npm - thumbgate - Versions diffs - 1.34.3 → 1.37.1 - Mend

thumbgate 1.34.3 → 1.37.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (200) hide show

package/.agents/skills/cyberstrike-compare-not-clone/SKILL.md +36 -0
package/.agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md +77 -0
package/.agents/skills/jit-harness-compare-not-clone/SKILL.md +34 -0
package/.agents/skills/openui-catalog-compose-honesty/SKILL.md +64 -0
package/.agents/skills/zvec-grep-compare-not-clone/SKILL.md +34 -0
package/.claude-plugin/plugin.json +1 -1
package/.well-known/llms.txt +1 -0
package/.well-known/mcp/server-card.json +1 -1
package/CONTRIBUTING.md +95 -0
package/README.md +195 -632
package/THIRD_PARTY_NOTICES.md +89 -0
package/adapters/claude/.mcp.json +2 -2
package/adapters/forge/forge.yaml +3 -3
package/adapters/future-agi/.mcp.json +8 -0
package/adapters/future-agi/FUTURE_AGI.md +23 -0
package/adapters/future-agi/config.toml +3 -0
package/adapters/future-agi/future-agi-bridge.js +9 -0
package/adapters/future-agi/opencode.json +8 -0
package/adapters/herdr/herdr-plugin.toml +18 -0
package/adapters/mcp/server-stdio.js +238 -25
package/adapters/opencode/opencode.json +1 -1
package/adapters/workos/WORKOS.md +52 -0
package/bin/cli.js +373 -5
package/bin/futureagi-bridge +9 -0
package/config/gate-templates.json +653 -4
package/config/gates/actor-critic-audit.json +34 -0
package/config/gates/default.json +21 -2
package/config/gates/five-walls-governance.json +34 -0
package/config/gates/future-agi-guardrails.json +34 -0
package/config/gates/radware-threat-defense-2026.json +61 -0
package/config/gates/simatree-data-governance.json +33 -0
package/config/mcp-allowlists.json +4 -0
package/config/merge-quality-checks.json +10 -1
package/config/model-candidates.json +382 -24
package/config/model-tiers.json +18 -0
package/config/post-deploy-marketing-pages.json +10 -0
package/config/progressive/01-wire-only.json +11 -0
package/config/progressive/02-dashboard-empty-ok.json +10 -0
package/config/progressive/03-one-lesson.json +10 -0
package/config/progressive/04-warn-fires.json +11 -0
package/config/progressive/05-strict-optional.json +11 -0
package/config/progressive/README.md +15 -0
package/config/schemas/broker-execution-receipt.schema.json +139 -0
package/config/schemas/provider-execution-attestation-v1.schema.json +58 -0
package/conformance/provider-attestation/vectors.json +320 -0
package/docs/specs/provider-execution-attestation-v1.md +69 -0
package/openapi/openapi.yaml +15 -0
package/package.json +401 -147
package/public/about.html +2 -2
package/public/ai-malpractice-prevention.html +7 -7
package/public/blog/a-10-dollar-vps-is-not-a-computer.html +143 -0
package/public/blog/a-receipt-is-not-world-state.html +388 -0
package/public/blog/git-at-agent-scale.html +374 -0
package/public/blog/no-llm-in-the-gate.html +133 -0
package/public/blog.html +80 -0
package/public/case-studies.html +16 -1
package/public/compare.html +28 -0
package/public/diagnostic.html +216 -7
package/public/docs/connectors.html +39 -0
package/public/federal.html +2 -2
package/public/founders.html +639 -0
package/public/index.html +87 -9
package/public/install.html +8 -8
package/public/learn.html +39 -0
package/public/numbers.html +2 -2
package/public/peter.html +310 -0
package/public/platform-partners.html +119 -0
package/public/pricing.html +24 -3
package/public/privacy.html +117 -0
package/public/pro.html +17 -0
package/public/support.html +62 -0
package/public/terms.html +130 -0
package/public/third-party-notices.html +95 -0
package/public/yt.html +351 -0
package/scripts/action-receipts.js +133 -3
package/scripts/adaptive-governance-arena.js +349 -0
package/scripts/admin-override.js +205 -0
package/scripts/agent-action-inventory.js +869 -0
package/scripts/agent-audit-trace.js +42 -2
package/scripts/agent-egress-policy.js +1117 -0
package/scripts/agent-memory-lifecycle.js +141 -2
package/scripts/agent-operations-planner.js +441 -1
package/scripts/agent-readiness.js +68 -0
package/scripts/agent-security-central.js +647 -0
package/scripts/allowlist-bridge-honesty.js +417 -0
package/scripts/async-job-runner.js +102 -11
package/scripts/audit-trail.js +212 -0
package/scripts/auto-promote-gates.js +178 -27
package/scripts/billing.js +1 -1
package/scripts/broker-execution-receipts.js +719 -0
package/scripts/budget-aware-gates-proof.js +423 -0
package/scripts/claude-feedback-sync.js +29 -3
package/scripts/claw-harness-production.js +237 -0
package/scripts/cli-progress.js +111 -0
package/scripts/cli-schema.js +163 -1
package/scripts/codex-runbook-flywheel.js +318 -0
package/scripts/context-footprint.js +186 -0
package/scripts/contextfs.js +143 -61
package/scripts/dashboard-limits.js +27 -0
package/scripts/dashboard.js +279 -9
package/scripts/deepseek-v4-runtime-guardrails.js +72 -6
package/scripts/docker-sandbox-planner.js +18 -0
package/scripts/double-blind-eval-protocol.js +252 -0
package/scripts/edotenv-rl-gateway.js +259 -0
package/scripts/ensure-production-search-corpus.js +162 -0
package/scripts/eval-holdout.js +311 -0
package/scripts/feedback-aggregate.js +21 -2
package/scripts/feedback-loop.js +87 -5
package/scripts/feedback-quality.js +9 -0
package/scripts/file-ledger-lock.js +4 -1
package/scripts/financial-control-plane.js +41 -1
package/scripts/find-dormant-requires.js +118 -0
package/scripts/fs-utils.js +84 -8
package/scripts/gate-stats.js +2 -2
package/scripts/gates-engine.js +859 -58
package/scripts/generate-case-study-outreach.js +24 -15
package/scripts/git-at-scale.js +628 -0
package/scripts/governance-conflict-audit.js +1650 -0
package/scripts/governance-difficulty-curriculum.js +328 -0
package/scripts/graphrag-retrieval.js +275 -0
package/scripts/gurobi-optimizer.js +324 -0
package/scripts/gurobi_optimizer.py +485 -0
package/scripts/harness-selector.js +82 -1
package/scripts/hidden-entry-points.js +284 -0
package/scripts/human-escalation.js +199 -1
package/scripts/hybrid-feedback-context.js +152 -19
package/scripts/intent-governed-execution.js +602 -0
package/scripts/intervention-policy.js +123 -20
package/scripts/jit-harness-compose.js +628 -0
package/scripts/jsonl-watcher.js +10 -0
package/scripts/lesson-embedding-index.js +95 -12
package/scripts/lesson-retrieval.js +105 -19
package/scripts/local-model-profile.js +19 -2
package/scripts/mailer/resend-mailer.js +1 -1
package/scripts/matryoshka-embedding.js +235 -0
package/scripts/mcp-oauth.js +42 -4
package/scripts/mcp-session-handles.js +1016 -0
package/scripts/mcp-wiring-doctor.js +314 -0
package/scripts/memory-firewall.js +115 -2
package/scripts/memory-scope-readiness.js +299 -0
package/scripts/memory-vs-rag-route.js +161 -0
package/scripts/model-tier-router.js +148 -21
package/scripts/nvidia-specdecode-al-doctor.js +536 -0
package/scripts/openui-catalog-compose-honesty.js +593 -0
package/scripts/operational-integrity.js +19 -1
package/scripts/override-audit.js +213 -0
package/scripts/package-manager-honesty-doctor.js +458 -0
package/scripts/pr-manager.js +63 -1
package/scripts/prove-herdr-adapter.js +52 -0
package/scripts/prove-memory-pyramid-and-symbolic-canvas.js +95 -0
package/scripts/prove-workos.js +73 -0
package/scripts/provider-attestation-conformance.js +192 -0
package/scripts/provider-receipt-contract.js +136 -0
package/scripts/qwen38-max-cost-optimizer.js +401 -0
package/scripts/radware-threat-defense.js +280 -0
package/scripts/rag-embedding-identity.js +221 -0
package/scripts/rag-precision-guardrails.js +112 -2
package/scripts/remote-feedback-capture.js +159 -0
package/scripts/research-agent-harness.js +256 -0
package/scripts/rsi-safety-hillclimb.js +200 -0
package/scripts/rule-sprawl.js +188 -0
package/scripts/schedule-manager.js +147 -0
package/scripts/self-heal.js +8 -0
package/scripts/session-lease.js +415 -0
package/scripts/simatree-data-governance.js +347 -0
package/scripts/slo-alert-engine.js +172 -7
package/scripts/solver-parity.js +539 -0
package/scripts/stealth-memory-injection-gate.js +333 -0
package/scripts/switchyard-router.js +366 -0
package/scripts/telemetry-analytics.js +84 -27
package/scripts/temporal-decay-weighting.js +138 -0
package/scripts/test-all.js +165 -0
package/scripts/token-savings.js +42 -0
package/scripts/tool-kpi-tracker.js +108 -5
package/scripts/tool-registry.js +193 -5
package/scripts/universal-claim-evaluator.js +14 -2
package/scripts/vector-store.js +279 -9
package/scripts/workflow-notebook.js +391 -0
package/scripts/workflow-sentinel.js +111 -12
package/scripts/workos-production-guard.js +260 -0
package/scripts/workspace-search-route.js +515 -0
package/server.json +2 -2
package/src/agent-identity-boundary.js +76 -0
package/src/agent-retrieval-cache.js +155 -0
package/src/alert-noise-ledger.js +502 -0
package/src/api/server.js +802 -185
package/src/git-fast-cache.js +220 -0
package/src/git-wal-sync.js +156 -0
package/src/hash-anchored-edit.js +82 -0
package/src/hermes-platform-protocol.js +475 -0
package/src/hermes-sync-plane.js +241 -0
package/src/index.js +30 -1
package/src/iso42001-compliance-guard.js +97 -0
package/src/latency-budget.js +244 -0
package/src/mcp-writeguard.js +316 -0
package/src/miminions-adapter.js +106 -0
package/src/pipeline-compass.js +104 -0
package/src/ppl-alert-pipeline.js +284 -0
package/src/rendezvous-router.js +90 -0
package/src/security-questionnaire.js +195 -0

package/public/founders.html ADDED Viewed

@@ -0,0 +1,639 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ThumbGate for Founders — Stop Agent Mistakes Before They Cost | $499 Diagnostic</title>
+<meta name="description" content="You didn't hire AI agents to babysit them. Turn one repeated agent failure into a proved gate in two business days. $499 managed diagnostic. Refund if not a fit.">
+<link rel="canonical" href="__APP_ORIGIN__/founders">
+<link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
+<meta property="og:title" content="ThumbGate for Founders — $499 Diagnostic Gate">
+<meta property="og:description" content="Scale agent impact without the babysitting. One workflow, one gate, proof in two business days.">
+<meta property="og:url" content="__APP_ORIGIN__/founders">
+<meta property="og:type" content="website">
+<style>
+:root {
+  color-scheme: light;
+  --ink: #0f1412;
+  --muted: #5a6660;
+  --paper: #f4f1e8;
+  --card: #fffdf8;
+  --line: #d6d1c4;
+  --green: #006e52;
+  --green2: #004c3a;
+  --cyan: #0aa3b8;
+  --red: #a72f2f;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  color: var(--ink);
+  background: var(--paper);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  line-height: 1.55;
+}
+a { color: inherit; }
+.shell { width: min(1100px, calc(100% - 36px)); margin: 0 auto; }
+header {
+  position: sticky;
+  top: 0;
+  z-index: 20;
+  border-bottom: 1px solid var(--line);
+  background: rgba(244, 241, 232, .94);
+  backdrop-filter: blur(8px);
+}
+.nav {
+  min-height: 68px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+}
+.brand { font-weight: 900; letter-spacing: -.03em; text-decoration: none; font-size: 1.2rem; }
+.nav-actions { display: flex; gap: 10px; align-items: center; flex-wrap: wrap; }
+.btn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 44px;
+  padding: 0 16px;
+  border-radius: 10px;
+  border: 1px solid var(--green);
+  text-decoration: none;
+  font-weight: 800;
+  cursor: pointer;
+  font: inherit;
+  background: transparent;
+  color: var(--green);
+}
+.btn.primary {
+  background: var(--green);
+  color: #fff;
+  border-color: var(--green);
+}
+.btn.primary:hover { background: var(--green2); }
+.hero {
+  display: grid;
+  grid-template-columns: minmax(0, 1.1fr) minmax(300px, .9fr);
+  gap: 28px;
+  padding: 56px 0 28px;
+  align-items: start;
+}
+.eyebrow {
+  color: var(--green);
+  font-size: .75rem;
+  font-weight: 850;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+}
+h1 {
+  margin: 12px 0 16px;
+  font-size: clamp(2.4rem, 5.5vw, 4.4rem);
+  line-height: .96;
+  letter-spacing: -.04em;
+}
+.lede { margin: 0 0 22px; color: var(--muted); font-size: 1.12rem; max-width: 36rem; }
+.trust {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 10px;
+  margin: 18px 0 0;
+  color: var(--muted);
+  font-size: .88rem;
+}
+.trust span {
+  border: 1px solid var(--line);
+  background: var(--card);
+  border-radius: 999px;
+  padding: 6px 12px;
+}
+.card {
+  border: 1px solid var(--line);
+  border-radius: 16px;
+  background: var(--card);
+  box-shadow: 0 18px 48px rgba(20, 30, 25, .08);
+  padding: 24px;
+}
+.price {
+  margin: 6px 0 4px;
+  font-size: 3rem;
+  font-weight: 900;
+  letter-spacing: -.04em;
+  color: var(--green);
+}
+.price-note { margin: 0 0 16px; color: var(--muted); }
+label { display: block; margin: 0 0 6px; font-size: .86rem; font-weight: 800; }
+input[type=email] {
+  width: 100%;
+  border: 1px solid #aaa89f;
+  border-radius: 9px;
+  padding: 12px 13px;
+  font: inherit;
+  background: #fff;
+}
+.btn.block { width: 100%; margin-top: 10px; }
+.fine { margin: 10px 0 0; color: var(--muted); font-size: .8rem; }
+.checks { margin: 14px 0 0; padding: 0; list-style: none; }
+.checks li {
+  position: relative;
+  padding: 6px 0 6px 22px;
+  color: var(--muted);
+  font-size: .92rem;
+}
+.checks li::before {
+  content: "✓";
+  position: absolute;
+  left: 0;
+  color: var(--green);
+  font-weight: 900;
+}
+section { padding: 52px 0; border-top: 1px solid var(--line); }
+h2 {
+  margin: 0 0 12px;
+  font-size: clamp(1.7rem, 3.2vw, 2.5rem);
+  letter-spacing: -.03em;
+}
+.section-lede { margin: 0 0 22px; color: var(--muted); max-width: 40rem; }
+.pain-grid, .steps, .feature-grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 14px;
+}
+.pain, .step, .feature {
+  border: 1px solid var(--line);
+  border-radius: 14px;
+  background: var(--card);
+  padding: 20px;
+}
+.pain h3, .step h3, .feature h3 { margin: 0 0 8px; font-size: 1.05rem; }
+.pain p, .step p, .feature p { margin: 0; color: var(--muted); font-size: .93rem; }
+.step-num { color: var(--green); font-weight: 900; font-size: .85rem; letter-spacing: .08em; }
+table.compare {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: .9rem;
+  min-width: 640px;
+  background: var(--card);
+}
+table.compare th, table.compare td {
+  padding: 12px 14px;
+  border-bottom: 1px solid var(--line);
+  text-align: left;
+  vertical-align: top;
+}
+table.compare th { background: #efece3; }
+table.compare td:last-child { font-weight: 800; color: var(--green); }
+.table-wrap {
+  overflow-x: auto;
+  border: 1px solid var(--line);
+  border-radius: 14px;
+}
+.faq-item { border-bottom: 1px solid var(--line); }
+.faq-q {
+  width: 100%;
+  border: 0;
+  background: transparent;
+  text-align: left;
+  padding: 16px 0;
+  font: inherit;
+  font-weight: 800;
+  cursor: pointer;
+}
+.faq-a { display: none; padding: 0 0 16px; color: var(--muted); }
+.faq-item.open .faq-a { display: block; }
+.cta-band {
+  margin: 20px 0 0;
+  padding: 28px;
+  border-radius: 16px;
+  background: #e8f3ee;
+  border: 1px solid #b9d8c8;
+  display: flex;
+  flex-wrap: wrap;
+  gap: 14px;
+  align-items: center;
+  justify-content: space-between;
+}
+.cta-band h2 { margin: 0; font-size: 1.5rem; }
+.cta-band p { margin: 6px 0 0; color: var(--muted); }
+footer {
+  border-top: 1px solid var(--line);
+  padding: 28px 0 40px;
+  color: var(--muted);
+  font-size: .85rem;
+}
+.footer-inner { display: flex; justify-content: space-between; gap: 16px; flex-wrap: wrap; }
+@media (max-width: 860px) {
+  .hero, .pain-grid, .steps, .feature-grid { grid-template-columns: 1fr; }
+  h1 { font-size: 2.3rem; }
+}
+</style>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@graph": [
+    {
+      "@type": "SoftwareApplication",
+      "name": "ThumbGate",
+      "applicationCategory": "DeveloperApplication",
+      "operatingSystem": "Cross-platform",
+      "url": "__APP_ORIGIN__/",
+      "offers": {
+        "@type": "Offer",
+        "name": "Managed workflow diagnostic",
+        "price": "__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__",
+        "priceCurrency": "USD",
+        "url": "__APP_ORIGIN__/founders",
+        "availability": "https://schema.org/InStock"
+      }
+    },
+    {
+      "@type": "Service",
+      "name": "ThumbGate Managed Workflow Diagnostic",
+      "description": "Managed implementation that turns one repeated AI-agent failure into a configured pre-action gate with regression and rollout proof.",
+      "provider": { "@type": "Organization", "name": "ThumbGate", "url": "__APP_ORIGIN__/" },
+      "offers": {
+        "@type": "Offer",
+        "name": "Managed workflow diagnostic",
+        "price": "__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__",
+        "priceCurrency": "USD",
+        "url": "__APP_ORIGIN__/founders",
+        "availability": "https://schema.org/InStock"
+      }
+    },
+    {
+      "@type": "FAQPage",
+      "mainEntity": [
+        {
+          "@type": "Question",
+          "name": "How fast can I get started?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "Buy or submit fit check today. Managed delivery is two business days after access and the agreed workflow materials are available. Free local evaluate is minutes via npx thumbgate init."
+          }
+        },
+        {
+          "@type": "Question",
+          "name": "What if the workflow is not a fit?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "If the repeated failure cannot be reduced to one supported ThumbGate gate, the managed diagnostic order is refunded. We do not silently expand into open consulting."
+          }
+        },
+        {
+          "@type": "Question",
+          "name": "Is this a long-term contract?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "No. The diagnostic is one-time. Pro is monthly and cancels anytime. Multi-workflow or enterprise scope is separate after proof."
+          }
+        },
+        {
+          "@type": "Question",
+          "name": "How is this different from Upwork or hiring an ops person?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "Marketplaces give you a human. ThumbGate hardens the agents already in your stack with a pre-action gate, regression proof, and a written fence. Humans stay for exceptions; the repeat failure does not."
+          }
+        }
+      ]
+    }
+  ]
+}
+</script>
+</head>
+<body>
+<header>
+  <div class="shell nav">
+    <a class="brand" href="/">ThumbGate</a>
+    <div class="nav-actions">
+      <a class="btn" href="/pricing">Pricing</a>
+      <a class="btn primary" href="#buy" data-revenue-cta data-cta-id="founders_nav_buy" data-cta-placement="nav">Get started · $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</a>
+    </div>
+  </div>
+</header>
+<main class="shell">
+  <div class="hero">
+    <div>
+      <div class="eyebrow">For founders running AI agents in production</div>
+      <h1>Scale agent impact.<br>Stop babysitting the failures.</h1>
+      <p class="lede">You have agents running lead gen, content, sales follow-up, and ops. One of them keeps doing the same wrong thing — the outbound that should never have sent, the write that should never have landed, the deploy, the charge — and you are the one who catches it. That is not delegation, that is a second job. Your agent team needs a firewall: one check that fires before the tool call, so you can hand work off the way a CEO does instead of reading every diff.</p>
+      <div class="trust" aria-label="Proof points">
+        <span>Local-first PreToolUse gates</span>
+        <span>Fixed $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</span>
+        <span>Two business days after access</span>
+        <span>Refund if not a supported fit</span>
+      </div>
+    </div>
+    <aside class="card" id="buy" data-founders-offer>
+      <div class="eyebrow">Cash path · recommended</div>
+      <div class="price">$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</div>
+      <p class="price-note">One-time managed diagnostic. One supported local workflow. No subscription required.</p>
+      <form action="/go/diagnostic-pay" method="POST" data-founders-pay-form>
+        <label for="founders-email">Work email for the receipt</label>
+        <input id="founders-email" type="email" name="customer_email" autocomplete="email" required placeholder="you@company.com">
+        <input type="hidden" name="plan_id" value="sprint_diagnostic">
+        <input type="hidden" name="utm_source" value="founders">
+        <input type="hidden" name="utm_medium" value="direct_checkout">
+        <input type="hidden" name="utm_campaign" value="oceans_inspired_conversion">
+        <input type="hidden" name="utm_content" value="hero_paid_diagnostic">
+        <input type="hidden" name="cta_id" value="founders_hero_paid">
+        <input type="hidden" name="cta_placement" value="hero">
+        <input type="hidden" name="landing_path" value="/founders">
+        <button class="btn primary block" type="submit" data-revenue-cta data-cta-id="founders_hero_paid" data-cta-placement="hero">Gate my worst agent failure · $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</button>
+      </form>
+      <ul class="checks">
+        <li>One configured local gate for the agreed failure</li>
+        <li>Regression test + rollout and rollback proof</li>
+        <li>60-minute working review included</li>
+        <li>If it is not a supported fit, we refund</li>
+      </ul>
+      <p class="fine" data-founders-payment-hint>No Stripe session until you submit. Secure checkout. Fit boundary is explicit.</p>
+      <a class="fine" style="display:block;margin-top:12px;text-align:center;" href="/diagnostic#intake" data-revenue-cta data-cta-id="founders_hero_fit" data-cta-placement="hero">Not sure it fits? Send us the failure first</a>
+    </aside>
+  </div>
+  <section id="pain">
+    <div class="eyebrow">Why founders buy this</div>
+    <h2>You didn't hire AI agents to manage damage control.</h2>
+    <p class="section-lede">The cost is rarely the one bad run. It is the review loop you now own: every send, write, deploy, and charge gets a human read before it ships, and that human is you.</p>
+    <div class="pain-grid">
+      <article class="pain">
+        <h3>Drowning in repeat agent failures</h3>
+        <p>The same bad write, PR, deploy, or outbound keeps happening. Every incident burns founder or senior engineer hours.</p>
+      </article>
+      <article class="pain">
+        <h3>Tried prompts and docs — still drifts</h3>
+        <p>CLAUDE.md and Cursor rules help until the agent looks competent and skips them. You need a check before the tool call.</p>
+      </article>
+      <article class="pain">
+        <h3>US platform hire is slow and expensive</h3>
+        <p>Fully loaded platform or GRC work takes weeks and often ships dashboards instead of a gate on the exact failure.</p>
+      </article>
+    </div>
+  </section>
+  <section id="fit">
+    <div class="eyebrow">Before you pay</div>
+    <h2>Who this is for, and who it is not for.</h2>
+    <p class="section-lede">We would rather lose the order than take one we cannot close in two business days.</p>
+    <div class="pain-grid">
+      <article class="pain">
+        <h3>This is for you if</h3>
+        <ul class="checks">
+          <li>Your agents take real actions — outbound, publishing, code writes, deploys, spend</li>
+          <li>One specific failure has happened more than once and you can name it</li>
+          <li>You or a senior engineer are currently the safety net</li>
+          <li>The agents run on a supported local path you can give us access to</li>
+          <li>You want the rule enforced before the tool call, not caught in review</li>
+        </ul>
+      </article>
+      <article class="pain">
+        <h3>This is not for you if</h3>
+        <ul style="margin:14px 0 0; padding-left:20px; color:var(--muted); font-size:.92rem;">
+          <li>You want a general audit of everything your agents do</li>
+          <li>The failure is a one-off you cannot describe as a repeatable pattern</li>
+          <li>You need SOC 2, HIPAA, or any compliance certification — this is not that</li>
+          <li>You need rollout across several systems or teams in this engagement</li>
+          <li>You are trying to hire a person; this hardens the agents you already run</li>
+        </ul>
+      </article>
+      <article class="pain">
+        <h3>Not sure yet?</h3>
+        <p>Run the free local evaluate first. <code>npx thumbgate init</code> takes minutes, runs on your machine, and needs no card, no account, and no access to your repo. If it shows you the failure at the tool call, the managed diagnostic is just us doing the rest for you.</p>
+        <p style="margin-top:10px;"><a href="#buy" data-revenue-cta data-cta-id="founders_fit_buy" data-cta-placement="fit_section"><strong>Or skip ahead and gate my worst failure · $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</strong></a></p>
+      </article>
+    </div>
+  </section>
+  <section id="process">
+    <div class="eyebrow">From first call to proved gate</div>
+    <h2>Two business days after access — not a multi-month program.</h2>
+    <p class="section-lede">We will tell you if ThumbGate is the wrong fit. No silent conversion into open-ended consulting.</p>
+    <div class="steps">
+      <article class="step">
+        <div class="step-num">01 · 15–60 MIN</div>
+        <h3>Discovery / fit</h3>
+        <p>Share the repeated failure. We map the tool call boundary. If it cannot become one supported gate, we say so — and refund if you already paid.</p>
+      </article>
+      <article class="step">
+        <div class="step-num">02 · SAME ENGAGEMENT</div>
+        <h3>We install the gate</h3>
+        <p>Configure ALLOW / WARN / DENY for the agreed workflow on your supported local agent path.</p>
+      </article>
+      <article class="step">
+        <div class="step-num">03 · TWO BUSINESS DAYS</div>
+        <h3>Proof handoff</h3>
+        <p>Regression test plus written rollout and rollback evidence so the next similar action is caught before execution.</p>
+      </article>
+    </div>
+  </section>
+  <section id="what-you-get">
+    <div class="eyebrow">What you walk away with</div>
+    <h2>Four things exist when we are done that do not exist today.</h2>
+    <p class="section-lede">Deliverables, not features. Path to Pro ($19/mo) or multi-workflow scope opens after proof, not before.</p>
+    <div class="feature-grid">
+      <article class="feature">
+        <h3>The failure can no longer execute</h3>
+        <p>One configured ALLOW / WARN / DENY gate on the agreed workflow, firing before the agent writes, sends, deploys, or spends — not in the postmortem.</p>
+      </article>
+      <article class="feature">
+        <h3>Proof that it holds</h3>
+        <p>A regression test that replays the failure and shows it blocked, plus written rollout and rollback steps you can hand to whoever is on call.</p>
+      </article>
+      <article class="feature">
+        <h3>A written fence</h3>
+        <p>Exactly what the gate covers and what it does not, so nobody on your team assumes coverage that is not there.</p>
+      </article>
+      <article class="feature">
+        <h3>A rule that outlives the session</h3>
+        <p>Thumbs-down and lessons promote into rules the agent cannot casually skip, so the next similar action is caught without you watching.</p>
+      </article>
+    </div>
+    <p class="fine">Not included at $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__: multi-system implementation, compliance certification, or guaranteed savings.</p>
+  </section>
+  <section id="compare">
+    <div class="eyebrow">How it stacks up</div>
+    <h2>What the alternatives actually cost you.</h2>
+    <p class="section-lede">Ranges below are market ballparks for orientation, not quotes. The ThumbGate column is the offer on this page, at the price on this page.</p>
+    <div class="table-wrap">
+      <table class="compare">
+        <thead>
+          <tr>
+            <th></th>
+            <th>DIY prompts / CLAUDE.md</th>
+            <th>US platform hire</th>
+            <th>Typical VA / freelance ops</th>
+            <th>ThumbGate diagnostic</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr>
+            <td>Cash outlay</td>
+            <td>Model + review time</td>
+            <td>$5.5k–7k+/mo loaded</td>
+            <td>$2.5k–5k/mo varies</td>
+            <td>$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ once</td>
+          </tr>
+          <tr>
+            <td>Time to first hard gate</td>
+            <td>Manual upkeep</td>
+            <td>Weeks–months</td>
+            <td>1–5 weeks, high churn</td>
+            <td>Minutes free / 2 business days managed</td>
+          </tr>
+          <tr>
+            <td>When agent “looks competent”</td>
+            <td>Prompt may be skipped</td>
+            <td>Custom glue</td>
+            <td>Human judgment only</td>
+            <td>Configured gate at tool call</td>
+          </tr>
+          <tr>
+            <td>If it is the wrong fit</td>
+            <td>You keep thrashing</td>
+            <td>Costly to reverse</td>
+            <td>Restart search</td>
+            <td>Refund boundary written up front</td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
+  </section>
+  <section id="faq">
+    <div class="eyebrow">Questions before you pay</div>
+    <h2>Objections we hear from founders</h2>
+    <div class="faq">
+      <div class="faq-item">
+        <button class="faq-q" type="button" aria-expanded="false">How fast can I get started?</button>
+        <div class="faq-a">Buy or submit fit check today. Managed delivery is two business days after access and the agreed workflow materials are available. Free local evaluate is minutes: <code>npx thumbgate init</code>.</div>
+      </div>
+      <div class="faq-item">
+        <button class="faq-q" type="button" aria-expanded="false">What if the workflow is not a fit?</button>
+        <div class="faq-a">If the repeated failure cannot be reduced to one supported ThumbGate gate, the $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ order is refunded. We do not silently expand into open consulting.</div>
+      </div>
+      <div class="faq-item">
+        <button class="faq-q" type="button" aria-expanded="false">Is this a long-term contract?</button>
+        <div class="faq-a">No. The diagnostic is one-time. Pro is $19/mo and cancels anytime. Multi-workflow or enterprise scope is separate after proof.</div>
+      </div>
+      <div class="faq-item">
+        <button class="faq-q" type="button" aria-expanded="false">How is this different from Upwork or hiring an ops person?</button>
+        <div class="faq-a">Marketplaces give you a human and a prayer. ThumbGate hardens the agents already in your stack with a pre-action gate, regression proof, and a written fence. Humans stay in the loop for exceptions; the repeat failure does not.</div>
+      </div>
+    </div>
+    <div class="cta-band">
+      <div>
+        <h2>Two paths from here.</h2>
+        <p><strong>Path one:</strong> nothing changes. The same failure runs again next week and you catch it — or you don't, and a customer does.<br>
+        <strong>Path two:</strong> you name the failure today, and in two business days it is a gate with a regression test behind it and a fence written down.</p>
+        <p class="fine">Fixed $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__, one time · refunded if it is not a supported fit · gates run locally on your machine</p>
+      </div>
+      <div class="nav-actions" style="flex-direction:column; align-items:stretch;">
+        <a class="btn primary" href="#buy" data-revenue-cta data-cta-id="founders_bottom_buy" data-cta-placement="bottom_band">Gate my worst agent failure · $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</a>
+        <a class="btn" href="/checkout/pro?utm_source=founders&amp;utm_medium=bottom_band&amp;utm_campaign=oceans_inspired_conversion&amp;cta_id=founders_bottom_pro&amp;plan_id=pro" data-offer-link data-cta-id="founders_bottom_pro" data-plan-id="pro">Start Pro · $19/mo</a>
+      </div>
+    </div>
+  </section>
+</main>
+<footer>
+  <div class="shell footer-inner">
+    <span>ThumbGate · Local-first agent governance. Not a talent marketplace; no affiliation with Oceans Talent.</span>
+    <div>
+      <a href="/diagnostic">Diagnostic</a> ·
+      <a href="/pricing">Pricing</a> ·
+      <a href="__VERIFICATION_URL__">Proof</a> ·
+      <a href="/llm-context.md">LLM context</a>
+    </div>
+  </div>
+</footer>
+<script>
+'use strict';
+document.querySelectorAll('.faq-q').forEach((button) => {
+  button.addEventListener('click', () => {
+    const item = button.closest('.faq-item');
+    const open = item.classList.toggle('open');
+    button.setAttribute('aria-expanded', open ? 'true' : 'false');
+  });
+});
+(function () {
+  const search = new URLSearchParams(window.location.search);
+  const paidForm = document.querySelector('[data-founders-pay-form]');
+  const inboundSource = search.get('utm_source') || search.get('source');
+  const isAiventyxTraffic = String(inboundSource || '').trim().toLowerCase() === 'aiventyx';
+  if (paidForm && isAiventyxTraffic) {
+    paidForm.remove();
+    const paymentHint = document.querySelector('[data-founders-payment-hint]');
+    if (paymentHint) {
+      paymentHint.textContent = 'The Aiventyx payment path is paused while seller fees and downstream obligations remain unverified. Use Check workflow fit first without entering a marketplace payment or revenue-share commitment.';
+    }
+  } else if (paidForm) {
+    const passthrough = /^(utm_(source|medium|campaign|content|term)|source|acquisition_id|visitor_id|session_id|visitor_session_id|install_id|trace_id|creator|community|post_id|comment_id|campaign_variant|offer_code|referrer_host)$/i;
+    for (const [key, value] of search.entries()) {
+      if (!passthrough.test(key) || !value.trim()) continue;
+      let input = paidForm.querySelector(`input[name="${CSS.escape(key)}"]`);
+      if (!input) {
+        input = document.createElement('input');
+        input.type = 'hidden';
+        input.name = key;
+        paidForm.appendChild(input);
+      }
+      input.value = value.trim();
+    }
+    if (inboundSource && inboundSource.trim()) {
+      const sourceInput = paidForm.querySelector('input[name="utm_source"]');
+      if (sourceInput) sourceInput.value = inboundSource.trim();
+    }
+  }
+  function privacySignalOptOut() {
+    try {
+      return navigator.globalPrivacyControl === true
+        || navigator.doNotTrack === '1'
+        || window.doNotTrack === '1';
+    } catch (_) {
+      return false;
+    }
+  }
+  function telemetry(eventName, props) {
+    if (privacySignalOptOut()) return;
+    try {
+      navigator.sendBeacon && navigator.sendBeacon('/v1/telemetry/ping', JSON.stringify({
+        event: eventName,
+        page: '/founders',
+        source: 'founders_page',
+        props
+      }));
+    } catch (_) {}
+  }
+  document.addEventListener('click', function (event) {
+    const cta = event.target.closest('[data-revenue-cta], [data-offer-link]');
+    if (!cta) return;
+    telemetry('founders_cta_click', {
+      ctaId: cta.getAttribute('data-cta-id') || '',
+      ctaPlacement: cta.getAttribute('data-cta-placement') || '',
+      planId: cta.getAttribute('data-plan-id') || 'sprint_diagnostic'
+    });
+  });
+  if (paidForm) {
+    paidForm.addEventListener('submit', function () {
+      telemetry('founders_checkout_submit', {
+        ctaId: 'founders_hero_paid',
+        ctaPlacement: 'hero',
+        planId: 'sprint_diagnostic'
+      });
+    });
+  }
+})();
+</script>
+</body>
+</html>