thumbgate 1.35.0 → 1.37.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (204) hide show
  1. package/.agents/skills/cobble-hot-store-compare-not-clone/SKILL.md +80 -0
  2. package/.agents/skills/colab-compute-honesty-not-clone/SKILL.md +70 -0
  3. package/.agents/skills/cyberstrike-compare-not-clone/SKILL.md +36 -0
  4. package/.agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md +77 -0
  5. package/.agents/skills/jit-harness-compare-not-clone/SKILL.md +34 -0
  6. package/.agents/skills/openui-catalog-compose-honesty/SKILL.md +64 -0
  7. package/.agents/skills/token-shunt-honesty-not-clone/SKILL.md +67 -0
  8. package/.agents/skills/typesafe-typed-questions-not-clone/SKILL.md +82 -0
  9. package/.agents/skills/zvec-grep-compare-not-clone/SKILL.md +34 -0
  10. package/.claude-plugin/plugin.json +1 -1
  11. package/.well-known/llms.txt +1 -0
  12. package/.well-known/mcp/server-card.json +1 -1
  13. package/CONTRIBUTING.md +95 -0
  14. package/README.md +195 -632
  15. package/THIRD_PARTY_NOTICES.md +89 -0
  16. package/adapters/claude/.mcp.json +2 -2
  17. package/adapters/forge/forge.yaml +3 -3
  18. package/adapters/future-agi/.mcp.json +8 -0
  19. package/adapters/future-agi/FUTURE_AGI.md +23 -0
  20. package/adapters/future-agi/config.toml +3 -0
  21. package/adapters/future-agi/future-agi-bridge.js +9 -0
  22. package/adapters/future-agi/opencode.json +8 -0
  23. package/adapters/herdr/herdr-plugin.toml +18 -0
  24. package/adapters/mcp/server-stdio.js +238 -25
  25. package/adapters/opencode/opencode.json +1 -1
  26. package/adapters/workos/WORKOS.md +52 -0
  27. package/bin/cli.js +465 -3
  28. package/bin/futureagi-bridge +9 -0
  29. package/config/gate-templates.json +629 -4
  30. package/config/gates/actor-critic-audit.json +34 -0
  31. package/config/gates/default.json +9 -3
  32. package/config/gates/five-walls-governance.json +34 -0
  33. package/config/gates/future-agi-guardrails.json +34 -0
  34. package/config/gates/radware-threat-defense-2026.json +61 -0
  35. package/config/gates/simatree-data-governance.json +33 -0
  36. package/config/mcp-allowlists.json +4 -0
  37. package/config/merge-quality-checks.json +6 -0
  38. package/config/model-candidates.json +312 -29
  39. package/config/model-tiers.json +18 -0
  40. package/config/post-deploy-marketing-pages.json +10 -0
  41. package/config/progressive/01-wire-only.json +11 -0
  42. package/config/progressive/02-dashboard-empty-ok.json +10 -0
  43. package/config/progressive/03-one-lesson.json +10 -0
  44. package/config/progressive/04-warn-fires.json +11 -0
  45. package/config/progressive/05-strict-optional.json +11 -0
  46. package/config/progressive/README.md +15 -0
  47. package/config/schemas/broker-execution-receipt.schema.json +139 -0
  48. package/config/schemas/provider-execution-attestation-v1.schema.json +58 -0
  49. package/conformance/provider-attestation/vectors.json +320 -0
  50. package/docs/specs/provider-execution-attestation-v1.md +69 -0
  51. package/openapi/openapi.yaml +15 -0
  52. package/package.json +408 -150
  53. package/public/about.html +2 -2
  54. package/public/ai-malpractice-prevention.html +7 -7
  55. package/public/blog/a-10-dollar-vps-is-not-a-computer.html +143 -0
  56. package/public/blog/a-receipt-is-not-world-state.html +388 -0
  57. package/public/blog/git-at-agent-scale.html +374 -0
  58. package/public/blog/no-llm-in-the-gate.html +133 -0
  59. package/public/blog.html +80 -0
  60. package/public/case-studies.html +16 -1
  61. package/public/compare.html +28 -0
  62. package/public/diagnostic.html +216 -7
  63. package/public/docs/connectors.html +39 -0
  64. package/public/federal.html +2 -2
  65. package/public/founders.html +639 -0
  66. package/public/index.html +87 -9
  67. package/public/install.html +8 -8
  68. package/public/learn.html +39 -0
  69. package/public/numbers.html +2 -2
  70. package/public/peter.html +310 -0
  71. package/public/platform-partners.html +119 -0
  72. package/public/pricing.html +24 -3
  73. package/public/privacy.html +117 -0
  74. package/public/pro.html +17 -0
  75. package/public/support.html +62 -0
  76. package/public/terms.html +130 -0
  77. package/public/third-party-notices.html +95 -0
  78. package/public/yt.html +351 -0
  79. package/scripts/action-receipts.js +133 -3
  80. package/scripts/adaptive-governance-arena.js +349 -0
  81. package/scripts/admin-override.js +205 -0
  82. package/scripts/agent-action-inventory.js +869 -0
  83. package/scripts/agent-audit-trace.js +42 -2
  84. package/scripts/agent-egress-policy.js +1117 -0
  85. package/scripts/agent-memory-lifecycle.js +141 -2
  86. package/scripts/agent-operations-planner.js +441 -1
  87. package/scripts/agent-readiness.js +68 -0
  88. package/scripts/agent-security-central.js +647 -0
  89. package/scripts/allowlist-bridge-honesty.js +417 -0
  90. package/scripts/async-job-runner.js +102 -11
  91. package/scripts/audit-trail.js +212 -0
  92. package/scripts/billing.js +1 -1
  93. package/scripts/broker-execution-receipts.js +719 -0
  94. package/scripts/budget-aware-gates-proof.js +423 -0
  95. package/scripts/claude-feedback-sync.js +29 -3
  96. package/scripts/claw-harness-production.js +237 -0
  97. package/scripts/cli-schema.js +203 -1
  98. package/scripts/cobble-hot-store-split.js +600 -0
  99. package/scripts/codex-runbook-flywheel.js +318 -0
  100. package/scripts/colab-compute-honesty.js +281 -0
  101. package/scripts/context-footprint.js +186 -0
  102. package/scripts/contextfs.js +143 -61
  103. package/scripts/dashboard.js +251 -32
  104. package/scripts/deepseek-v4-runtime-guardrails.js +72 -6
  105. package/scripts/docker-sandbox-planner.js +18 -0
  106. package/scripts/double-blind-eval-protocol.js +252 -0
  107. package/scripts/edotenv-rl-gateway.js +259 -0
  108. package/scripts/ensure-production-search-corpus.js +162 -0
  109. package/scripts/eval-holdout.js +311 -0
  110. package/scripts/feedback-aggregate.js +21 -2
  111. package/scripts/feedback-loop.js +87 -5
  112. package/scripts/feedback-quality.js +9 -0
  113. package/scripts/file-ledger-lock.js +4 -1
  114. package/scripts/financial-control-plane.js +41 -1
  115. package/scripts/find-dormant-requires.js +118 -0
  116. package/scripts/fs-utils.js +84 -8
  117. package/scripts/gates-engine.js +826 -68
  118. package/scripts/generate-case-study-outreach.js +24 -15
  119. package/scripts/git-at-scale.js +628 -0
  120. package/scripts/governance-conflict-audit.js +1650 -0
  121. package/scripts/governance-difficulty-curriculum.js +328 -0
  122. package/scripts/graphrag-retrieval.js +275 -0
  123. package/scripts/gurobi-optimizer.js +324 -0
  124. package/scripts/gurobi_optimizer.py +485 -0
  125. package/scripts/harness-selector.js +82 -1
  126. package/scripts/hidden-entry-points.js +284 -0
  127. package/scripts/human-escalation.js +199 -1
  128. package/scripts/hybrid-feedback-context.js +152 -19
  129. package/scripts/intent-governed-execution.js +602 -0
  130. package/scripts/intervention-policy.js +123 -20
  131. package/scripts/jit-harness-compose.js +628 -0
  132. package/scripts/jsonl-watcher.js +10 -0
  133. package/scripts/lesson-embedding-index.js +95 -12
  134. package/scripts/lesson-retrieval.js +105 -19
  135. package/scripts/local-model-profile.js +19 -2
  136. package/scripts/mailer/resend-mailer.js +1 -1
  137. package/scripts/matryoshka-embedding.js +235 -0
  138. package/scripts/mcp-oauth.js +42 -4
  139. package/scripts/mcp-session-handles.js +1016 -0
  140. package/scripts/mcp-wiring-doctor.js +314 -0
  141. package/scripts/memory-firewall.js +115 -2
  142. package/scripts/memory-scope-readiness.js +299 -0
  143. package/scripts/memory-vs-rag-route.js +161 -0
  144. package/scripts/model-tier-router.js +148 -21
  145. package/scripts/nvidia-specdecode-al-doctor.js +536 -0
  146. package/scripts/openui-catalog-compose-honesty.js +593 -0
  147. package/scripts/operational-integrity.js +19 -1
  148. package/scripts/override-audit.js +213 -0
  149. package/scripts/package-manager-honesty-doctor.js +458 -0
  150. package/scripts/pr-manager.js +63 -1
  151. package/scripts/prove-herdr-adapter.js +52 -0
  152. package/scripts/prove-memory-pyramid-and-symbolic-canvas.js +95 -0
  153. package/scripts/prove-workos.js +73 -0
  154. package/scripts/provider-attestation-conformance.js +192 -0
  155. package/scripts/provider-receipt-contract.js +136 -0
  156. package/scripts/qwen38-max-cost-optimizer.js +401 -0
  157. package/scripts/radware-threat-defense.js +280 -0
  158. package/scripts/rag-embedding-identity.js +221 -0
  159. package/scripts/rag-precision-guardrails.js +112 -2
  160. package/scripts/remote-feedback-capture.js +159 -0
  161. package/scripts/research-agent-harness.js +256 -0
  162. package/scripts/rsi-safety-hillclimb.js +200 -0
  163. package/scripts/rule-sprawl.js +188 -0
  164. package/scripts/schedule-manager.js +147 -0
  165. package/scripts/self-heal.js +8 -0
  166. package/scripts/session-lease.js +415 -0
  167. package/scripts/simatree-data-governance.js +347 -0
  168. package/scripts/slo-alert-engine.js +172 -7
  169. package/scripts/solver-parity.js +539 -0
  170. package/scripts/stealth-memory-injection-gate.js +333 -0
  171. package/scripts/switchyard-router.js +366 -0
  172. package/scripts/telemetry-analytics.js +84 -27
  173. package/scripts/temporal-decay-weighting.js +138 -0
  174. package/scripts/test-all.js +165 -0
  175. package/scripts/token-savings.js +42 -0
  176. package/scripts/token-shunt-honesty.js +502 -0
  177. package/scripts/tool-kpi-tracker.js +108 -5
  178. package/scripts/tool-registry.js +193 -5
  179. package/scripts/typesafe-typed-questions.js +813 -0
  180. package/scripts/universal-claim-evaluator.js +14 -2
  181. package/scripts/vector-store.js +279 -9
  182. package/scripts/workflow-notebook.js +391 -0
  183. package/scripts/workflow-sentinel.js +111 -12
  184. package/scripts/workos-production-guard.js +260 -0
  185. package/scripts/workspace-search-route.js +515 -0
  186. package/server.json +2 -2
  187. package/src/agent-identity-boundary.js +76 -0
  188. package/src/agent-retrieval-cache.js +155 -0
  189. package/src/alert-noise-ledger.js +502 -0
  190. package/src/api/server.js +724 -153
  191. package/src/git-fast-cache.js +220 -0
  192. package/src/git-wal-sync.js +156 -0
  193. package/src/hash-anchored-edit.js +82 -0
  194. package/src/hermes-platform-protocol.js +475 -0
  195. package/src/hermes-sync-plane.js +241 -0
  196. package/src/index.js +30 -1
  197. package/src/iso42001-compliance-guard.js +97 -0
  198. package/src/latency-budget.js +244 -0
  199. package/src/mcp-writeguard.js +316 -0
  200. package/src/miminions-adapter.js +106 -0
  201. package/src/pipeline-compass.js +104 -0
  202. package/src/ppl-alert-pipeline.js +284 -0
  203. package/src/rendezvous-router.js +90 -0
  204. package/src/security-questionnaire.js +195 -0
package/public/platform-partners.html ADDED
@@ -0,0 +1,119 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>ThumbGate for Platforms — AI-Native Governance API</title>
7
+ <meta name="description" content="List ThumbGate.ai on your platform. AI-native infrastructure firewall, feedback loops, and execution receipts for enterprise AI agents.">
8
+ <link rel="canonical" href="__APP_ORIGIN__/platform-partners.html">
9
+ <link rel="icon" type="image/svg+xml" href="__APP_ORIGIN__/favicon.svg">
10
+ <style>
11
+ :root { --bg:#0b0c0f; --panel:#12141a; --text:#e8eaed; --muted:#9aa0a6; --accent:#34d399; --accent-dim:#10b981; --border:#1f2937; }
12
+ * { box-sizing:border-box; }
13
+ body { margin:0; font-family:system-ui,-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif; background:var(--bg); color:var(--text); line-height:1.55; }
14
+ a { color:var(--accent); text-decoration:none; }
15
+ header { padding:1.5rem 4vw; border-bottom:1px solid var(--border); display:flex; align-items:center; justify-content:space-between; }
16
+ .brand { font-weight:700; font-size:1.25rem; letter-spacing:-0.02em; }
17
+ main { max-width:980px; margin:0 auto; padding:3rem 4vw 5rem; }
18
+ h1 { font-size:clamp(2rem,5vw,3rem); margin:0 0 1rem; line-height:1.1; }
19
+ .lead { font-size:1.2rem; color:var(--muted); margin-bottom:2rem; }
20
+ .grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); gap:1rem; margin:2rem 0; }
21
+ .card { background:var(--panel); border:1px solid var(--border); border-radius:0.75rem; padding:1.25rem; }
22
+ .card h3 { margin-top:0; color:var(--accent); }
23
+ table { width:100%; border-collapse:collapse; margin:1.25rem 0; font-size:0.95rem; }
24
+ th,td { padding:0.6rem 0.5rem; border-bottom:1px solid var(--border); text-align:left; }
25
+ th { color:var(--muted); font-weight:600; }
26
+ td:last-child, th:last-child { text-align:right; }
27
+ code { background:#1f2937; padding:0.15rem 0.35rem; border-radius:0.35rem; font-size:0.9em; }
28
+ .cta { margin-top:2rem; }
29
+ .button { display:inline-block; background:var(--accent); color:#000; font-weight:600; padding:0.8rem 1.4rem; border-radius:0.5rem; }
30
+ footer { border-top:1px solid var(--border); padding:2rem 4vw; color:var(--muted); font-size:0.9rem; text-align:center; }
31
+ .status { color:var(--accent); font-weight:600; }
32
+ </style>
33
+ <script type="application/ld+json">
34
+ {
35
+ "@context": "https://schema.org",
36
+ "@type": "SoftwareApplication",
37
+ "name": "ThumbGate.ai",
38
+ "applicationCategory": "DeveloperApplication,BusinessApplication",
39
+ "offers": {
40
+ "@type": "AggregateOffer",
41
+ "lowPrice": "25",
42
+ "highPrice": "499",
43
+ "priceCurrency": "USD",
44
+ "availability": "https://schema.org/InStock"
45
+ }
46
+ }
47
+ </script>
48
+ </head>
49
+ <body>
50
+ <header>
51
+ <div class="brand">ThumbGate.ai</div>
52
+ <nav>
53
+ <a href="__APP_ORIGIN__/pricing.html">Pricing</a>
54
+ <a href="__APP_ORIGIN__/partner-intake.html">Partner Intake</a>
55
+ </nav>
56
+ </header>
57
+
58
+ <main>
59
+ <h1>ThumbGate for Platforms</h1>
60
+ <p class="lead">Resell the AI-native infrastructure firewall to enterprise customers. Fully automated governance, feedback loops, and execution receipts through a single API.</p>
61
+
62
+ <p><span class="status">● Live</span> API — verified at <a href="https://thumbgate.ai/health">thumbgate.ai/health</a>. OpenAPI at <a href="https://thumbgate.ai/openapi.json">/openapi.json</a>.</p>
63
+
64
+ <h2>Why list ThumbGate?</h2>
65
+ <div class="grid">
66
+ <div class="card">
67
+ <h3>Pre-action enforcement</h3>
68
+ <p>Block dangerous tool calls before execution with <code>POST /v1/decisions/evaluate</code>.</p>
69
+ </div>
70
+ <div class="card">
71
+ <h3>Self-improving rules</h3>
72
+ <p>Capture feedback and auto-promote prevention rules via <code>/v1/feedback/*</code>.</p>
73
+ </div>
74
+ <div class="card">
75
+ <h3>Compliance receipts</h3>
76
+ <p>Every action produces an HMAC-signed task outcome through <code>/v1/task-outcomes</code>.</p>
77
+ </div>
78
+ <div class="card">
79
+ <h3>No human bottleneck</h3>
80
+ <p>Policy-driven approval gates, automated provisioning, and usage reporting.</p>
81
+ </div>
82
+ </div>
83
+
84
+ <h2>Core enterprise endpoints</h2>
85
+ <table>
86
+ <tr><th>Endpoint</th><th>Purpose</th></tr>
87
+ <tr><td><code>POST /v1/decisions/evaluate</code></td><td>Policy decision on any agent action</td></tr>
88
+ <tr><td><code>POST /v1/gates/constraint</code></td><td>Register a policy constraint</td></tr>
89
+ <tr><td><code>POST /v1/gates/task-scope</code></td><td>Scope a task to allowed actions</td></tr>
90
+ <tr><td><code>POST /v1/gates/branch-governance</code></td><td>Enforce branch-level governance</td></tr>
91
+ <tr><td><code>POST /v1/gates/protected-approval</code></td><td>Protected-action approval gate</td></tr>
92
+ <tr><td><code>POST /v1/gates/satisfy</code></td><td>Mark gate condition satisfied</td></tr>
93
+ <tr><td><code>POST /v1/feedback/capture</code></td><td>Capture up/down/lesson signal</td></tr>
94
+ <tr><td><code>POST /v1/feedback/rules</code></td><td>Auto-promote prevention rules</td></tr>
95
+ <tr><td><code>POST /v1/task-outcomes</code></td><td>Idempotent execution receipt</td></tr>
96
+ <tr><td><code>POST /v1/escalations</code></td><td>Escalation log and routing</td></tr>
97
+ <tr><td><code>GET /v1/billing/usage</code></td><td>Usage counter</td></tr>
98
+ <tr><td><code>POST /v1/billing/provision</code></td><td>Automated API-key provisioning</td></tr>
99
+ </table>
100
+
101
+ <h2>Pay-per-usage platform tiers</h2>
102
+ <table>
103
+ <tr><th>Tier</th><th>Monthly minimum</th><th>Includes</th><th>Reseller margin</th></tr>
104
+ <tr><td>Starter</td><td>$25</td><td>12,500 evaluations</td><td>20%</td></tr>
105
+ <tr><td>Pro</td><td>$499</td><td>500,000 evaluations + DPO export</td><td>30%</td></tr>
106
+ <tr><td>Enterprise</td><td>Custom</td><td>Custom commit</td><td>30%</td></tr>
107
+ </table>
108
+
109
+ <div class="cta">
110
+ <a class="button" href="__APP_ORIGIN__/partner-intake.html">Apply to list ThumbGate</a>
111
+ <span style="margin-left:1rem; color:var(--muted);">or email <a href="mailto:igor@igorganapolsky.com">igor@igorganapolsky.com</a></span>
112
+ </div>
113
+ </main>
114
+
115
+ <footer>
116
+ © 2026 ThumbGate.ai — Self-Improving Infrastructure Firewall for AI Agents
117
+ </footer>
118
+ </body>
119
+ </html>
package/public/pricing.html CHANGED
@@ -144,6 +144,12 @@
144
144
  ]
145
145
  }
146
146
  </script>
147
+ <!-- WebMCP-ready: read-only agent tools via document.modelContext -->
148
+ <!-- WebMCP origin trial: token below covers https://thumbgate.app (subdomains, third-party), expires 2026-11-17.
149
+ Registered by the CEO 2026-08-27. thumbgate.ai needs its own token from
150
+ developer.chrome.com/origintrials (feature: WebMCP) — add it as a second meta tag here when issued. -->
151
+ <meta http-equiv="origin-trial" content="A3633z8xsnM5ZtIb7be9VOquiUXGhKl9jO/0f62+bmai51dkFVOmQrhXRrq0VF2f8S4uUkfl0PWi/iQZvh56oQMAAAB0eyJvcmlnaW4iOiJodHRwczovL3RodW1iZ2F0ZS5hcHA6NDQzIiwiZmVhdHVyZSI6IldlYk1DUCIsImV4cGlyeSI6MTc5NDg3MzYwMCwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=" />
152
+ <script src="/js/webmcp.js" defer></script>
147
153
  </head>
148
154
  <body>
149
155
  <nav>
@@ -152,6 +158,7 @@
152
158
  <div class="nav-links">
153
159
  <a href="/guide">Technical setup</a>
154
160
  <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Proof</a>
161
+ <a href="/founders">Founders</a>
155
162
  <a class="nav-enterprise" href="#enterprise-gate" data-offer-link data-cta-id="pricing_nav_buy" data-plan-id="sprint_diagnostic" data-value="499" data-segment="workflow_team">Get Started · $499</a>
156
163
  <a class="nav-pro" href="/checkout/pro?utm_source=pricing&amp;utm_medium=nav&amp;utm_campaign=value_packaging_v1&amp;cta_id=pricing_nav_pro&amp;plan_id=pro" data-offer-link data-cta-id="pricing_nav_pro" data-plan-id="pro" data-value="19" data-segment="solo_operator">Pro · $19/mo</a>
157
164
  </div>
@@ -303,8 +310,8 @@
303
310
  <div class="eyebrow">Fit</div>
304
311
  <h2>Know the boundary before you pay.</h2>
305
312
  <div class="fit">
306
- <div class="fit-card"><h3>Good fit</h3><p>A repeated, concrete agent action with a known command, tool call, destination, repository, or resource boundary.</p></div>
307
- <div class="fit-card"><h3>Enterprise boundary</h3><p>The $499 offer covers one workflow. Org-wide hosted policy, SSO, a hosted audit dashboard, 24/7 incident response, and multi-workflow rollout require separate scope. Hosted Enterprise capabilities are not generally available.</p></div>
313
+ <div class="fit-card"><h3>This is for you if</h3><p>You are running agent workflows that take real actions across lead gen, content, sales, or ops, and one specific action has gone wrong more than once. You can name the command, tool call, destination, repository, or resource boundary involved. You want the rule enforced where the agent acts, so you can hand your agents more work rather than watching them do it. Not sure yet? Start free with <code>npx thumbgate init</code> — nothing is sent to us, and the <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">verification evidence</a> is public up front.</p></div>
314
+ <div class="fit-card"><h3>This is not for you if</h3><p>The failure is a one-off you cannot reproduce, or the problem is output quality rather than a risky action — a gate stops a bad send, it does not improve the draft. The $499 offer covers one workflow. Org-wide hosted policy, SSO, a hosted audit dashboard, 24/7 incident response, and multi-workflow rollout require separate scope. Hosted Enterprise capabilities are not generally available. If the failure cannot be reduced to a supported gate, the order is refunded rather than turned into open-ended consulting.</p></div>
308
315
  </div>
309
316
  </section>
310
317
 
@@ -321,7 +328,10 @@
321
328
  <footer>
322
329
  <div class="shell footer-inner">
323
330
  <span>ThumbGate · Managed AI-agent enforcement</span>
324
- <div class="footer-links"><a href="/support">Support</a><a href="/terms">Terms</a><a href="/llm-context.md">LLM context</a></div>
331
+ <div class="footer-links"><a href="/support">Support</a><a href="/terms">Terms</a><a href="/privacy">Privacy</a><a href="/third-party-notices">Third-Party Notices</a><a href="/llm-context.md">LLM context</a></div>
332
+ </div>
333
+ <div class="shell" style="margin-top:12px;font-size:12px;color:#6b7280;text-align:center;">
334
+ Anthropic, Claude, OpenAI, ChatGPT, Cursor, Codex, Perplexity, Hermes, MCP, GitHub, Google, Nvidia, Railway, Stripe, Supabase, PostHog, and Plausible are trademarks of their respective owners. ThumbGate is an independent product.
325
335
  </div>
326
336
  </footer>
327
337
 
@@ -331,7 +341,18 @@
331
341
  (window.plausible.q = window.plausible.q || []).push(arguments);
332
342
  };
333
343
 
344
+ function privacySignalOptOut() {
345
+ try {
346
+ return navigator.globalPrivacyControl === true
347
+ || navigator.doNotTrack === '1'
348
+ || window.doNotTrack === '1';
349
+ } catch (_) {
350
+ return false;
351
+ }
352
+ }
353
+
334
354
  function sendFirstPartyTelemetry(eventName, props) {
355
+ if (privacySignalOptOut()) return;
335
356
  const payload = JSON.stringify({ event: eventName, page: '/pricing', source: 'pricing', props: props || {} });
336
357
  try {
337
358
  if (navigator.sendBeacon) {
package/public/privacy.html ADDED
@@ -0,0 +1,117 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>Privacy Policy — ThumbGate</title>
7
+ <meta name="description" content="ThumbGate Privacy Policy, Zero Workspace Telemetry Guarantee, data collection, sharing, retention, subprocessors, and contact.">
8
+ <link rel="canonical" href="https://thumbgate.ai/privacy">
9
+ <style>
10
+ :root { --ink:#171d1a; --muted:#5b6761; --paper:#f5f2e9; --card:#fffdf8; --line:#d8d4c8; --green:#006e52; }
11
+ * { box-sizing:border-box; }
12
+ body { margin:0; color:var(--ink); background:var(--paper); font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif; line-height:1.6; }
13
+ a { color:var(--green); text-decoration:none; }
14
+ a:hover { text-decoration:underline; }
15
+ .shell { width:min(860px,calc(100% - 40px)); margin:0 auto; padding:48px 0 80px; }
16
+ nav { border-bottom:1px solid var(--line); background:rgba(245,242,233,.95); padding:16px 0; }
17
+ .nav-inner { width:min(860px,calc(100% - 40px)); margin:0 auto; display:flex; justify-content:space-between; align-items:center; }
18
+ .brand { font-weight:900; font-size:1.2rem; text-decoration:none; color:var(--ink); }
19
+ h1 { font-size:2.2rem; margin:24px 0 8px; letter-spacing:-.03em; }
20
+ h2 { font-size:1.35rem; margin:32px 0 12px; border-bottom:1px solid var(--line); padding-bottom:6px; letter-spacing:-.02em; }
21
+ .meta { color:var(--muted); font-size:.9rem; margin-bottom:28px; }
22
+ .card { background:var(--card); border:1px solid var(--line); border-radius:12px; padding:24px; margin:20px 0; }
23
+ code { background:#eae6d8; padding:2px 6px; border-radius:4px; font-size:.9em; }
24
+ table { width:100%; border-collapse:collapse; margin:18px 0; }
25
+ th, td { border:1px solid var(--line); padding:10px 12px; text-align:left; font-size:.92rem; }
26
+ th { background:#eae6d8; }
27
+ ul { padding-left:22px; }
28
+ li { margin:6px 0; }
29
+ footer { margin-top:60px; padding-top:20px; border-top:1px solid var(--line); color:var(--muted); font-size:.88rem; }
30
+ .trademark { font-size:.8rem; color:var(--muted); margin-top:18px; line-height:1.5; }
31
+ </style>
32
+ </head>
33
+ <body>
34
+ <nav>
35
+ <div class="nav-inner">
36
+ <a class="brand" href="/">ThumbGate</a>
37
+ <div>
38
+ <a href="/pricing">Pricing</a> ·
39
+ <a href="/terms">Terms</a> ·
40
+ <a href="/support">Support</a> ·
41
+ <a href="/legal">Legal</a> ·
42
+ <a href="/third-party-notices">Third-Party Notices</a>
43
+ </div>
44
+ </div>
45
+ </nav>
46
+
47
+ <main class="shell">
48
+ <h1>Privacy Policy</h1>
49
+ <div class="meta">Last Updated: August 12, 2026 · Version 1.3.0</div>
50
+
51
+ <div class="card">
52
+ <strong>Zero Workspace Telemetry Guarantee.</strong> The local <code>thumbgate</code> CLI and open-source engine operate on your host disk (<code>~/.thumbgate/</code>, <code>.claude/</code>). Zero workspace source code, repository contents, or project file data is fetched, transmitted, or publicly rendered by ThumbGate.
53
+ </div>
54
+
55
+ <div class="card">
56
+ <strong>Local-first is not “zero personal data.”</strong> Account, billing, device pairing, support, and cloud-runner metadata may still be processed when you use hosted or paid surfaces. Local-first means workspace source stays on your machine by default.
57
+ </div>
58
+
59
+ <h2>Data Collection</h2>
60
+ <p>We collect information only as needed to operate the product you use:</p>
61
+ <ul>
62
+ <li>Local installs: feedback, lessons, and prevention rules stay on your machine unless you point the system at a hosted endpoint.</li>
63
+ <li>Hosted / Pro features: account identity, API keys, pairing metadata, and workflow operational metadata associated with your account.</li>
64
+ <li>Billing: payment identifiers via Stripe and related processors.</li>
65
+ <li>Optional CLI telemetry is best-effort install/usage metadata. Disable with <code>THUMBGATE_NO_TELEMETRY=1</code> or <code>DO_NOT_TRACK=1</code>.</li>
66
+ <li>Marketing pages may record first-party funnel events and, when no GPC/DNT signal is present, Plausible / PostHog page analytics. First-party events carry visitor and session identifiers (pseudonymous, not anonymous). See <a href="#your-privacy-choices">Your Privacy Choices</a>.</li>
67
+ </ul>
68
+
69
+ <h2>Data Sharing</h2>
70
+ <p>We do not sell customer data. Hosted data is used to operate the service and is shared with subprocessors only as needed for infrastructure, payments, email, analytics, or when required by law.</p>
71
+
72
+ <h2 id="your-privacy-choices">Your Privacy Choices</h2>
73
+ <p>ThumbGate does not sell or share personal information as those terms are defined by the
74
+ California Consumer Privacy Act (CCPA/CPRA, Civil Code &sect;1798.140). Because there is no
75
+ sale or sharing, there is nothing to opt out of.</p>
76
+ <p>We honor the Global Privacy Control (GPC) browser signal, and Do Not Track, as opt-out
77
+ preference signals. When either is set, our marketing pages suppress first-party telemetry
78
+ at the point of collection rather than collecting and discarding it.</p>
79
+ <p>Absent such a signal, marketing-page analytics are <strong>pseudonymous, not anonymous</strong>:
80
+ pages attach a visitor identifier and a session identifier to page-view and conversion events
81
+ so we can count distinct visits. These identifiers are not linked to a name or email unless
82
+ you submit one to us. CLI telemetry is separate and can be disabled with
83
+ <code>THUMBGATE_NO_TELEMETRY=1</code> or <code>DO_NOT_TRACK=1</code>.</p>
84
+ <p>To exercise any California privacy right &mdash; to know, delete, correct, or limit use of
85
+ sensitive personal information &mdash; email
86
+ <a href="mailto:igor@igorganapolsky.com">igor@igorganapolsky.com</a>. We respond within the
87
+ statutory period.</p>
88
+
89
+ <h2>Subprocessors</h2>
90
+ <table>
91
+ <thead><tr><th>Subprocessor</th><th>Function</th></tr></thead>
92
+ <tbody>
93
+ <tr><td>Stripe</td><td>Payment processing</td></tr>
94
+ <tr><td>Railway / cloud hosts</td><td>Application hosting and runners</td></tr>
95
+ <tr><td>Plausible / PostHog</td><td>Privacy-oriented web analytics (where configured)</td></tr>
96
+ <tr><td>Resend</td><td>Transactional email (where configured)</td></tr>
97
+ <tr><td>GitHub</td><td>Source hosting and marketplace surfaces</td></tr>
98
+ </tbody>
99
+ </table>
100
+ <p>Listing a vendor is not a claim that ThumbGate is SOC 2 or HIPAA certified, or that a signed GDPR DPA is automatic for every customer.</p>
101
+
102
+ <h2>Data Retention</h2>
103
+ <p>Local data is retained until you delete the files. Hosted account data is retained while the account or API key remains active, or until you request deletion, subject to operational or legal retention. Cloud-runner logs target a 30-day purge. Billing records may be retained longer for tax and fraud prevention.</p>
104
+
105
+ <h2>Deletion &amp; DPA</h2>
106
+ <p>Request deletion or export at <a href="mailto:privacy@thumbgate.ai">privacy@thumbgate.ai</a>. Enterprise customers may request a DPA covering GDPR / UK GDPR / CCPA where applicable. Security incidents affecting customer personal data target notice within 72 hours under signed enterprise terms when those terms apply.</p>
107
+
108
+ <h2>Contact</h2>
109
+ <p><a href="mailto:privacy@thumbgate.ai">privacy@thumbgate.ai</a> · <a href="mailto:security@thumbgate.ai">security@thumbgate.ai</a> · <a href="mailto:support@thumbgate.ai">support@thumbgate.ai</a></p>
110
+
111
+ <footer>
112
+ <p><a href="/">ThumbGate</a> · <a href="/terms">Terms</a> · <a href="/support">Support</a> · <a href="/legal">Legal</a> · <a href="/security">Security</a> · <a href="/legal/data-flow">Data-flow map</a></p>
113
+ <p class="trademark">Third-party trademarks are the property of their respective owners. ThumbGate is independent and not affiliated with or endorsed by third parties named herein.</p>
114
+ </footer>
115
+ </main>
116
+ </body>
117
+ </html>
package/public/pro.html CHANGED
@@ -984,10 +984,16 @@ __GA_BOOTSTRAP__
984
984
  <a href="/">Home</a>
985
985
  <a href="/guide">Setup Guide</a>
986
986
  <a href="/dashboard">Dashboard Demo</a>
987
+ <a href="/terms">Terms</a>
988
+ <a href="/privacy">Privacy</a>
989
+ <a href="/third-party-notices">Third-Party Notices</a>
987
990
  <a href="__VERIFICATION_URL__" target="_blank" rel="noopener">Verification Evidence</a>
988
991
  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
989
992
  </div>
990
993
  <div class="footer-copy">ThumbGate Pro for individual operators. Enterprise stays intake-first.</div>
994
+ <div style="margin-top:10px;font-size:11px;color:#6b7280;">
995
+ Anthropic, Claude, OpenAI, ChatGPT, Cursor, Codex, Perplexity, Hermes, MCP, GitHub, Google, Nvidia, Railway, Stripe, Supabase, PostHog, and Plausible are trademarks of their respective owners. ThumbGate is an independent product.
996
+ </div>
991
997
  </div>
992
998
  </footer>
993
999
 
@@ -998,7 +1004,18 @@ function readMarketingParam(name) {
998
1004
  return params.get(name);
999
1005
  }
1000
1006
 
1007
+ function privacySignalOptOut() {
1008
+ try {
1009
+ return navigator.globalPrivacyControl === true
1010
+ || navigator.doNotTrack === '1'
1011
+ || window.doNotTrack === '1';
1012
+ } catch (_) {
1013
+ return false;
1014
+ }
1015
+ }
1016
+
1001
1017
  function sendFirstPartyTelemetry(eventType, props) {
1018
+ if (privacySignalOptOut()) return;
1002
1019
  var payload = Object.assign({
1003
1020
  eventType: eventType,
1004
1021
  clientType: 'web',
package/public/support.html ADDED
@@ -0,0 +1,62 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>Support — ThumbGate</title>
7
+ <meta name="description" content="ThumbGate support, refunds, billing, security disclosure, and legal contacts.">
8
+ <link rel="canonical" href="https://thumbgate.ai/support">
9
+ <style>
10
+ :root { --ink:#171d1a; --muted:#5b6761; --paper:#f5f2e9; --card:#fffdf8; --line:#d8d4c8; --green:#006e52; }
11
+ * { box-sizing:border-box; }
12
+ body { margin:0; color:var(--ink); background:var(--paper); font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif; line-height:1.6; }
13
+ a { color:var(--green); text-decoration:none; }
14
+ a:hover { text-decoration:underline; }
15
+ .shell { width:min(860px,calc(100% - 40px)); margin:0 auto; padding:48px 0 80px; }
16
+ nav { border-bottom:1px solid var(--line); background:rgba(245,242,233,.95); padding:16px 0; }
17
+ .nav-inner { width:min(860px,calc(100% - 40px)); margin:0 auto; display:flex; justify-content:space-between; align-items:center; }
18
+ .brand { font-weight:900; font-size:1.2rem; text-decoration:none; color:var(--ink); }
19
+ h1 { font-size:2.2rem; margin:24px 0 8px; letter-spacing:-.03em; }
20
+ h2 { font-size:1.35rem; margin:32px 0 12px; border-bottom:1px solid var(--line); padding-bottom:6px; }
21
+ .meta { color:var(--muted); font-size:.9rem; margin-bottom:28px; }
22
+ .card { background:var(--card); border:1px solid var(--line); border-radius:12px; padding:24px; margin:20px 0; }
23
+ ul { padding-left:22px; } li { margin:6px 0; }
24
+ footer { margin-top:60px; padding-top:20px; border-top:1px solid var(--line); color:var(--muted); font-size:.88rem; }
25
+ </style>
26
+ </head>
27
+ <body>
28
+ <nav>
29
+ <div class="nav-inner">
30
+ <a class="brand" href="/">ThumbGate</a>
31
+ <div>
32
+ <a href="/pricing">Pricing</a> ·
33
+ <a href="/terms">Terms</a> ·
34
+ <a href="/privacy">Privacy</a> ·
35
+ <a href="/legal">Legal</a>
36
+ </div>
37
+ </div>
38
+ </nav>
39
+ <main class="shell">
40
+ <h1>Support</h1>
41
+ <div class="meta">Billing, product help, refunds, and security contacts</div>
42
+ <div class="card">
43
+ <h2>Contact</h2>
44
+ <ul>
45
+ <li><strong>Customer &amp; billing</strong>: <a href="mailto:support@thumbgate.ai">support@thumbgate.ai</a> (target: 1 business day)</li>
46
+ <li><strong>Privacy</strong>: <a href="mailto:privacy@thumbgate.ai">privacy@thumbgate.ai</a></li>
47
+ <li><strong>Legal</strong>: <a href="mailto:legal@thumbgate.ai">legal@thumbgate.ai</a></li>
48
+ <li><strong>Security</strong>: <a href="mailto:security@thumbgate.ai">security@thumbgate.ai</a></li>
49
+ </ul>
50
+ </div>
51
+ <h2>Refunds</h2>
52
+ <p>Pro subscription refunds follow the <a href="/terms">Terms of Service</a>. Self-serve Pro: new paid subscribers may request a refund within <strong>7-day</strong> of the initial charge if the product is unusable for a documented platform defect we cannot remediate; thereafter renewals are non-refundable except as required by law. Managed $499 Workflow Gate refunds are defined in Terms (refunded in full only when discovery shows the workflow cannot be reduced to a supported gate, subject to any disclosed diagnostic fee).</p>
53
+ <h2>Status</h2>
54
+ <p>API health: <a href="https://thumbgate-production.up.railway.app/health">/health</a>. Open-source issues: <a href="https://github.com/IgorGanapolsky/ThumbGate/issues">GitHub Issues</a>.</p>
55
+ <h2>Security</h2>
56
+ <p>Report vulnerabilities to <a href="mailto:security@thumbgate.ai">security@thumbgate.ai</a>. Do not post unpatched issues publicly. See also <a href="/security">/security</a>.</p>
57
+ <footer>
58
+ <p><a href="/">ThumbGate</a> · <a href="/terms">Terms of Service</a> · <a href="/privacy">Privacy Policy</a> · <a href="/legal">Legal</a> · <a href="mailto:support@thumbgate.ai">support@thumbgate.ai</a></p>
59
+ </footer>
60
+ </main>
61
+ </body>
62
+ </html>
package/public/terms.html ADDED
@@ -0,0 +1,130 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>Terms of Service — ThumbGate</title>
7
+ <meta name="description" content="ThumbGate Terms of Service, EULA, Acceptable Use Policy, support boundaries, warranty disclaimer, limitation of liability, and third-party trademark notices.">
8
+ <link rel="canonical" href="https://thumbgate.ai/terms">
9
+ <style>
10
+ :root { --ink:#171d1a; --muted:#5b6761; --paper:#f5f2e9; --card:#fffdf8; --line:#d8d4c8; --green:#006e52; }
11
+ * { box-sizing:border-box; }
12
+ body { margin:0; color:var(--ink); background:var(--paper); font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif; line-height:1.6; }
13
+ a { color:var(--green); text-decoration:none; }
14
+ a:hover { text-decoration:underline; }
15
+ .shell { width:min(860px,calc(100% - 40px)); margin:0 auto; padding:48px 0 80px; }
16
+ nav { border-bottom:1px solid var(--line); background:rgba(245,242,233,.95); padding:16px 0; }
17
+ .nav-inner { width:min(860px,calc(100% - 40px)); margin:0 auto; display:flex; justify-content:space-between; align-items:center; }
18
+ .brand { font-weight:900; font-size:1.2rem; text-decoration:none; color:var(--ink); }
19
+ h1 { font-size:2.2rem; margin:24px 0 8px; letter-spacing:-.03em; }
20
+ h2 { font-size:1.35rem; margin:32px 0 12px; border-bottom:1px solid var(--line); padding-bottom:6px; letter-spacing:-.02em; }
21
+ h3 { font-size:1.1rem; margin:24px 0 8px; }
22
+ .meta { color:var(--muted); font-size:.9rem; margin-bottom:28px; }
23
+ .card { background:var(--card); border:1px solid var(--line); border-radius:12px; padding:24px; margin:20px 0; }
24
+ code { background:#eae6d8; padding:2px 6px; border-radius:4px; font-size:.9em; }
25
+ ul, ol { padding-left:22px; }
26
+ li { margin:6px 0; }
27
+ footer { margin-top:60px; padding-top:20px; border-top:1px solid var(--line); color:var(--muted); font-size:.88rem; }
28
+ .trademark { font-size:.8rem; color:var(--muted); margin-top:18px; line-height:1.5; }
29
+ </style>
30
+ </head>
31
+ <body>
32
+ <nav>
33
+ <div class="nav-inner">
34
+ <a class="brand" href="/">ThumbGate</a>
35
+ <div>
36
+ <a href="/pricing">Pricing</a> ·
37
+ <a href="/support">Support</a> ·
38
+ <a href="/privacy">Privacy</a> ·
39
+ <a href="/third-party-notices">Third-Party Notices</a>
40
+ </div>
41
+ </div>
42
+ </nav>
43
+
44
+ <main class="shell">
45
+ <h1>Terms of Service</h1>
46
+ <div class="meta">Last Updated: August 12, 2026 · Version 1.3.0</div>
47
+
48
+ <div class="card">
49
+ <strong>Product Counsel Draft Notice.</strong> These terms are a living draft intended for final review by qualified legal counsel before enterprise outreach. The full legal-architecture package is maintained at <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/legal/PRODUCT_COUNSEL_CHECKLIST.md">docs/legal/PRODUCT_COUNSEL_CHECKLIST.md</a>.
50
+ </div>
51
+
52
+ <p>These Terms of Service ("Terms") govern access to and use of the software, services, cloud runners, APIs, web applications, and professional services provided by ThumbGate ("ThumbGate", "we", "us", or "our"), including the local engine (<code>thumbgate</code> npm package), the hosted platform (<code>thumbgate.app</code>), and custom workflow implementation services.</p>
53
+
54
+ <h2>1. Product Modules</h2>
55
+ <p>This Agreement consists of these Core Terms and the following Product-Specific Modules:</p>
56
+ <ul>
57
+ <li><strong>Module 1</strong>: Local Software Engine &amp; Pro License Terms</li>
58
+ <li><strong>Module 2</strong>: Professional Services Statement of Work ($499 Hardened Workflow Gate)</li>
59
+ <li><strong>Module 3</strong>: Hosted Cloud Runners &amp; Mobile Pairing (<code>thumbgate.app</code>)</li>
60
+ </ul>
61
+
62
+ <h2>2. Core Commercial Terms</h2>
63
+ <h3>2.1 Account Creation</h3>
64
+ <p>You must register an account to access paid tiers, cloud runners, or professional services. You agree to provide accurate information and maintain the security of your credentials. You are responsible for all activities occurring under your account.</p>
65
+
66
+ <h3>2.2 Payment, Billing, Subscriptions &amp; Renewals</h3>
67
+ <p>Recurring subscriptions automatically renew unless canceled prior to the renewal date via your account dashboard. All fees exclude applicable taxes. Full details are on the <a href="/pricing">pricing page</a>.</p>
68
+
69
+ <h3>2.3 Trials &amp; Free Tiers</h3>
70
+ <p>Free tiers, open-source local binaries, and promotional trials are provided strictly "AS-IS" without SLA, indemnification, or support obligations.</p>
71
+
72
+ <h3>2.4 Refunds</h3>
73
+ <p>Recurring subscription fees are non-refundable except as required by law. The <strong>$499 Workflow Gate</strong> is refundable only if technical discovery determines that your workflow cannot be reduced to a supported ThumbGate gate, subject to a non-refundable diagnostic fee as described in Section 3.</p>
74
+
75
+ <h3>2.5 Acceptable Use Policy (AUP)</h3>
76
+ <p>You shall NOT use the Services to violate law, tamper with third-party security, reverse-engineer proprietary cloud components, submit malicious payloads, or conduct unauthorized scraping or spam.</p>
77
+
78
+ <h3>2.6 Beta &amp; Experimental Features</h3>
79
+ <p>Preview, alpha, beta, or experimental features are provided for evaluation only, may change or be removed at any time, and are provided without warranty, SLA, or support commitments.</p>
80
+
81
+ <h3>2.7 Support Boundaries</h3>
82
+ <p>Standard support covers ThumbGate configuration, documented APIs, and known issues with the open-source engine and hosted platform. We do not debug custom LLM prompts, third-party agent configurations, model-provider API errors, or customer-specific CI/CD logic outside configured gate parameters. Premium/enterprise support is available under a separate addendum.</p>
83
+
84
+ <h3>2.8 Customer Responsibilities</h3>
85
+ <p>You are responsible for configuring rule thresholds and strict mode, testing gates in non-production environments, reviewing and approving actions routed to you, securing credentials and devices, and ensuring compliance with law and the AUP.</p>
86
+
87
+ <h3>2.9 Suspension &amp; Termination</h3>
88
+ <p>We may suspend or terminate access for material breach, overdue payment, or security risk. The Limitation of Liability, Warranty Disclaimer, Governing Law, and General sections survive termination.</p>
89
+
90
+ <h3>2.10 Third-Party Dependencies</h3>
91
+ <p>The Services interoperate with third-party LLMs, IDEs, APIs, and cloud providers. ThumbGate is not responsible for their interruptions, rate limits, outages, model hallucinations, or behavior changes.</p>
92
+
93
+ <h3>2.11 Limitation of Liability</h3>
94
+ <p>TO THE MAXIMUM EXTENT PERMITTED BY LAW, THUMBGATE SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. TOTAL LIABILITY IS CAPPED AT THE AMOUNT PAID BY YOU IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM (OR $100 IF NO FEES WERE PAID).</p>
95
+
96
+ <h3>2.12 Warranty Disclaimer</h3>
97
+ <p>THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE". THUMBGATE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.</p>
98
+
99
+ <h3>2.13 Governing Law</h3>
100
+ <p>This Agreement is governed by the laws of the State of Delaware, USA, without regard to conflict of law principles. Disputes shall be resolved through binding individual arbitration under the AAA rules.</p>
101
+
102
+ <h2>3. $499 Hardened Workflow Gate (Professional Services)</h2>
103
+ <p>For a one-time fee of $499, ThumbGate will deliver:</p>
104
+ <ol>
105
+ <li><strong>One supported workflow</strong> integration.</li>
106
+ <li><strong>One configured local pre-action gate</strong> (production gate specification).</li>
107
+ <li>A regression evidence package based on your golden test cases.</li>
108
+ <li><strong>Rollout and rollback</strong> documentation.</li>
109
+ </ol>
110
+ <p>You must provide workflow specifications, sample logs, at least six (6) golden test cases, and a technical contact within five (5) business days. If technical discovery determines the workflow cannot be reduced to a supported ThumbGate gate before implementation begins, the $499 is <strong>refunded in full</strong> (minus any separately disclosed non-refundable diagnostic fee when that fee was disclosed and agreed in advance), or converted to service credit at your option.</p>
111
+
112
+ <h2>4. Control Layer Disclaimer</h2>
113
+ <p><strong>Control layer, not a guarantee.</strong> ThumbGate is an action interdiction control layer and workflow policy engine. It does not guarantee that every unsafe action, prompt injection, or operational error will be detected or blocked. Enforcement outcomes depend on your rule configuration, <strong>strict mode</strong>, supported integrations, and testing. The <strong>human operator remains responsible</strong> for production approvals and for actions that bypass, misconfigure, or exceed the gate fence.</p>
114
+
115
+ <h2>5. Hosted Platform &amp; Cloud Runners</h2>
116
+ <p><code>thumbgate.app</code> allows device pairing, mobile approvals, and cloud-runner execution. Cloud runners are isolated but bounded by container-virtualisation security. You remain solely responsible for reviewing and approving actions routed to your mobile or web approval interface. Offline devices default to fail-closed or paused execution.</p>
117
+
118
+ <h2>6. Third-Party Trademarks</h2>
119
+ <p>Anthropic, Claude, OpenAI, ChatGPT, Cursor, Codex, Perplexity, Hermes, Model Context Protocol (MCP), GitHub, Google, Nvidia, Railway, Stripe, Supabase, PostHog, and Plausible are trademarks of their respective owners. ThumbGate is an independent product and is not affiliated with, endorsed by, or sponsored by any of them.</p>
120
+
121
+ <h2>7. Legal Contact</h2>
122
+ <p>For legal questions: <a href="mailto:legal@thumbgate.ai">legal@thumbgate.ai</a>.</p>
123
+
124
+ <footer>
125
+ <p><a href="/">ThumbGate</a> · <a href="/privacy">Privacy Policy</a> · <a href="/support">Support</a> · <a href="/third-party-notices">Third-Party Notices</a> · <a href="mailto:legal@thumbgate.ai">legal@thumbgate.ai</a></p>
126
+ <p class="trademark">Third-party trademarks are the property of their respective owners. ThumbGate is an independent product and is not affiliated with, endorsed by, or sponsored by any third-party entity referenced herein.</p>
127
+ </footer>
128
+ </main>
129
+ </body>
130
+ </html>