it runs</text>
+  </g>
+
+  <!-- Closing the loop dashed arrow back -->
+  <path d="M984 300 C984 360 120 360 120 300" fill="none" stroke="#4ade80" stroke-width="3" stroke-dasharray="8 6" marker-end="url(#arrG)"/>
+  <rect x="360" y="332" width="380" height="40" rx="20" fill="#0d1b14" stroke="#4ade80"/>
+  <text x="550" y="358" text-anchor="middle" fill="#4ade80" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="15" font-weight="800">Loop closes · under your control · no model retrain</text>
+</svg>

package/public/assets/diagrams/stack.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 240" role="img" aria-labelledby="t d">
+  <title id="t">Where ThumbGate sits in the stack</title>
+  <desc id="d">Model to agent runtime to ThumbGate pre-action gate to tools.</desc>
+  <rect width="960" height="240" fill="#0a0a0b"/>
+  <g font-family="system-ui,sans-serif">
+    <rect x="60" y="36" width="840" height="40" rx="10" fill="#161618" stroke="#333"/>
+    <text x="480" y="62" text-anchor="middle" fill="#9ca3af" font-size="15" font-weight="600">Model (Claude · GPT · Gemini · local)</text>
+    <text x="480" y="100" text-anchor="middle" fill="#22d3ee" font-size="22">↓</text>
+    <rect x="60" y="112" width="840" height="40" rx="10" fill="#161618" stroke="#333"/>
+    <text x="480" y="138" text-anchor="middle" fill="#e5e7eb" font-size="15" font-weight="600">Agent runtime (Claude Code · Cursor · Codex · …)</text>
+    <text x="480" y="176" text-anchor="middle" fill="#22d3ee" font-size="22">↓</text>
+    <rect x="60" y="188" width="400" height="40" rx="10" fill="#07151a" stroke="#22d3ee" stroke-width="2"/>
+    <text x="260" y="214" text-anchor="middle" fill="#22d3ee" font-size="15" font-weight="800">ThumbGate pre-action gate</text>
+    <text x="490" y="214" text-anchor="middle" fill="#4ade80" font-size="20">→</text>
+    <rect x="520" y="188" width="380" height="40" rx="10" fill="#161618" stroke="#333"/>
+    <text x="710" y="214" text-anchor="middle" fill="#e5e7eb" font-size="15" font-weight="600">shell · git · db · MCP tools</text>
+  </g>
+</svg>

package/public/case-studies.html

@@ -0,0 +1,151 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<meta name="generator" content="ThumbGate">
+<meta name="author" content="Igor Ganapolsky">
+<title>Case Studies — ThumbGate Dogfood Proof</title>
+<meta name="description" content="Real ThumbGate case studies from dogfood on this product: sudo evasion grid, fail-open hook recovery, catastrophic free-tier floor, and adversarial measurement. No fabricated logos.">
+<meta property="og:title" content="ThumbGate Case Studies">
+<meta property="og:description" content="Five reproducible dogfood narratives: 62 evasion holes closed, fail-open recovery, catastrophic safety floor, and adversarial grids.">
+<meta property="og:type" content="article">
+<meta property="og:url" content="https://thumbgate.ai/case-studies">
+<link rel="canonical" href="https://thumbgate.ai/case-studies">
+<link rel="icon" type="image/png" href="/thumbgate-icon.png">
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "CollectionPage",
+  "name": "ThumbGate Case Studies",
+  "description": "Reproducible dogfood case studies for ThumbGate pre-action checks. No fabricated customer logos.",
+  "url": "https://thumbgate.ai/case-studies",
+  "dateModified": "2026-07-29"
+}
+</script>
+<style>
+  :root {
+    --bg:#0b0f14; --panel:#111823; --border:#1e2a3a; --text:#e6edf3;
+    --muted:#8b98a5; --cyan:#39c5cf; --green:#3fb950; --amber:#d29922;
+  }
+  * { margin:0; padding:0; box-sizing:border-box; }
+  body { background:var(--bg); color:var(--text); font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif; line-height:1.65; }
+  nav { padding:1rem 2rem; border-bottom:1px solid var(--border); display:flex; gap:1.25rem; flex-wrap:wrap; align-items:center; }
+  nav a { color:var(--muted); text-decoration:none; font-size:0.9rem; }
+  nav a:hover { color:var(--cyan); }
+  nav .brand { color:var(--text); font-weight:700; }
+  .container { max-width:900px; margin:0 auto; padding:2.5rem 1.5rem 4rem; }
+  h1 { font-size:2rem; margin-bottom:0.4rem; }
+  h2 { font-size:1.25rem; margin:0 0 0.35rem; }
+  .subtitle { color:var(--muted); font-size:1.05rem; margin-bottom:1.5rem; }
+  article { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:1.35rem 1.4rem; margin:1.1rem 0; }
+  .meta { color:var(--muted); font-size:0.85rem; margin-bottom:0.75rem; }
+  .metric { display:inline-block; background:#0d1420; border:1px solid var(--border); color:var(--cyan); padding:0.2rem 0.55rem; border-radius:6px; font-size:0.82rem; font-weight:600; margin:0 0.35rem 0.35rem 0; }
+  p { margin:0.55rem 0; }
+  pre { background:#0d1420; border:1px solid var(--border); border-radius:8px; padding:0.85rem 1rem; overflow-x:auto; font-size:0.84rem; margin:0.75rem 0; }
+  code { color:var(--cyan); }
+  a.inline { color:var(--cyan); }
+  a.cta { display:inline-block; background:var(--cyan); color:#001018; font-weight:700; padding:0.7rem 1rem; border-radius:8px; text-decoration:none; margin:0.5rem 0.6rem 0.5rem 0; }
+  .note { border-left:3px solid var(--amber); background:var(--panel); padding:0.7rem 1rem; margin:1.25rem 0; color:var(--muted); }
+  .footer-note { color:var(--muted); font-size:0.85rem; margin-top:2.5rem; text-align:center; }
+  .footer-note a { color:var(--cyan); text-decoration:none; }
+</style>
+</head>
+<body>
+<nav>
+  <a class="brand" href="/">ThumbGate</a>
+  <a href="/whitepaper">White paper</a>
+  <a href="/architecture">Architecture</a>
+  <a href="/eval-scorecard">Scorecard</a>
+  <a href="/evaluations">Evaluations</a>
+  <a href="/case-studies">Case studies</a>
+  <a href="/numbers">Numbers</a>
+  <a href="/pricing">Pricing</a>
+</nav>
+<main class="container">
+  <h1>Case studies</h1>
+  <p class="subtitle">Real work on this codebase. No fabricated logos, no aspirational customer counts — every technical claim is verifiable against the open repo or the commands recorded in the full write-up.</p>
+
+  <div class="note">
+    <strong>Honesty boundary:</strong> these are first-party dogfood / incident narratives, not third-party customer ROI claims.
+    Full longform: <a class="inline" href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/THUMBGATE-CASE-STUDIES.md">docs/THUMBGATE-CASE-STUDIES.md</a>.
+  </div>
+
+  <article id="sudo-evasion">
+    <h2>1. A guardrail you could walk past with <code>sudo</code></h2>
+    <p class="meta">Hard technical problem · shipped in v1.29.2</p>
+    <span class="metric">62 evasion holes → 0</span>
+    <span class="metric">14 commands × 9 transforms</span>
+    <span class="metric">published tarball verified</span>
+    <p><strong>Problem.</strong> Catastrophic gates (<code>rm -rf ~</code>, force-push, hard reset) matched the happy path but missed wrappers: <code>sudo rm -rf ~</code> produced no match on 1.29.1.</p>
+    <p><strong>Action.</strong> Built an adversarial grid instead of hand-picking examples; canonicalized commands centrally; re-evaluated only when the original form missed.</p>
+    <pre>rm -rf ~        → deny
+sudo rm -rf ~   → deny (after fix)
+thumbgate@1.29.1 → 34+ holes
+thumbgate@1.29.2 → 0 holes</pre>
+    <p><strong>Artifact.</strong> <code>tests/gate-evasion-matrix.test.js</code> in CI + 6-hourly job against the published npm artifact.</p>
+  </article>
+
+  <article id="hypothesis-report">
+    <h2>2. A seven-defect report where most defects weren’t real</h2>
+    <p class="meta">Ambiguous problem · investigation discipline</p>
+    <span class="metric">2 of 7 defects real</span>
+    <span class="metric">disconfirming evidence first</span>
+    <p><strong>Problem.</strong> A confident multi-defect report with statistics would have forced a core rewrite if accepted wholesale.</p>
+    <p><strong>Action.</strong> Treated each claim as a hypothesis: read the consumer’s config, recompute totals from source data, reproduce before believing.</p>
+    <p><strong>Result.</strong> Strict-mode env explained “warn-by-default not working.” Filtered tables understated warns. The investigation also surfaced the sudo evasion class above — worse than anything in the original report.</p>
+  </article>
+
+  <article id="fail-open">
+    <h2>3. Production failure: a firewall enforcing nothing</h2>
+    <p class="meta">Incident · fail-open PreToolUse hook</p>
+    <span class="metric">hook binary missing</span>
+    <span class="metric">erroring hook = fail open</span>
+    <span class="metric">silent-gate canary added</span>
+    <p><strong>Problem.</strong> Local state vanished and <code>thumbgate-hook</code> was missing. An erroring PreToolUse hook fails open — the product looked “fine” while blocking nothing.</p>
+    <p><strong>Action.</strong> Restored via <code>thumbgate init</code>, then proved enforcement with the same dangerous commands that must deny.</p>
+    <p><strong>Lesson.</strong> This product’s failure mode is silence. Uptime green is not enough; known-dangerous commands must still be denied on a schedule against the published artifact.</p>
+  </article>
+
+  <article id="catastrophic-floor">
+    <h2>4. Monetization that almost sold off the safety floor</h2>
+    <p class="meta">Stakeholder conflict · product policy</p>
+    <span class="metric">catastrophic gates exempt from daily cap</span>
+    <span class="metric">hotfix bypass still hard-floors secrets</span>
+    <p><strong>Problem.</strong> Free-tier daily block caps + warn-by-default posture could downgrade irreversible actions to warnings after the cap.</p>
+    <p><strong>Action.</strong> Split <em>how many</em> blocks free users get from <em>which</em> actions can never be discounted. Named catastrophic IDs stay deny regardless of tier.</p>
+    <p><strong>Result.</strong> Upgrade pressure remains on negotiable gates; irreversible classes are not for sale.</p>
+  </article>
+
+  <article id="evasion-matrix">
+    <h2>5. Built the measurement before claiming “fixed”</h2>
+    <p class="meta">Instrument first · property tests</p>
+    <span class="metric">relative invariant</span>
+    <span class="metric">vacuity guards</span>
+    <span class="metric">artifact, not only source</span>
+    <p><strong>Problem.</strong> “We fixed the bypass class” had been claimed twice and been wrong twice.</p>
+    <p><strong>Action.</strong> Built a property suite over commands × spellings, with sandboxing and a minimum number of plain-form denials so empty measurements cannot pass.</p>
+    <p><strong>Result.</strong> “Is it fixed?” became a command with a number, including against the npm tarball users actually install.</p>
+  </article>
+
+  <p>
+    <a class="cta" href="/whitepaper">Evaluation white paper</a>
+    <a class="cta" href="/eval-scorecard">Bench scorecard</a>
+    <a class="cta" href="/diagnostic">$499 diagnostic gate</a>
+  </p>
+
+  <p class="footer-note">
+    Want a customer case study here? Ship with ThumbGate and write <a href="mailto:igor.ganapolsky@gmail.com">igor.ganapolsky@gmail.com</a>.
+    We only publish reproducible claims.
+  </p>
+  <p class="footer-note">
+    <a href="/">Home</a> ·
+    <a href="/pricing">Pricing</a> ·
+    <a href="/privacy">Privacy</a> ·
+    <a href="/terms">Terms</a> ·
+    <a href="/support">Support</a>
+  </p>
+</main>
+</body>
+</html>

package/public/compare.html

@@ -296,6 +296,7 @@
   <li><a href="/compare/arcade">ThumbGate vs Arcade</a> — coding-agent guardrails vs enterprise API auth delegation</li>
   <li><a href="/compare/databricks-unity-ai-gateway">ThumbGate vs Databricks Unity AI Gateway</a> — enterprise gateway vs local pre-action gates</li>
   <li><a href="/compare/hermes-everos-memory">ThumbGate vs Hermes and EverOS</a> — local-first behavior gates vs passive agent memory stores</li>
+  <li><a href="/compare/far-ai">ThumbGate vs FAR.AI</a> — runtime agent enforcement vs frontier safety research and evaluation</li>
 </ul>
 
 <h2>How It Works</h2>