thumbgate 1.31.0 → 1.34.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
-  "version": "1.31.0",
+  "version": "1.34.0",
   "author": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com",

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.31.0",
+  "version": "1.34.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://thumbgate.ai",
   "transport": "stdio",

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.31.0", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.34.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.31.0", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.34.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/forge/forge.yaml

@@ -9,12 +9,12 @@ version: "1"
 skills:
   thumbgate-gate-check:
     description: "ThumbGate PreToolUse gate — blocks known-bad tool calls"
-    command: "npx --yes --package thumbgate@1.31.0 thumbgate gate-check"
+    command: "npx --yes --package thumbgate@1.34.0 thumbgate gate-check"
     trigger: pre_tool_use
 
   thumbgate-feedback:
     description: "ThumbGate feedback capture — logs user prompt context"
-    command: "npx --yes --package thumbgate@1.31.0 thumbgate hook-auto-capture"
+    command: "npx --yes --package thumbgate@1.34.0 thumbgate hook-auto-capture"
     trigger: user_prompt
 
 mcp:
@@ -23,6 +23,6 @@ mcp:
     args:
       - "--yes"
       - "--package"
-      - "thumbgate@1.31.0"
+      - "thumbgate@1.34.0"
       - "thumbgate"
       - "serve"

package/adapters/mcp/server-stdio.js

@@ -95,6 +95,19 @@ const {
   listEscalations,
   requestEscalation,
 } = require('../../scripts/human-escalation');
+const {
+  createPurchaseRequisition,
+  getFinancialControlRuntimeOptions,
+  getRuntimePrincipal,
+  listPurchaseRequisitions,
+  reconcilePurchaseLedger,
+  reservePurchaseRequisition,
+  settlePurchaseRequisition,
+} = require('../../scripts/financial-control-plane');
+const MCP_FINANCIAL_PRINCIPAL = getRuntimePrincipal();
+const MCP_FINANCIAL_OPTIONS = getFinancialControlRuntimeOptions({
+  authenticatedPrincipal: MCP_FINANCIAL_PRINCIPAL,
+});
 const { recordReasoningTrace } = require('../../scripts/agent-reasoning-traces');
 const { recordToolCall } = require('../../scripts/tool-kpi-tracker');
 const {
@@ -315,7 +328,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.31.0' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.34.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -1368,6 +1381,20 @@ async function callToolInner(name, args) {
       return toTextResult(requestEscalation(args));
     case 'list_human_escalations':
       return toTextResult(listEscalations({ status: args.status }).slice(0, Number(args.limit || 20)));
+    case 'create_purchase_requisition':
+      return toTextResult(createPurchaseRequisition(args, MCP_FINANCIAL_OPTIONS));
+    case 'list_purchase_requisitions': {
+      const rows = listPurchaseRequisitions(MCP_FINANCIAL_OPTIONS)
+        .filter((entry) => !args.status || entry.status === args.status)
+        .slice(0, Number(args.limit || 20));
+      return toTextResult(rows);
+    }
+    case 'reserve_purchase_requisition':
+      return toTextResult(reservePurchaseRequisition(args, MCP_FINANCIAL_OPTIONS));
+    case 'settle_purchase_requisition':
+      return toTextResult(settlePurchaseRequisition(args, MCP_FINANCIAL_OPTIONS));
+    case 'reconcile_purchase_ledger':
+      return toTextResult(reconcilePurchaseLedger(MCP_FINANCIAL_OPTIONS));
     case 'verify_claim':
       return toTextResult(verifyClaimEvidence(args.claim, { goalContract: args.goalContract }));
     case 'require_evidence_for_claim': {
@@ -1382,6 +1409,9 @@ async function callToolInner(name, args) {
       const missingActions = hasMatchingChecks
         ? Array.from(new Set(verification.checks.flatMap((check) => check.missing || [])))
         : [];
+      const factualMismatches = Array.isArray(verification.universal && verification.universal.checks)
+        ? verification.universal.checks.filter((check) => !check.passed)
+        : [];
       try {
         const { recordAuditEvent } = require('../../scripts/audit-trail');
         recordAuditEvent({
@@ -1393,13 +1423,16 @@ async function callToolInner(name, args) {
             goalContract: verification.goalContract && verification.goalContract.matched
               ? verification.goalContract
               : null,
+            universalParsed: verification.universal ? verification.universal.parsedCount : 0,
           },
           decision: blocking ? 'deny' : 'allow',
           gateId: verification.goalContract && verification.goalContract.matched
             ? 'completion_goal_contract'
-            : 'completion_claim',
+            : (factualMismatches.length > 0 ? 'completion_claim_factual' : 'completion_claim'),
           message: blocking
-            ? `Completion claim blocked — missing evidence: ${missingActions.join(', ') || 'unknown'}`
+            ? (factualMismatches.length > 0
+              ? `Completion claim blocked — factual mismatch/unconfigured: ${factualMismatches.map((c) => c.message).join('; ')}`
+              : `Completion claim blocked — missing evidence: ${missingActions.join(', ') || 'unknown'}`)
             : `Completion claim verified (${verification.verified ? 'evidence present' : 'no matching gate'})`,
           source: 'completion-gate',
         });
@@ -1413,6 +1446,8 @@ async function callToolInner(name, args) {
         missingActions,
         checks: verification.checks,
         goalContract: verification.goalContract,
+        universal: verification.universal,
+        factualMismatches,
         sessionId: args.sessionId || null,
       });
     }
@@ -1477,6 +1512,7 @@ async function callToolInner(name, args) {
         mcp: args.mcp,
         mcpToolCall: args.mcpToolCall,
         budget: args.budget,
+        financialControl: args.financialControl,
         usage: args.usage,
       }, {
         provider: args.provider,
@@ -1486,6 +1522,7 @@ async function callToolInner(name, args) {
         tokenEstimate: args.tokenEstimate,
         costUsd: args.costUsd,
         budget: args.budget,
+        financialControl: args.financialControl,
         repoPath: args.repoPath,
         baseBranch: args.baseBranch,
         affectedFiles: changedFiles.length > 0 ? changedFiles : undefined,

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.31.0",
+        "thumbgate@1.34.0",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -3236,6 +3236,16 @@ function aiInventory() {
   console.log(payload);
 }
 
+function verifyClaimsCmd() {
+  const { runCli } = require(path.join(PKG_ROOT, 'scripts', 'universal-claim-evaluator'));
+  process.exitCode = runCli(process.argv.slice(3));
+}
+
+function claimStopCheckCmd() {
+  const { main } = require(path.join(PKG_ROOT, 'scripts', 'hook-stop-anti-claim'));
+  main();
+}
+
 function help() {
   const v = pkgVersion();
   const helpArgs = process.argv.slice(3);
@@ -3258,6 +3268,7 @@ function help() {
     console.log('  explore                                           Interactive TUI for lessons, gates, stats');
     console.log('  dashboard                                         Open the local ThumbGate dashboard');
     console.log('  ai-inventory                                      Scan AI/ML components and export ML-BOM evidence');
+    console.log('  verify-claims --claim="..."                     Recheck factual claims against configured sources');
     console.log('  doctor                                            Audit runtime isolation + bootstrap context');
     console.log('  break-glass --reason="..."                       Short TTL recovery if gates over-fire');
     console.log('  brain [--write]                                   Build the agent-readable context brain (lessons + rules + gates)');
@@ -3304,6 +3315,7 @@ function help() {
   console.log('  cache-update          Refresh Claude statusline cache from stdin');
   console.log('  statusline-render     Render ThumbGate Claude status line');
   console.log('  hook-auto-capture     Process Claude UserPromptSubmit inline feedback');
+  console.log('  claim-stop-check      Recheck configured factual claims before Claude stops');
   console.log('  session-start         Refresh local ThumbGate session cache');
   console.log('');
 
@@ -3412,6 +3424,8 @@ const SUBCOMMAND_HELP = {
   lessons:       'Usage: npx thumbgate lessons [--query="..."] [--limit=N]\n\nSearch the lesson database (Pro feature).',
   search:        'Usage: npx thumbgate search <query>\n\nSearch ThumbGate knowledge base (Pro feature).',
   'gate-check':  'Usage: npx thumbgate gate-check\n\nPreToolUse hook interface: reads tool call JSON from stdin, outputs gate verdict.',
+  'claim-stop-check': 'Usage: npx thumbgate claim-stop-check\n\nClaude Stop-hook interface: reads the hook payload from stdin and blocks factual claims that disagree with configured sources.',
+  'verify-claims': 'Usage: npx thumbgate verify-claims --claim="the row count is 1,284" [--config=.thumbgate/claim-verifiers.json] [--cwd=path] [--json]\n\nRecheck supported factual claims against operator-configured SQLite, filesystem, and JSON sources. Exits non-zero on mismatch, missing verifier, or verifier error.',
   'hermes-gate': 'Usage: npx thumbgate hermes-gate\n\nNous Research Hermes Agent pre_tool_call shell hook: reads Hermes tool-call JSON from stdin, runs the ThumbGate gate pipeline (strict by default), and outputs {"decision":"block","reason":...} to veto or {} to allow. Gates terminal/patch/skill_manage etc. See adapters/hermes/config.yaml.',
   'break-glass': 'Usage: npx thumbgate break-glass --reason="why" [--ttl=5m] [--json]\n\nShort-lived recovery path for over-firing gates. Allows hook settings edits and satisfies PR-create/thread-check gates without disabling core destructive-action protections.',
   serve:         'Usage: npx thumbgate serve\n\nStart the MCP stdio server. This is for agent runtimes, not the local HTTP dashboard.',
@@ -3690,6 +3704,9 @@ switch (COMMAND) {
   case 'hook-auto-capture':
     hookAutoCapture();
     break;
+  case 'claim-stop-check':
+    claimStopCheckCmd();
+    break;
   case 'session-start':
     sessionStart();
     break;
@@ -4185,6 +4202,10 @@ switch (COMMAND) {
   case 'gate-stats':
     gateStats();
     break;
+  case 'verify-claims':
+  case 'verify-claim':
+    verifyClaimsCmd();
+    break;
   case 'eval':
   case 'prompt-eval':
     evalCmd();

package/config/gates/claim-verifiers.example.json

@@ -0,0 +1,42 @@
+{
+  "version": 1,
+  "description": "Configured sources of truth for the universal claim evaluator. Copy to .thumbgate/claim-verifiers.json or config/gates/claim-verifiers.json. Queries and paths come only from this file — never from claim text.",
+  "verifiers": [
+    {
+      "id": "orders-row-count",
+      "kind": "sqlite_count",
+      "match": {
+        "kinds": ["count"],
+        "subjects": ["row count", "rows", "orders", "order count", "total rows"]
+      },
+      "dbPath": "data/app.sqlite",
+      "query": "SELECT COUNT(*) AS n FROM orders"
+    },
+    {
+      "id": "readme-line-count",
+      "kind": "file_lines",
+      "match": {
+        "kinds": ["file_lines"],
+        "paths": ["README.md"]
+      },
+      "path": "README.md"
+    },
+    {
+      "id": "package-version",
+      "kind": "json_path",
+      "match": {
+        "kinds": ["value"],
+        "subjects": ["version", "package version"]
+      },
+      "path": "package.json",
+      "jsonPath": "version"
+    },
+    {
+      "id": "nightly-invoices",
+      "kind": "json_path",
+      "claimTemplate": "The nightly batch built {{value}} invoices",
+      "path": "metrics.json",
+      "jsonPath": "nightly.invoices"
+    }
+  ]
+}

package/config/gates/claim-verifiers.json

@@ -0,0 +1,25 @@
+{
+  "version": 1,
+  "description": "Default factual claim verifiers shipped with ThumbGate. Override with .thumbgate/claim-verifiers.json or THUMBGATE_CLAIM_VERIFIERS_PATH. Queries and paths are operator-owned — never taken from claim text.",
+  "verifiers": [
+    {
+      "id": "package-version",
+      "kind": "json_path",
+      "match": {
+        "kinds": ["value"],
+        "subjects": ["version", "package version"]
+      },
+      "path": "package.json",
+      "jsonPath": "version"
+    },
+    {
+      "id": "package-json-exists",
+      "kind": "file_exists",
+      "match": {
+        "kinds": ["file_exists"],
+        "paths": ["package.json"]
+      },
+      "path": "package.json"
+    }
+  ]
+}

package/config/mcp-allowlists.json

@@ -13,6 +13,7 @@
       "construct_context_pack",
       "context_provenance",
       "context_stuff_lessons",
+      "create_purchase_requisition",
       "dashboard",
       "describe_reliability_entity",
       "describe_semantic_entity",
@@ -41,6 +42,7 @@
       "list_harnesses",
       "list_human_escalations",
       "list_intents",
+      "list_purchase_requisitions",
       "managed_agent_status",
       "native_messaging_audit",
       "open_feedback_session",
@@ -61,10 +63,12 @@
       "recall",
       "record_action_receipt",
       "record_task_outcome",
+      "reconcile_purchase_ledger",
       "reflect_on_feedback",
       "register_claim_gate",
       "report_product_issue",
       "request_human_escalation",
+      "reserve_purchase_requisition",
       "require_evidence_for_claim",
       "retrieve_lessons",
       "run_autoresearch",
@@ -76,6 +80,7 @@
       "search_thumbgate",
       "self_distill_status",
       "session_report",
+      "settle_purchase_requisition",
       "set_branch_governance",
       "set_task_scope",
       "settings_status",
@@ -91,6 +96,7 @@
       "approve_protected_action",
       "capture_feedback",
       "check_operational_integrity",
+      "create_purchase_requisition",
       "estimate_uncertainty",
       "feedback_stats",
       "feedback_summary",
@@ -102,6 +108,7 @@
       "get_scope_state",
       "get_task_outcomes",
       "list_human_escalations",
+      "list_purchase_requisitions",
       "open_feedback_session",
       "parallel_workflow",
       "plan_agent_design_governance",
@@ -114,15 +121,18 @@
       "prevention_rules",
       "recall",
       "record_task_outcome",
+      "reconcile_purchase_ledger",
       "reflect_on_feedback",
       "report_product_issue",
       "request_human_escalation",
+      "reserve_purchase_requisition",
       "require_evidence_for_claim",
       "retrieve_lessons",
       "satisfy_gate",
       "search_lessons",
       "search_thumbgate",
       "session_report",
+      "settle_purchase_requisition",
       "set_branch_governance",
       "set_task_scope",
       "suggest_fix",
@@ -136,6 +146,7 @@
       "capture_feedback",
       "check_operational_integrity",
       "commerce_recall",
+      "create_purchase_requisition",
       "feedback_stats",
       "feedback_summary",
       "gate_check",
@@ -144,14 +155,18 @@
       "get_scope_state",
       "get_task_outcomes",
       "list_human_escalations",
+      "list_purchase_requisitions",
       "prevention_rules",
       "recall",
       "record_task_outcome",
+      "reconcile_purchase_ledger",
       "request_human_escalation",
+      "reserve_purchase_requisition",
       "retrieve_lessons",
       "search_thumbgate",
       "set_branch_governance",
       "set_task_scope",
+      "settle_purchase_requisition",
       "suggest_fix",
       "track_action",
       "verify_claim",
@@ -178,6 +193,7 @@
       "list_harnesses",
       "list_human_escalations",
       "list_intents",
+      "list_purchase_requisitions",
       "native_messaging_audit",
       "perplexity_ask",
       "perplexity_search",
@@ -190,6 +206,7 @@
       "plan_proactive_agent_eval_guardrails",
       "plan_reward_hacking_guardrails",
       "recall",
+      "reconcile_purchase_ledger",
       "require_evidence_for_claim",
       "retrieve_lessons",
       "search_lessons",
@@ -222,6 +239,7 @@
       "list_harnesses",
       "list_human_escalations",
       "list_intents",
+      "list_purchase_requisitions",
       "native_messaging_audit",
       "perplexity_ask",
       "perplexity_search",
@@ -234,6 +252,7 @@
       "plan_proactive_agent_eval_guardrails",
       "plan_reward_hacking_guardrails",
       "recall",
+      "reconcile_purchase_ledger",
       "require_evidence_for_claim",
       "retrieve_lessons",
       "run_harness",
@@ -259,6 +278,7 @@
       "list_harnesses",
       "list_human_escalations",
       "list_intents",
+      "list_purchase_requisitions",
       "native_messaging_audit",
       "plan_agent_design_governance",
       "plan_chatgpt_ads_readiness",
@@ -268,6 +288,7 @@
       "plan_proactive_agent_eval_guardrails",
       "plan_reward_hacking_guardrails",
       "retrieve_lessons",
+      "reconcile_purchase_ledger",
       "search_lessons",
       "search_thumbgate",
       "settings_status",

package/hooks/hooks.json

@@ -2,7 +2,7 @@
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "Bash|Edit|Write",
+        "matcher": ".*",
         "hooks": [
           {
             "type": "command",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.31.0",
+  "version": "1.34.0",
   "description": "ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.",
   "homepage": "https://thumbgate.ai",
   "repository": {
@@ -117,6 +117,8 @@
     "scripts/feedback-session.js",
     "scripts/feedback-to-rules.js",
     "scripts/feedback_quality_eval.py",
+    "scripts/file-ledger-lock.js",
+    "scripts/financial-control-plane.js",
     "scripts/filesystem-search.js",
     "scripts/fs-utils.js",
     "scripts/grafana-revenue-evidence.js",
@@ -268,6 +270,7 @@
     "scripts/task-outcomes.js",
     "scripts/tool-kpi-tracker.js",
     "scripts/upstream-contribution-engine.js",
+    "scripts/universal-claim-evaluator.js",
     "scripts/user-profile.js",
     "scripts/validate-workflow-contract.js",
     "scripts/vector-store.js",
@@ -460,7 +463,7 @@
     "social:prospect:bluesky": "node scripts/social-bluesky-prospecting.js",
     "social:prospect:bluesky:dry": "node scripts/social-bluesky-prospecting.js --dry-run",
     "social:reply-publish:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --publish-approved --dry-run",
-    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring",
+    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:universal-claim-evaluator && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring",
     "test:python": "python3 -m pytest tests/*.py",
     "test:check-update": "node --test tests/check-update.test.js",
     "test:hook-stop-verify-deploy": "node --test tests/hook-stop-verify-deploy.test.js",
@@ -510,7 +513,7 @@
     "eval:feedback": "node scripts/prompt-eval.js --from-feedback",
     "eval:feedback-quality": "python3 scripts/feedback_quality_eval.py",
     "eval:classifier": "python3 scripts/eval_gate_classifier.py",
-    "eval:rag": "node scripts/eval-rag.js",
+    "eval:rag": "node -r dotenv/config scripts/eval-rag.js",
     "eval:quality": "node scripts/eval-quality-suite.js",
     "test:eval-quality": "node --test tests/ragas-style-metrics.test.js tests/retrieval-ranking-eval.test.js tests/ir-metrics.test.js",
     "test:eval-rag": "node --test tests/eval-rag.test.js tests/retrieval-hybrid-ablation.test.js",
@@ -599,7 +602,7 @@
     "test:quality": "node --test tests/validate-feedback.test.js tests/feedback-quality-eval-python.test.js tests/eval-gate-classifier.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
-    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js tests/packed-provider-payment-reconciler-e2e.test.js tests/packed-revenue-remediation-e2e.test.js",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js tests/packed-provider-payment-reconciler-e2e.test.js tests/packed-revenue-remediation-e2e.test.js tests/prove-production-authenticated.test.js tests/verify-npm-githead.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
     "test:workflow": "node --test tests/parallel-workflow.test.js tests/parallel-workflow-public.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/workflow-intake-queue.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js tests/revenue-action-eligibility.test.js tests/revenue-evidence-remediation.test.js tests/gtm-revenue-action-eligibility.test.js tests/revenue-offer-ladder.test.js tests/revenue-offer-system.test.js tests/buyer-paths.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js && node --test tests/eval-proof-pack-pages.test.js && npm run test:proof-pack-cadence",
     "test:revenue-evidence-remediation": "node --test tests/revenue-evidence-remediation.test.js",
@@ -611,10 +614,10 @@
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
     "test:autoresearch": "node --test tests/autoresearch.test.js",
-    "test:ops": "node --test tests/qa-scenario-planner.test.js tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/gates-engine-upgrade-cta.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js tests/auto-context-packs.test.js tests/daily-block-cap.test.js tests/auto-promote-regression-gate.test.js",
+    "test:ops": "node --test tests/qa-scenario-planner.test.js tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/financial-control-plane.test.js tests/gate-stats.test.js tests/gates-engine-upgrade-cta.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js tests/auto-context-packs.test.js tests/daily-block-cap.test.js tests/auto-promote-regression-gate.test.js",
     "test:session-analyzer": "node --test tests/session-analyzer.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test --test-concurrency=1 tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/secret-fixture-safety.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js tests/mcp-tools-suggest-fix.test.js tests/deny-network-egress-pattern.test.js tests/git-pathspec-scope.test.js tests/git-global-option-bypass.test.js tests/gate-evasion-matrix.test.js",
+    "test:gates": "node --test --test-concurrency=1 tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/universal-claim-evaluator.test.js tests/secret-scanner.test.js tests/secret-fixture-safety.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js tests/mcp-tools-suggest-fix.test.js tests/deny-network-egress-pattern.test.js tests/git-pathspec-scope.test.js tests/git-global-option-bypass.test.js tests/gate-evasion-matrix.test.js",
     "test:budget": "node --test tests/budget-guard.test.js tests/budget-enforcer.test.js tests/tokenomics-cost-guard.test.js tests/hook-no-budget-lockout.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
@@ -898,8 +901,8 @@
     "outreach:case-study": "node scripts/generate-case-study-outreach.js",
     "test:proof-pack-cadence": "node --test tests/refresh-proof-pack.test.js tests/case-study-outreach.test.js",
     "test:evaluations-page": "node --test tests/evaluations-page.test.js",
-    "prove:rag": "node scripts/prove-rag-pipeline.js",
-    "test:rag-pipeline": "node --test tests/rag-document-pipeline.test.js tests/rag-structured-output.test.js tests/rag-stage-contracts.test.js tests/prove-rag-pipeline.test.js tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js tests/pragmatic-hybrid-search.test.js",
+    "prove:rag": "node -r dotenv/config scripts/prove-rag-pipeline.js",
+    "test:rag-pipeline": "node --require dotenv/config --test tests/rag-document-pipeline.test.js tests/rag-structured-output.test.js tests/rag-stage-contracts.test.js tests/prove-rag-pipeline.test.js tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js tests/pragmatic-hybrid-search.test.js",
     "eval:ranking": "node scripts/retrieval-ranking-eval.js",
     "test:ir-metrics": "node --test tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js",
     "test:pragmatic-hybrid": "node --test tests/pragmatic-hybrid-search.test.js",
@@ -920,7 +923,9 @@
     "test:llm-gateway": "node --test tests/llm-gateway-provider.test.js",
     "test:request-envelope": "node --test tests/request-envelope.test.js",
     "test:a-plus-evidence": "node --test tests/a-plus-evidence-scorecard.test.js",
-    "score:a-plus": "node scripts/a-plus-evidence-scorecard.js"
+    "score:a-plus": "node scripts/a-plus-evidence-scorecard.js",
+    "test:universal-claim-evaluator": "node --test tests/universal-claim-evaluator.test.js",
+    "verify:claims": "node scripts/universal-claim-evaluator.js"
   },
   "keywords": [
     "mcp",

package/public/index.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <meta name="generator" content="ThumbGate">
   <meta name="author" content="Igor Ganapolsky">
-  <meta name="thumbgate-version" content="1.31.0">
+  <meta name="thumbgate-version" content="1.34.0">
   __GOOGLE_SITE_VERIFICATION_META__
   <link rel="icon" type="image/png" href="/thumbgate-icon.png">
   <link rel="canonical" href="__APP_ORIGIN__/">
@@ -942,7 +942,7 @@ next      decision recorded before execution</pre>
 
   <footer>
     <div class="shell footer-inner">
-      <span>ThumbGate · MIT License · npm v1.31.0</span>
+      <span>ThumbGate · MIT License · npm v1.34.0</span>
       <div class="footer-links">
         <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
         <a href="/guide">Technical setup</a>

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.31.0",
+  "softwareVersion": "1.34.0",
   "url": "https://thumbgate.ai/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -203,7 +203,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.31.0</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.34.0</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>