v1.27.8

What's Changed

• fix(checkout): restore interstitial bypass, serve /about route, and patch tests by @IgorGanapolsky in #2518
• feat(checkout): capture abandonment reasons by @IgorGanapolsky in #2519
• feat(checkout): sample bypass traffic for objections by @IgorGanapolsky in #2520
• ci(release): auto-regenerate codex marketplace pack on version bump by @IgorGanapolsky in #2522
• seo(guides): canonical PreToolUse + MCP-tool-gating page by @IgorGanapolsky in #2523
• fix(revenue): reduce pricing checkout friction by @IgorGanapolsky in #2527
• feat(seo): auto-include compare pages in sitemap + FAQ schema for AI Overview eligibility by @IgorGanapolsky in #2521
• fix(revenue): add paid CTA to persistent memory article by @IgorGanapolsky in #2530
• seo(compare): /compare/cycode buyer-intent comparison page by @IgorGanapolsky in #2528
• seo(compare): /compare/claude-code-hooks-mastery (disler) buyer-intent page by @IgorGanapolsky in #2529
• fix(analytics): add owned funnel revenue assist by @IgorGanapolsky in #2538
• feat(database): add agent safety gate pack by @IgorGanapolsky in #2542
• fix(statusline): aggregate feedback across all stores (stop per-folder slice) by @IgorGanapolsky in #2545
• seo(compare): wire all live /compare pages into the hub + homepage by @IgorGanapolsky in #2548
• fix(statusline): aggregate feedback across all stores by @IgorGanapolsky in #2549
• chore(deps): combined dependency bumps (unblocks dependabot #2435/#2437/#2438/#2439/#2436) by @IgorGanapolsky in #2550
• feat(seo): add agentic web governance guide by @IgorGanapolsky in #2553
• fix(statusline): stop double-counting cached aggregates (1152→727 bug) by @IgorGanapolsky in #2554
• chore(pricing): retire dead Team CSS + fix stale verify-pricing-surfaces skill; refresh GTM cockpit by @IgorGanapolsky in #2557
• test(statusline): true e2e test for cross-store feedback aggregation by @IgorGanapolsky in #2558
• fix(gates): block stateful helper script bypasses by @IgorGanapolsky in #2564
• fix(repo): remove public scratchpads and harden observability by @IgorGanapolsky in #2562
• fix(repo): redact internal AI-orchestration paths after r/devops leak by @IgorGanapolsky in #2560
• feat(activation): guided first-rule onboarding (thumbgate quickstart) by @IgorGanapolsky in #2568
• chore: remove orphaned feedback-aggregate-stats (superseded by feedback-aggregate) by @IgorGanapolsky in #2559
• docs(security): add THREAT_MODEL.md — honest policy-vs-containment boundary by @IgorGanapolsky in #2578
• fix(docs): remove 13 launch-theater root markdown files (wave 7) by @IgorGanapolsky in #2570
• test(verification): restore golden tests + fix pre-commit FORBIDDEN_PATTERNS gap by @IgorGanapolsky in #2581
• fix(ci): skip changeset:check for dependabot PRs by @IgorGanapolsky in #2587
• fix(health): report the actually-deployed commit (RAILWAY_GIT_COMMIT_SHA) by @IgorGanapolsky in #2589
• chore(activation): fix SonarCloud maintainability smells in quickstart by @IgorGanapolsky in #2574
• chore(deps): bump protobufjs from 8.6.0 to 8.6.1 by @dependabot[bot] in #2585
• chore(deps): bump @anthropic-ai/sdk from 0.100.1 to 0.102.0 by @dependabot[bot] in #2584
• chore(deps-dev): bump undici from 8.3.0 to 8.4.1 by @dependabot[bot] in #2583
• feat(integrations): OPA/Rego interop — export gates as policy-as-code by @IgorGanapolsky in #2597
• revert(integrations): remove unvalidated OPA policy from main by @IgorGanapolsky in #2599
• docs(compare): ThumbGate vs SigmaShake comparison page by @IgorGanapolsky in #2594
• feat(homepage): animated demo GIF in hero (replaces static proof card) by @IgorGanapolsky in #2592
• feat(homepage): answer 'why not write my own hooks?' objection by @IgorGanapolsky in #2593
• chore: fix LangGraph wording overclaim + remove 2 dormant scripts by @IgorGanapolsky in #2601
• feat(seo): /compare/snowflake-cortex-agent-governance GEO page by @IgorGanapolsky in #2595
• docs(readme): honest local-first retrieval/latency diagram by @IgorGanapolsky in #2596
• fix(security): redact secrets at capture-time and export-time by @IgorGanapolsky in #2608
• feat(distribution): discoverable /thumbgate-* slash-commands (GSD-style command palette) by @IgorGanapolsky in #2611
• feat(distribution): discoverable auto-triggering /thumbgate-* skills (Anthropic Skills spec) by @IgorGanapolsky in #2615
• feat(telemetry): sync prod funnel into local store so get_business_metrics is real by @IgorGanapolsky in #2614
• feat(gates): regression-gated rule promotion (Self-Harness stage 3) by @IgorGanapolsky in #2610
• fix(landing): hero lede leads with mechanism, not vibes by @IgorGanapolsky in #2612
• fix(media): serve static media route and add regression tests by @IgorGanapolsky in #2620
• fix(repo): delete broken skool asset symlinks to unblock deployment by @IgorGanapolsky in #2622
• Fix landing page card links by @IgorGanapolsky in #2623
• Fix Pay diagnostic CTA navigation by @IgorGanapolsky in #2624
• Add Hermes Agent positioning by @IgorGanapolsky in #2625
• Add agent context governance positioning by @IgorGanapolsky in #2626
• feat(anti-claim): catch more lie-phrases + strict hard-block mode by @IgorGanapolsky in #2621
• feat(landing): surface 'self-improving enforcement' positioning by @IgorGanapolsky in #2627
• fix(landing): route sticky workflow CTA to intake by @IgorGanapolsky in #2632
• fix(revenue): separate external customer revenue by @IgorGanapolsky in #2634
• feat(positioning): frame safe Hermes self-evolution by @IgorGanapolsky in #2635
• fix(revenue): recognize hosted tracking signals by @IgorGanapolsky in #2637
• feat(adapters): hermes-gate — PreToolUse governance for Nous Hermes Agent by @IgorGanapolsky in #2636
• feat(positioning): add vLLM serving guardrails by @IgorGanapolsky in #2640
• feat/fix codeql alerts by @IgorGanapolsky in #2631
• fix(revenue): repair tracked offer routes and guide sitemap by @IgorGanapolsky in #2644
• fix(pricing): complete Team→Enterprise retirement across 50 public pages by @IgorGanapolsky in #2642
• Position ThumbGate as governance, not logging by @IgorGanapolsky in #2652
• Fix worker npm audit gap by @IgorGanapolsky in #2654
• Fix Railway deploy scope for worker maintenance by @IgorGanapolsky in #2662
• fix(api): harden analytics JSON against XSS by @IgorGanapolsky in #2664
• fix(api): constrain checkout HTML attribution by @IgorGanapolsky in #2667
• fix(api): allowlist public html routes by @IgorGanapolsky in #2668
• fix(api): avoid OAuth authorize reflection by @IgorGanapolsky in #2669
• fix(api): escape OAuth consent token attribute by @IgorGanapolsky in #2671
• Fix npm audit transitive dependency advisories by @IgorGanapolsky in #2674
• Add MCPMarket seller pack by @IgorGanapolsky in #2676
• Add Headroom and sovereign coding model guardrail pages by @IgorGanapolsky in #2679
• Release Guardian policy adapter gates by @IgorGanapolsky in #2682

Full Changelog: v1.27.6...v1.27.8