Over-Reach Detector

Detects when AI coding agents modify files beyond their declared task scope by auditing file changes against declared scope patterns.

An audit tool that compares declared task scope (via fnmatch glob patterns for allowed files and categories) against actual file changes made by AI coding agents. Reports mismatches across five categories: tests, docs, infra, config, and code. Functions as a disclosure tool rather than a blocker, leaving enforcement decisions to the caller. Integrates with Cursor, Claude Code, and other MCP-compatible agents via stdio transport.