AI inside your boundary: governance without relaxing controls
Enterprise AI platforms now lead with a blunt line: run agents inside your security boundary, with auditability and governance, instead of permanent exceptions to “keep up.” That demand is real. ThumbGate’s answer is not another model API. It is a local pre-action control plane for the coding agents teams already run.
Who this is for
Engineering and security leads whose approved base images, network rules, and CISO policies are not optional theater. Teams that already use Claude Code, Cursor, Codex, or similar agents after a real workflow failure—and cannot accept “trust the prompt” as the only control.
What “inside your boundary” means for ThumbGate
- Local-first checks — PreToolUse hooks evaluate the proposed tool call on the machine or in the lane you control.
- Lessons stay reviewable — thumbs become local lessons; relevant lessons are re-ranked for the next action; repeated failures can promote into gates; stale auto-promoted gates expire.
- Honest default enforcement — detected secret exfiltration and gate-bypass attempts are denied by default; many other matches warn unless strict mode is enabled.
- Decision receipts — blocks and warnings name the matched rule and leave a trail reviewers can inspect.
We do not claim a full air-gapped multi-cloud agent OS on day one. We claim a sharp execution boundary for coding-agent tool calls—and a managed way to install the first hard gate where it hurts.
Land on one high-stakes problem
Platform vendors talk about forward-deployed motion. Our cash path is deliberately small:
- One workflow with a repeated AI-agent failure.
- One configured local gate with a regression test.
- Rollout and rollback proof within two business days after access and materials are available.
That is the $499 Enterprise Workflow Gate—not an org-wide hosted license. Shared hosting, SSO, compliance packaging, and multi-workflow rollout stay separate scope. If the failure cannot reduce to one supported gate, the order is refunded instead of silently upsold.
Start without a procurement cycle
Free local evaluate: npx thumbgate init. Prove one caught repeat. When the pain is real and shared, buy the managed gate for that workflow.