Failure map
The exact risky action, trigger, accountable owner, current safeguard, and missing proof.
Pre-action firewall · <0.5ms local · Not a prompt · Not a postmortem
Stop AI agent mistakes before they cost you.
The rules learn from your thumbs and stay on your machine. A static hook does not. A detected secret is denied at the tool-call boundary.
Free (MIT): npx thumbgate init
7 CLIs · local gate
Claude Code, Cursor, Codex, or similar agents.
Dashboard: npx thumbgate dashboard --open · /thumbgate-dashboard · thumbgate-dashboard · demo · strict-mode deny example ↓
Why it’s called ThumbGate
Thumbs teach. The gate enforces.
Self-improving product loop
Pre-action checks—and the systems that refine them.
Corrections become local lessons; repeated negatives become gates; the next action is checked before execution. Click a step for the under-the-hood demo.
Is it really self-improving?
Yes — the control layer, not the LLM. 👍/👎 → local lesson → ranked rule → next tool call gated. No model retrain.
1
Capture feedback
Record explicit 👍 or 👎 with the action and outcome context.
Under the hood ↓
2
Remember locally
Store a reviewable lesson that survives sessions without writing into model weights.
Under the hood ↓
3
Rank and refine
Re-rank lessons for the action. Repeated negatives can promote to blocking gates; stale gates expire.
Under the hood ↓
4
Gate the next action
The action is allowed, warned, or denied before the tool proceeds.
ALLOW
WARN
DENY
Under the hood ↓
Under the hood
Capture feedback
Each reviewed outcome closes the loop—under your control. Lessons are re-ranked per action, repeated failures can promote into gates, and stale auto-promoted gates expire. The firewall improves from explicit feedback without retraining the model or silently rewriting policy.
What the $499 setup buys
A managed gate for one painful workflow.
One workflow, done with you. SSO and a hosted audit log are not included.
Configured gate
One supported local rule wired to deny, warn, or require a human before execution.
Regression and rollout proof
The test, how to undo the gate, and the receipt.
Boundary: the offer covers one supported local workflow. Multi-system implementation, legal or compliance certification, guaranteed savings, and hosted team features require separate scope. If the workflow cannot be reduced to one supported gate, the order is refunded instead of silently upsold.
What “stop” honestly means
Hard deny where configured. Honest warning everywhere else.
proposed git push --force origin main mode strict enforcement rule protect-main source core protection · strict mode decision DENY reason force-push to protected branch next decision recorded before execution
Why not a static hook? Prompts compact away; static bash hooks don’t learn from 👍/👎. Detected secret exfiltration and gate-process bypass attempts are denied by default. Matching destructive actions warn by default and deny in strict mode. This is a managed strict-mode example, not a claim that every free install blocks every risky command automatically.
Read the test-backed verification evidence →White paper · Scorecard · Architecture · Dogfood, not customer stories
| Static hook | Sandbox | ThumbGate | |
|---|---|---|---|
| When it acts | Listed commands | After start | Before the tool call |
| Learns from thumbs | No | No | Yes, locally |
| Contains the blast | No | Yes | No |
Before you buy
Five questions, answered plainly.
One 60-minute working review for one repeated AI-agent workflow failure, one configured local gate for a supported workflow, its regression test, and a written rollout and rollback proof within two business days after access and the agreed materials are available.
No. Detected secret exfiltration and gate-process bypass attempts are denied by default. Matching destructive actions warn unless strict enforcement is enabled. The managed gate defines the right boundary for your workflow instead of pretending every warning is a firewall.
No. The $499 Setup Sprint configures one supported workflow with you. Shared hosting, SSO, compliance packaging, an org-wide audit log, and multi-workflow rollout are not included and are not generally available.
No. ThumbGate does not change model weights and does not silently rewrite production policy. Self-improving under your control means explicit approvals and feedback teach the local control layer what to allow, block, or escalate next time: lessons are stored and re-ranked, repeated negative patterns can promote into gates, and stale auto-promoted gates expire.
No. The promotion, demotion, and lesson-ranking logic ships in the public npm bundle under an MIT license — run
npm pack thumbgate and read it yourself. Your lessons live in a local SQLite file you own, not a server you can't query. Paid tiers add hosted sync, the dashboard, and adapter coverage, not access to intelligence withheld from the free install.Start free today
Block the mistake your agent made last week.
Run npx thumbgate init (MIT), upgrade to Pro ($19/mo) for unlimited gates, or book a $499 setup.