5 min read · Maps the Hugging Face Context Course onto real enforcement
Hugging Face’s Context Course frames the key constraint: an agent is only as good as the context it can find. Skills, MCP tools, plugins, sub-agents, and hooks are the portable layers Claude Code, Codex, and OpenCode all share.
That framing is correct — and incomplete for production. Agents also need a hard wall on irreversible actions (email send, force-push, spend, rm -rf). Prompt prose and skill markdown cannot guarantee that wall.
| HF unit | Layer | ThumbGate / fleet surface |
|---|---|---|
| 1 | Agent Skills | skills/*, ~/.grok/skills/*, progressive disclosure |
| 2 | MCP | MCP profiles, allowlists, multi-surface gate match (tool name + args) |
| 3 | Plugins / workflows | Workflow packs, Grok Rhai workflows, marketplace adapters |
| 4 | Sub-agents | Parallel agents with Linear/vault ownership (no lock steal) |
| 5 | Hooks | Product core: PreToolUse gate-check, spend-guard, outbound-email-guard |
| 6 | Nano harness | gate-check stdin contract, CLI operational surfaces |
Skills tell the agent what “good” looks like. Hooks decide whether a tool call is allowed to run. When auto-promoted rules only matched shell command strings, MCP Gmail send_message never fired a gate — the classic “prose rule” failure. ThumbGate now matches multiple surfaces (command, tool name, light endpoint fields) and keeps catastrophic actions on a hard floor.
See also: MCP Pre-Action Checks Explained and AC/DC + runtime enforcement.
Promotion without a matchable tool surface is not enforcement.
ThumbGate is the infrastructure firewall for agent tools. It pairs with context engineering: you structure skills and MCP; ThumbGate enforces pre-action policy and turns thumbs-down into matchable prevention rules.
No. The course teaches layers and practice. Use it as a design checklist; use ThumbGate when irreversible tool calls must not depend on the model obeying prose.
In hooks/gates with patterns that match real tool surfaces — not only in skill markdown.
Related product docs: context engineering map in the ThumbGate repo (docs/context-engineering/).