overwatcher-ai 0.1.0__tar.gz

overwatcher_ai-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fahad Bin Nasir
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

overwatcher_ai-0.1.0/PKG-INFO

@@ -0,0 +1,277 @@
+Metadata-Version: 2.4
+Name: overwatcher-ai
+Version: 0.1.0
+Summary: Hierarchical Multi-Agent Supervisor & Adversarial Red-Team Cross-Examiner
+Author-email: Fahad Bin Nasir <fahad@fahadbinnasir.tech>
+License: MIT
+Project-URL: Homepage, https://github.com/FahadBinNasir/overwatcher
+Project-URL: Documentation, https://github.com/FahadBinNasir/overwatcher#readme
+Project-URL: Repository, https://github.com/FahadBinNasir/overwatcher
+Project-URL: Issues, https://github.com/FahadBinNasir/overwatcher/issues
+Project-URL: Changelog, https://github.com/FahadBinNasir/overwatcher/blob/main/CHANGELOG.md
+Keywords: ai-agents,multi-agent,supervisor,cross-examiner,orchestrator,red-team,code-review,claude-code,antigravity,llm-ops
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+<div align="center">
+
+<img src="assets/banner.svg" alt="Overwatcher - Hierarchical Multi-Agent Supervisor" width="100%" />
+
+# <img src="assets/icons/logo.svg" width="32" height="32" align="center" alt="" /> Overwatcher
+
+**A supervisor skill for multi-agent coding workflows. Splits work into disjoint file domains, then rejects worker output that breaks its contract or fails verification.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-2563eb.svg)](LICENSE)
+[![Python 3.8+](https://img.shields.io/badge/Python-3.8%2B-3776AB?logo=python&logoColor=white)](https://python.org)
+
+[Quick start](#quick-start) · [How it works](#how-it-works) · [CLI](#cross-examiner-cli) · [Examples](#examples) · [Contributing](#contributing)
+
+</div>
+
+---
+
+## Why
+
+Unsupervised agent pipelines tend to fail in three ways:
+
+- **Drift:** workers edit files outside their task and break shared config.
+- **Collisions:** parallel workers edit the same files and create merge conflicts.
+- **False "done":** workers report "all tests pass" after deleting assertions, adding `assert True`, or wrapping errors in `except: pass`.
+
+Overwatcher counters each:
+
+| Failure | Defense |
+| :-- | :-- |
+| Drift | Per-worker contract listing authorized files; out-of-scope diffs are rejected |
+| Collisions | Contracts are disjoint; no two workers share a file |
+| False "done" | Claims are ignored. The diff is scanned for known shortcuts and a verify command must exit 0 |
+
+---
+
+## Quick start
+
+### 1. Install CLI & Python package
+```bash
+# Install via pip:
+pip install overwatcher-ai
+
+# Or install directly from GitHub:
+pip install git+https://github.com/FahadBinNasir/overwatcher.git
+```
+
+### 2. Install as an Agent Skill
+Claude Code shown; other platforms [below](#platform-install-paths):
+
+```bash
+mkdir -p .claude/skills/overwatcher
+cp SKILL.md .claude/skills/overwatcher/SKILL.md
+```
+
+Then ask your agent:
+
+> Use the overwatcher skill to refactor auth and the DB layer in parallel.
+
+The agent acts as supervisor: it partitions the task, dispatches workers, audits each result, and returns a verification report.
+
+---
+
+## How it works
+
+```mermaid
+flowchart TD
+    A[1. Partition & contracts] --> B[2. Parallel dispatch]
+    B --> C[3. Cross-examination]
+    C -->|fail| D[Rejection notice]
+    D --> B
+    C -->|pass| E[4. Synthesis & report]
+```
+
+### Rules
+
+1. **No trust in summaries.** Output is unverified until inspected and executed.
+2. **Adversarial review.** Look for edge cases, race conditions, leaks, and swallowed errors.
+3. **Disjoint ownership.** Workers never touch overlapping files.
+4. **Reject, don't patch.** Send failures back with line-numbered proof. The supervisor only patches after repeated worker failures.
+
+### Phases
+
+**1. Partition.** Split the goal into 2–4 independent domains (e.g. Auth, DB, API, UI). Give each worker a [contract](templates/worker_contract.md):
+- *Authorized targets:* exact file paths
+- *Acceptance criteria:* deliverables and test targets
+- *Forbidden:* mock fallbacks, leaked secrets, API breakage
+
+**2. Dispatch.** Start workers concurrently with domain-specific prompts. Wait on completion signals; don't poll.
+
+**3. Cross-examine.** When a worker reports done:
+1. **Diff:** confirm changes stay inside the contract; reject mocks, boilerplate, and new dependencies. The CLI automates the file-boundary and pattern checks.
+2. **Build:** run the project's compilers and linters (`tsc --noEmit`, `ruff`, `flake8`, ...).
+3. **Test:** run the targeted tests; check that assertions are real.
+4. **Verdict:** `REJECTION NOTICE` on any defect, otherwise `AUDITED & VERIFIED`.
+
+**4. Synthesize.** Run the full regression suite, then produce the [master report](templates/master_adjudication_report.md) with logs.
+
+---
+
+## Cross-examiner CLI
+
+Run via the installed `overwatcher` command or directly via `scripts/cross_examiner.py`. It requires only Python 3.8+ and git; no LLM needed.
+
+```bash
+# Run via installed CLI:
+overwatcher \
+  --worker "auth_guard" \
+  --domain "Authentication" \
+  --allowed-files "src/core/auth.py" "tests/test_auth.py" \
+  --verify-cmd "pytest tests/test_auth.py -v" \
+  --repo-dir .
+
+# Or run via standalone script:
+python scripts/cross_examiner.py ...
+```
+
+| Flag | Default | Purpose |
+| :-- | :-- | :-- |
+| `--worker` | `worker_subagent` | Worker ID, shown in the notice |
+| `--domain` | `core` | Domain name, shown in the notice |
+| `--allowed-files` | none | Glob patterns the worker may change. Boundary check is skipped if empty |
+| `--verify-cmd` | none | Shell command that must exit 0 |
+| `--repo-dir` | `.` | Git repository to audit |
+
+**Checks**
+1. **Boundaries:** files from `git status` must match an allowed glob (full path or basename, via `fnmatch`).
+2. **Diff patterns:** added lines in `git diff HEAD` are regex-scanned for:
+   - `except: pass`, `except Exception: pass`, empty `catch (...) {}`
+   - `assert True`, `assert 1 == 1`, `expect(true).toBe(true)`
+   - `debugger`, `breakpoint()`
+3. **Verify command:** run in the repo; non-zero exit is a failure (last 10 output lines are reported).
+
+**Exit codes:** `0` = `AUDITED & VERIFIED`, `1` = `REJECTED` (prints a rejection notice).
+
+### Limitations
+- Pattern matching is regex on diff text, not AST analysis. It catches common shortcuts, not all.
+- Audits the **working tree** against `HEAD`. Uncommitted changes only.
+- With parallel workers in one working tree, each audit sees the others' edits as violations. Give each worker its own `git worktree` or branch.
+- Basename matching means `auth.py` also matches `other/dir/auth.py`. Use full-path globs.
+- Untracked files count toward the boundary check, but their contents are not pattern-scanned.
+- `--verify-cmd` runs with `shell=True`. Pass only trusted commands.
+- Linters and builds run only if you put them in `--verify-cmd`.
+
+Run its tests:
+
+```bash
+python tests/test_cross_examiner.py
+```
+
+---
+
+## Platform install paths
+
+| Platform | Target |
+| :-- | :-- |
+| Claude Code | `.claude/skills/overwatcher/SKILL.md` |
+| Antigravity | `.agents/skills/overwatcher/SKILL.md` |
+| Cursor | `.cursor/rules/overwatcher.mdc` |
+| Cline / Roo-Code | `.clinerules` or `.roomodes` |
+| OpenHands | `.openhands/microagents/overwatcher.md` |
+| LangGraph / CrewAI | Call `scripts/cross_examiner.py` from a supervisor node |
+
+---
+
+## Message formats
+
+<details>
+<summary><b>Rejection notice</b> (sent to a worker on failure)</summary>
+
+```markdown
+[OVERWATCHER REJECTION NOTICE]
+Worker ID: {worker_name}
+Target Domain: {domain_name}
+Status: REJECTED — REWORK REQUIRED
+
+1. Flaws Detected:
+   - File: {file_path}:{line_number}
+     Issue: {defect}
+     Evidence: {failing_test_output_or_diff_snippet}
+
+2. Required Remediation:
+   - {instruction}
+
+Re-submit only after passing: `{verification_command}`.
+```
+</details>
+
+<details>
+<summary><b>Master report</b> (delivered to the user)</summary>
+
+```markdown
+# Overwatcher Master Verification Report
+
+## Summary
+- Domains audited: 2
+- Workers: 2
+- Cross-examination rounds: 3
+- Status: VERIFIED / ZERO REGRESSIONS
+
+## Breakdown
+| Domain | Worker | Files | Status | Evidence |
+| :-- | :-- | :-- | :-- | :-- |
+| Auth | auth_guard | src/core/auth.py | PASSED | 8/8 tests |
+| DB | db_reliability | src/core/db.py | PASSED | 14/14 tests |
+```
+</details>
+
+---
+
+## Examples
+
+| File | Shows |
+| :-- | :-- |
+| [sample_workflow.md](examples/sample_workflow.md) | End-to-end supervised refactor |
+| [sample_worker_contract.md](examples/sample_worker_contract.md) | A filled-in contract |
+| [sample_rejection_order.md](examples/sample_rejection_order.md) | A real rejection notice |
+| [sample_adjudication_report.md](examples/sample_adjudication_report.md) | A passing report |
+
+---
+
+## Repository layout
+
+```
+pyproject.toml        # PEP 517 / PEP 621 package config
+SKILL.md              # skill spec
+src/overwatcher/      # core Python package & CLI implementation
+templates/            # contract, rejection, report templates
+scripts/              # standalone wrapper script
+tests/                # cross_examiner tests
+examples/             # worked examples
+assets/               # logo, icons, and social banner
+```
+
+---
+
+## Contributing
+
+New audit rules, heuristics, and language support are welcome.
+
+1. Fork and branch: `git checkout -b feature/audit-rule`
+2. Add tests; run `python tests/test_cross_examiner.py`
+3. Open a PR
+
+---
+
+## License
+
+[MIT](LICENSE) © 2026 Fahad Bin Nasir

overwatcher_ai-0.1.0/README.md

@@ -0,0 +1,248 @@
+<div align="center">
+
+<img src="assets/banner.svg" alt="Overwatcher - Hierarchical Multi-Agent Supervisor" width="100%" />
+
+# <img src="assets/icons/logo.svg" width="32" height="32" align="center" alt="" /> Overwatcher
+
+**A supervisor skill for multi-agent coding workflows. Splits work into disjoint file domains, then rejects worker output that breaks its contract or fails verification.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-2563eb.svg)](LICENSE)
+[![Python 3.8+](https://img.shields.io/badge/Python-3.8%2B-3776AB?logo=python&logoColor=white)](https://python.org)
+
+[Quick start](#quick-start) · [How it works](#how-it-works) · [CLI](#cross-examiner-cli) · [Examples](#examples) · [Contributing](#contributing)
+
+</div>
+
+---
+
+## Why
+
+Unsupervised agent pipelines tend to fail in three ways:
+
+- **Drift:** workers edit files outside their task and break shared config.
+- **Collisions:** parallel workers edit the same files and create merge conflicts.
+- **False "done":** workers report "all tests pass" after deleting assertions, adding `assert True`, or wrapping errors in `except: pass`.
+
+Overwatcher counters each:
+
+| Failure | Defense |
+| :-- | :-- |
+| Drift | Per-worker contract listing authorized files; out-of-scope diffs are rejected |
+| Collisions | Contracts are disjoint; no two workers share a file |
+| False "done" | Claims are ignored. The diff is scanned for known shortcuts and a verify command must exit 0 |
+
+---
+
+## Quick start
+
+### 1. Install CLI & Python package
+```bash
+# Install via pip:
+pip install overwatcher-ai
+
+# Or install directly from GitHub:
+pip install git+https://github.com/FahadBinNasir/overwatcher.git
+```
+
+### 2. Install as an Agent Skill
+Claude Code shown; other platforms [below](#platform-install-paths):
+
+```bash
+mkdir -p .claude/skills/overwatcher
+cp SKILL.md .claude/skills/overwatcher/SKILL.md
+```
+
+Then ask your agent:
+
+> Use the overwatcher skill to refactor auth and the DB layer in parallel.
+
+The agent acts as supervisor: it partitions the task, dispatches workers, audits each result, and returns a verification report.
+
+---
+
+## How it works
+
+```mermaid
+flowchart TD
+    A[1. Partition & contracts] --> B[2. Parallel dispatch]
+    B --> C[3. Cross-examination]
+    C -->|fail| D[Rejection notice]
+    D --> B
+    C -->|pass| E[4. Synthesis & report]
+```
+
+### Rules
+
+1. **No trust in summaries.** Output is unverified until inspected and executed.
+2. **Adversarial review.** Look for edge cases, race conditions, leaks, and swallowed errors.
+3. **Disjoint ownership.** Workers never touch overlapping files.
+4. **Reject, don't patch.** Send failures back with line-numbered proof. The supervisor only patches after repeated worker failures.
+
+### Phases
+
+**1. Partition.** Split the goal into 2–4 independent domains (e.g. Auth, DB, API, UI). Give each worker a [contract](templates/worker_contract.md):
+- *Authorized targets:* exact file paths
+- *Acceptance criteria:* deliverables and test targets
+- *Forbidden:* mock fallbacks, leaked secrets, API breakage
+
+**2. Dispatch.** Start workers concurrently with domain-specific prompts. Wait on completion signals; don't poll.
+
+**3. Cross-examine.** When a worker reports done:
+1. **Diff:** confirm changes stay inside the contract; reject mocks, boilerplate, and new dependencies. The CLI automates the file-boundary and pattern checks.
+2. **Build:** run the project's compilers and linters (`tsc --noEmit`, `ruff`, `flake8`, ...).
+3. **Test:** run the targeted tests; check that assertions are real.
+4. **Verdict:** `REJECTION NOTICE` on any defect, otherwise `AUDITED & VERIFIED`.
+
+**4. Synthesize.** Run the full regression suite, then produce the [master report](templates/master_adjudication_report.md) with logs.
+
+---
+
+## Cross-examiner CLI
+
+Run via the installed `overwatcher` command or directly via `scripts/cross_examiner.py`. It requires only Python 3.8+ and git; no LLM needed.
+
+```bash
+# Run via installed CLI:
+overwatcher \
+  --worker "auth_guard" \
+  --domain "Authentication" \
+  --allowed-files "src/core/auth.py" "tests/test_auth.py" \
+  --verify-cmd "pytest tests/test_auth.py -v" \
+  --repo-dir .
+
+# Or run via standalone script:
+python scripts/cross_examiner.py ...
+```
+
+| Flag | Default | Purpose |
+| :-- | :-- | :-- |
+| `--worker` | `worker_subagent` | Worker ID, shown in the notice |
+| `--domain` | `core` | Domain name, shown in the notice |
+| `--allowed-files` | none | Glob patterns the worker may change. Boundary check is skipped if empty |
+| `--verify-cmd` | none | Shell command that must exit 0 |
+| `--repo-dir` | `.` | Git repository to audit |
+
+**Checks**
+1. **Boundaries:** files from `git status` must match an allowed glob (full path or basename, via `fnmatch`).
+2. **Diff patterns:** added lines in `git diff HEAD` are regex-scanned for:
+   - `except: pass`, `except Exception: pass`, empty `catch (...) {}`
+   - `assert True`, `assert 1 == 1`, `expect(true).toBe(true)`
+   - `debugger`, `breakpoint()`
+3. **Verify command:** run in the repo; non-zero exit is a failure (last 10 output lines are reported).
+
+**Exit codes:** `0` = `AUDITED & VERIFIED`, `1` = `REJECTED` (prints a rejection notice).
+
+### Limitations
+- Pattern matching is regex on diff text, not AST analysis. It catches common shortcuts, not all.
+- Audits the **working tree** against `HEAD`. Uncommitted changes only.
+- With parallel workers in one working tree, each audit sees the others' edits as violations. Give each worker its own `git worktree` or branch.
+- Basename matching means `auth.py` also matches `other/dir/auth.py`. Use full-path globs.
+- Untracked files count toward the boundary check, but their contents are not pattern-scanned.
+- `--verify-cmd` runs with `shell=True`. Pass only trusted commands.
+- Linters and builds run only if you put them in `--verify-cmd`.
+
+Run its tests:
+
+```bash
+python tests/test_cross_examiner.py
+```
+
+---
+
+## Platform install paths
+
+| Platform | Target |
+| :-- | :-- |
+| Claude Code | `.claude/skills/overwatcher/SKILL.md` |
+| Antigravity | `.agents/skills/overwatcher/SKILL.md` |
+| Cursor | `.cursor/rules/overwatcher.mdc` |
+| Cline / Roo-Code | `.clinerules` or `.roomodes` |
+| OpenHands | `.openhands/microagents/overwatcher.md` |
+| LangGraph / CrewAI | Call `scripts/cross_examiner.py` from a supervisor node |
+
+---
+
+## Message formats
+
+<details>
+<summary><b>Rejection notice</b> (sent to a worker on failure)</summary>
+
+```markdown
+[OVERWATCHER REJECTION NOTICE]
+Worker ID: {worker_name}
+Target Domain: {domain_name}
+Status: REJECTED — REWORK REQUIRED
+
+1. Flaws Detected:
+   - File: {file_path}:{line_number}
+     Issue: {defect}
+     Evidence: {failing_test_output_or_diff_snippet}
+
+2. Required Remediation:
+   - {instruction}
+
+Re-submit only after passing: `{verification_command}`.
+```
+</details>
+
+<details>
+<summary><b>Master report</b> (delivered to the user)</summary>
+
+```markdown
+# Overwatcher Master Verification Report
+
+## Summary
+- Domains audited: 2
+- Workers: 2
+- Cross-examination rounds: 3
+- Status: VERIFIED / ZERO REGRESSIONS
+
+## Breakdown
+| Domain | Worker | Files | Status | Evidence |
+| :-- | :-- | :-- | :-- | :-- |
+| Auth | auth_guard | src/core/auth.py | PASSED | 8/8 tests |
+| DB | db_reliability | src/core/db.py | PASSED | 14/14 tests |
+```
+</details>
+
+---
+
+## Examples
+
+| File | Shows |
+| :-- | :-- |
+| [sample_workflow.md](examples/sample_workflow.md) | End-to-end supervised refactor |
+| [sample_worker_contract.md](examples/sample_worker_contract.md) | A filled-in contract |
+| [sample_rejection_order.md](examples/sample_rejection_order.md) | A real rejection notice |
+| [sample_adjudication_report.md](examples/sample_adjudication_report.md) | A passing report |
+
+---
+
+## Repository layout
+
+```
+pyproject.toml        # PEP 517 / PEP 621 package config
+SKILL.md              # skill spec
+src/overwatcher/      # core Python package & CLI implementation
+templates/            # contract, rejection, report templates
+scripts/              # standalone wrapper script
+tests/                # cross_examiner tests
+examples/             # worked examples
+assets/               # logo, icons, and social banner
+```
+
+---
+
+## Contributing
+
+New audit rules, heuristics, and language support are welcome.
+
+1. Fork and branch: `git checkout -b feature/audit-rule`
+2. Add tests; run `python tests/test_cross_examiner.py`
+3. Open a PR
+
+---
+
+## License
+
+[MIT](LICENSE) © 2026 Fahad Bin Nasir

overwatcher_ai-0.1.0/pyproject.toml

@@ -0,0 +1,54 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "overwatcher-ai"
+version = "0.1.0"
+description = "Hierarchical Multi-Agent Supervisor & Adversarial Red-Team Cross-Examiner"
+readme = "README.md"
+requires-python = ">=3.8"
+license = { text = "MIT" }
+authors = [
+    { name = "Fahad Bin Nasir", email = "fahad@fahadbinnasir.tech" }
+]
+keywords = [
+    "ai-agents",
+    "multi-agent",
+    "supervisor",
+    "cross-examiner",
+    "orchestrator",
+    "red-team",
+    "code-review",
+    "claude-code",
+    "antigravity",
+    "llm-ops"
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Topic :: Software Development :: Quality Assurance",
+    "Topic :: Software Development :: Testing",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.8",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Operating System :: OS Independent",
+]
+dependencies = []
+
+[project.scripts]
+overwatcher = "overwatcher.cli:main"
+
+[project.urls]
+Homepage = "https://github.com/FahadBinNasir/overwatcher"
+Documentation = "https://github.com/FahadBinNasir/overwatcher#readme"
+Repository = "https://github.com/FahadBinNasir/overwatcher"
+Issues = "https://github.com/FahadBinNasir/overwatcher/issues"
+Changelog = "https://github.com/FahadBinNasir/overwatcher/blob/main/CHANGELOG.md"
+
+[tool.setuptools.packages.find]
+where = ["src"]

overwatcher_ai-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

overwatcher_ai-0.1.0/src/overwatcher/__init__.py

@@ -0,0 +1,24 @@
+"""
+Overwatcher
+Hierarchical Multi-Agent Supervisor & Adversarial Red-Team Cross-Examiner.
+"""
+
+__version__ = "0.1.0"
+__author__ = "Fahad Bin Nasir"
+
+from overwatcher.cross_examiner import (
+    CrossExaminer,
+    check_file_boundaries,
+    audit_diff_for_slop,
+    format_rejection_notice,
+    FORBIDDEN_DIFF_PATTERNS,
+)
+
+__all__ = [
+    "__version__",
+    "CrossExaminer",
+    "check_file_boundaries",
+    "audit_diff_for_slop",
+    "format_rejection_notice",
+    "FORBIDDEN_DIFF_PATTERNS",
+]

overwatcher_ai-0.1.0/src/overwatcher/__main__.py

@@ -0,0 +1,8 @@
+"""
+Executable module entrypoint for python -m overwatcher
+"""
+
+from overwatcher.cli import main
+
+if __name__ == "__main__":
+    main()

overwatcher_ai-0.1.0/src/overwatcher/cli.py

@@ -0,0 +1,56 @@
+"""
+Overwatcher CLI Entrypoint
+"""
+
+import argparse
+import os
+import sys
+from overwatcher.cross_examiner import CrossExaminer
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(
+        prog="overwatcher",
+        description="Overwatcher: Hierarchical Multi-Agent Supervisor & Adversarial Red-Team Cross-Examiner"
+    )
+    parser.add_argument("--worker", default="worker_subagent", help="Worker subagent ID or role")
+    parser.add_argument("--domain", default="core", help="Target domain name")
+    parser.add_argument("--allowed-files", nargs="*", default=[], help="Allowed file path glob patterns")
+    parser.add_argument("--verify-cmd", default="", help="Command to execute for verification (e.g. pytest, npm test)")
+    parser.add_argument("--repo-dir", default=".", help="Path to target git repository")
+
+    args = parser.parse_args(argv)
+    repo_dir = os.path.abspath(args.repo_dir)
+
+    print("==================================================")
+    print("      OVERWATCHER ADVERSARIAL CROSS-EXAMINATION   ")
+    print("==================================================")
+    print(f"Worker Subagent : {args.worker}")
+    print(f"Target Domain   : {args.domain}")
+    print(f"Repository Root : {repo_dir}")
+    print("--------------------------------------------------")
+
+    examiner = CrossExaminer(
+        repo_dir=repo_dir,
+        allowed_files=args.allowed_files,
+        verify_cmd=args.verify_cmd,
+        worker_id=args.worker,
+        domain=args.domain
+    )
+
+    passed, notice, flaws = examiner.run_audit()
+
+    if not passed:
+        print("\nADJUDICATION RESULT: REJECTED\n")
+        print(notice)
+        sys.exit(1)
+    else:
+        print("\nADJUDICATION RESULT: AUDITED & VERIFIED")
+        print("All contract boundaries respected. No slop anti-patterns detected.")
+        if args.verify_cmd:
+            print("Verification command passed with exit code 0.")
+        sys.exit(0)
+
+
+if __name__ == "__main__":
+    main()

overwatcher_ai-0.1.0/src/overwatcher/cross_examiner.py

@@ -0,0 +1,226 @@
+"""
+Overwatcher Cross-Examiner Engine
+Deterministic Red-Team Auditor and Contract Validator for AI Multi-Agent Pipelines.
+"""
+
+import fnmatch
+import os
+import re
+import subprocess
+import sys
+from typing import List, Dict, Tuple, Optional
+
+
+FORBIDDEN_DIFF_PATTERNS = [
+    (r"^\+\s*except\s*:\s*pass", "Bare exception swallowing (`except: pass`)"),
+    (r"^\+\s*except\s+Exception\s*:\s*pass", "Exception swallowing (`except Exception: pass`)"),
+    (r"^\+\s*catch\s*\([^)]*\)\s*\{\s*\}", "Silent catch block (`catch (e) {}`)"),
+    (r"^\+\s*assert\s+True\b", "Trivial test assertion (`assert True`)"),
+    (r"^\+\s*assert\s+1\s*==\s*1\b", "Trivial test assertion (`assert 1 == 1`)"),
+    (r"^\+\s*expect\s*\(\s*true\s*\)\.toBe\s*\(\s*true\s*\)", "Trivial test assertion (`expect(true).toBe(true)`)"),
+    (r"^\+\s*debugger\b", "Leftover debugger statement"),
+    (r"^\+\s*breakpoint\(\)", "Leftover breakpoint() statement"),
+]
+
+
+def run_command(cmd: str, cwd: Optional[str] = None) -> Tuple[int, str]:
+    """Execute a shell command and return (exit_code, output)."""
+    try:
+        proc = subprocess.run(
+            cmd,
+            shell=True,
+            cwd=cwd,
+            stdout=subprocess.PIPE,
+            stderr=subprocess.STDOUT,
+            text=True,
+            encoding="utf-8",
+            errors="replace"
+        )
+        return proc.returncode, proc.stdout
+    except Exception as e:
+        return 1, str(e)
+
+
+def get_git_modified_files(cwd: str) -> List[str]:
+    """Return list of modified or untracked files relative to working tree."""
+    code, out = run_command("git status --porcelain", cwd=cwd)
+    files = []
+    if code == 0:
+        for line in out.splitlines():
+            line = line.strip()
+            if not line:
+                continue
+            parts = line[2:].strip().split(" -> ")
+            filepath = parts[-1].strip().strip('"')
+            files.append(filepath.replace("\\", "/"))
+    return sorted(list(set(files)))
+
+
+def get_git_diff(cwd: str) -> str:
+    """Return the current unstaged and staged git diff."""
+    code, out = run_command("git diff -U3 HEAD", cwd=cwd)
+    if code != 0 or not out.strip():
+        code, out = run_command("git diff -U3", cwd=cwd)
+    return out
+
+
+def check_file_boundaries(
+    modified_files: List[str],
+    allowed_patterns: List[str]
+) -> List[str]:
+    """Identify files modified outside the allowed contract boundaries."""
+    violations = []
+    for f in modified_files:
+        norm_f = f.replace("\\", "/")
+        matched = False
+        for pat in allowed_patterns:
+            pat = pat.replace("\\", "/").strip()
+            if not pat:
+                continue
+            if fnmatch.fnmatch(norm_f, pat) or fnmatch.fnmatch(os.path.basename(norm_f), pat):
+                matched = True
+                break
+        if not matched:
+            violations.append(norm_f)
+    return violations
+
+
+def audit_diff_for_slop(diff_text: str) -> List[Dict[str, str]]:
+    """Inspect git diff for anti-patterns and forbidden shortcuts."""
+    issues = []
+    current_file = "unknown"
+    current_line = 0
+
+    for line in diff_text.splitlines():
+        if line.startswith("+++ b/"):
+            current_file = line[6:].strip()
+            current_line = 0
+            continue
+        elif line.startswith("@@"):
+            m = re.search(r"\+(\d+)", line)
+            if m:
+                current_line = int(m.group(1))
+            continue
+
+        if line.startswith("+") and not line.startswith("+++"):
+            for pattern, description in FORBIDDEN_DIFF_PATTERNS:
+                if re.search(pattern, line):
+                    issues.append({
+                        "file": current_file,
+                        "line": str(current_line),
+                        "issue": description,
+                        "evidence": line.strip()
+                    })
+            current_line += 1
+        elif not line.startswith("-"):
+            current_line += 1
+
+    return issues
+
+
+def format_rejection_notice(
+    worker_id: str,
+    domain: str,
+    flaws: List[Dict[str, str]],
+    verification_cmd: str,
+    remediations: List[str]
+) -> str:
+    """Generate structured Overwatcher Rejection Notice."""
+    flaw_lines = []
+    for f in flaws:
+        flaw_lines.append(
+            f"   - File: {f.get('file', 'N/A')}:{f.get('line', 'N/A')}\n"
+            f"     Issue: {f.get('issue', 'Defect detected')}\n"
+            f"     Evidence: `{f.get('evidence', '').strip()}`"
+        )
+    flaws_formatted = "\n".join(flaw_lines)
+    remedy_lines = [f"   - {r}" for r in remediations]
+    remedy_formatted = "\n".join(remedy_lines)
+
+    return (
+        f"[OVERWATCHER REJECTION NOTICE]\n"
+        f"Worker ID: {worker_id}\n"
+        f"Target Domain: {domain}\n"
+        f"Status: REJECTED — REWORK REQUIRED\n\n"
+        f"1. Flaws Detected:\n"
+        f"{flaws_formatted}\n\n"
+        f"2. Required Remediation:\n"
+        f"{remedy_formatted}\n\n"
+        f"Re-submit only after executing and passing: `{verification_cmd}`.\n"
+    )
+
+
+class CrossExaminer:
+    """
+    Programmatic Auditor for Python Multi-Agent Frameworks (LangGraph, CrewAI, AutoGen).
+    """
+
+    def __init__(
+        self,
+        repo_dir: str = ".",
+        allowed_files: Optional[List[str]] = None,
+        verify_cmd: str = "",
+        worker_id: str = "worker_subagent",
+        domain: str = "core"
+    ):
+        self.repo_dir = os.path.abspath(repo_dir)
+        self.allowed_files = allowed_files or []
+        self.verify_cmd = verify_cmd
+        self.worker_id = worker_id
+        self.domain = domain
+
+    def run_audit(self) -> Tuple[bool, Optional[str], List[Dict[str, str]]]:
+        """
+        Executes cross-examination audit.
+        Returns:
+            Tuple of (is_passed: bool, rejection_notice: Optional[str], raw_flaws: List[Dict])
+        """
+        flaws = []
+        remediations = []
+
+        # 1. Boundary Check
+        if self.allowed_files:
+            modified = get_git_modified_files(self.repo_dir)
+            violations = check_file_boundaries(modified, self.allowed_files)
+            if violations:
+                for v in violations:
+                    flaws.append({
+                        "file": v,
+                        "line": "1",
+                        "issue": "Contract Boundary Breach: Unauthorized file modified outside worker contract",
+                        "evidence": f"Modified file '{v}' is not in allowed list: {self.allowed_files}"
+                    })
+                remediations.append("Revert changes in unauthorized files using `git checkout -- <file>`.")
+
+        # 2. Diff Slop & Anti-pattern Check
+        diff_content = get_git_diff(self.repo_dir)
+        if diff_content:
+            diff_issues = audit_diff_for_slop(diff_content)
+            if diff_issues:
+                flaws.extend(diff_issues)
+                remediations.append("Remove all silent exception catchers, trivial assertions, or leftover debuggers.")
+
+        # 3. Verification Command Check
+        if self.verify_cmd:
+            code, out = run_command(self.verify_cmd, cwd=self.repo_dir)
+            if code != 0:
+                flaws.append({
+                    "file": "Workspace Test Suite",
+                    "line": "N/A",
+                    "issue": f"Verification command failed with exit code {code}",
+                    "evidence": "\n".join(out.strip().splitlines()[-10:])
+                })
+                remediations.append(f"Fix failing test cases and ensure `{self.verify_cmd}` exits 0.")
+
+        # 4. Adjudication
+        if flaws:
+            notice = format_rejection_notice(
+                worker_id=self.worker_id,
+                domain=self.domain,
+                flaws=flaws,
+                verification_cmd=self.verify_cmd or "git diff",
+                remediations=remediations
+            )
+            return False, notice, flaws
+        else:
+            return True, None, []

overwatcher_ai-0.1.0/src/overwatcher_ai.egg-info/PKG-INFO

@@ -0,0 +1,277 @@
+Metadata-Version: 2.4
+Name: overwatcher-ai
+Version: 0.1.0
+Summary: Hierarchical Multi-Agent Supervisor & Adversarial Red-Team Cross-Examiner
+Author-email: Fahad Bin Nasir <fahad@fahadbinnasir.tech>
+License: MIT
+Project-URL: Homepage, https://github.com/FahadBinNasir/overwatcher
+Project-URL: Documentation, https://github.com/FahadBinNasir/overwatcher#readme
+Project-URL: Repository, https://github.com/FahadBinNasir/overwatcher
+Project-URL: Issues, https://github.com/FahadBinNasir/overwatcher/issues
+Project-URL: Changelog, https://github.com/FahadBinNasir/overwatcher/blob/main/CHANGELOG.md
+Keywords: ai-agents,multi-agent,supervisor,cross-examiner,orchestrator,red-team,code-review,claude-code,antigravity,llm-ops
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+<div align="center">
+
+<img src="assets/banner.svg" alt="Overwatcher - Hierarchical Multi-Agent Supervisor" width="100%" />
+
+# <img src="assets/icons/logo.svg" width="32" height="32" align="center" alt="" /> Overwatcher
+
+**A supervisor skill for multi-agent coding workflows. Splits work into disjoint file domains, then rejects worker output that breaks its contract or fails verification.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-2563eb.svg)](LICENSE)
+[![Python 3.8+](https://img.shields.io/badge/Python-3.8%2B-3776AB?logo=python&logoColor=white)](https://python.org)
+
+[Quick start](#quick-start) · [How it works](#how-it-works) · [CLI](#cross-examiner-cli) · [Examples](#examples) · [Contributing](#contributing)
+
+</div>
+
+---
+
+## Why
+
+Unsupervised agent pipelines tend to fail in three ways:
+
+- **Drift:** workers edit files outside their task and break shared config.
+- **Collisions:** parallel workers edit the same files and create merge conflicts.
+- **False "done":** workers report "all tests pass" after deleting assertions, adding `assert True`, or wrapping errors in `except: pass`.
+
+Overwatcher counters each:
+
+| Failure | Defense |
+| :-- | :-- |
+| Drift | Per-worker contract listing authorized files; out-of-scope diffs are rejected |
+| Collisions | Contracts are disjoint; no two workers share a file |
+| False "done" | Claims are ignored. The diff is scanned for known shortcuts and a verify command must exit 0 |
+
+---
+
+## Quick start
+
+### 1. Install CLI & Python package
+```bash
+# Install via pip:
+pip install overwatcher-ai
+
+# Or install directly from GitHub:
+pip install git+https://github.com/FahadBinNasir/overwatcher.git
+```
+
+### 2. Install as an Agent Skill
+Claude Code shown; other platforms [below](#platform-install-paths):
+
+```bash
+mkdir -p .claude/skills/overwatcher
+cp SKILL.md .claude/skills/overwatcher/SKILL.md
+```
+
+Then ask your agent:
+
+> Use the overwatcher skill to refactor auth and the DB layer in parallel.
+
+The agent acts as supervisor: it partitions the task, dispatches workers, audits each result, and returns a verification report.
+
+---
+
+## How it works
+
+```mermaid
+flowchart TD
+    A[1. Partition & contracts] --> B[2. Parallel dispatch]
+    B --> C[3. Cross-examination]
+    C -->|fail| D[Rejection notice]
+    D --> B
+    C -->|pass| E[4. Synthesis & report]
+```
+
+### Rules
+
+1. **No trust in summaries.** Output is unverified until inspected and executed.
+2. **Adversarial review.** Look for edge cases, race conditions, leaks, and swallowed errors.
+3. **Disjoint ownership.** Workers never touch overlapping files.
+4. **Reject, don't patch.** Send failures back with line-numbered proof. The supervisor only patches after repeated worker failures.
+
+### Phases
+
+**1. Partition.** Split the goal into 2–4 independent domains (e.g. Auth, DB, API, UI). Give each worker a [contract](templates/worker_contract.md):
+- *Authorized targets:* exact file paths
+- *Acceptance criteria:* deliverables and test targets
+- *Forbidden:* mock fallbacks, leaked secrets, API breakage
+
+**2. Dispatch.** Start workers concurrently with domain-specific prompts. Wait on completion signals; don't poll.
+
+**3. Cross-examine.** When a worker reports done:
+1. **Diff:** confirm changes stay inside the contract; reject mocks, boilerplate, and new dependencies. The CLI automates the file-boundary and pattern checks.
+2. **Build:** run the project's compilers and linters (`tsc --noEmit`, `ruff`, `flake8`, ...).
+3. **Test:** run the targeted tests; check that assertions are real.
+4. **Verdict:** `REJECTION NOTICE` on any defect, otherwise `AUDITED & VERIFIED`.
+
+**4. Synthesize.** Run the full regression suite, then produce the [master report](templates/master_adjudication_report.md) with logs.
+
+---
+
+## Cross-examiner CLI
+
+Run via the installed `overwatcher` command or directly via `scripts/cross_examiner.py`. It requires only Python 3.8+ and git; no LLM needed.
+
+```bash
+# Run via installed CLI:
+overwatcher \
+  --worker "auth_guard" \
+  --domain "Authentication" \
+  --allowed-files "src/core/auth.py" "tests/test_auth.py" \
+  --verify-cmd "pytest tests/test_auth.py -v" \
+  --repo-dir .
+
+# Or run via standalone script:
+python scripts/cross_examiner.py ...
+```
+
+| Flag | Default | Purpose |
+| :-- | :-- | :-- |
+| `--worker` | `worker_subagent` | Worker ID, shown in the notice |
+| `--domain` | `core` | Domain name, shown in the notice |
+| `--allowed-files` | none | Glob patterns the worker may change. Boundary check is skipped if empty |
+| `--verify-cmd` | none | Shell command that must exit 0 |
+| `--repo-dir` | `.` | Git repository to audit |
+
+**Checks**
+1. **Boundaries:** files from `git status` must match an allowed glob (full path or basename, via `fnmatch`).
+2. **Diff patterns:** added lines in `git diff HEAD` are regex-scanned for:
+   - `except: pass`, `except Exception: pass`, empty `catch (...) {}`
+   - `assert True`, `assert 1 == 1`, `expect(true).toBe(true)`
+   - `debugger`, `breakpoint()`
+3. **Verify command:** run in the repo; non-zero exit is a failure (last 10 output lines are reported).
+
+**Exit codes:** `0` = `AUDITED & VERIFIED`, `1` = `REJECTED` (prints a rejection notice).
+
+### Limitations
+- Pattern matching is regex on diff text, not AST analysis. It catches common shortcuts, not all.
+- Audits the **working tree** against `HEAD`. Uncommitted changes only.
+- With parallel workers in one working tree, each audit sees the others' edits as violations. Give each worker its own `git worktree` or branch.
+- Basename matching means `auth.py` also matches `other/dir/auth.py`. Use full-path globs.
+- Untracked files count toward the boundary check, but their contents are not pattern-scanned.
+- `--verify-cmd` runs with `shell=True`. Pass only trusted commands.
+- Linters and builds run only if you put them in `--verify-cmd`.
+
+Run its tests:
+
+```bash
+python tests/test_cross_examiner.py
+```
+
+---
+
+## Platform install paths
+
+| Platform | Target |
+| :-- | :-- |
+| Claude Code | `.claude/skills/overwatcher/SKILL.md` |
+| Antigravity | `.agents/skills/overwatcher/SKILL.md` |
+| Cursor | `.cursor/rules/overwatcher.mdc` |
+| Cline / Roo-Code | `.clinerules` or `.roomodes` |
+| OpenHands | `.openhands/microagents/overwatcher.md` |
+| LangGraph / CrewAI | Call `scripts/cross_examiner.py` from a supervisor node |
+
+---
+
+## Message formats
+
+<details>
+<summary><b>Rejection notice</b> (sent to a worker on failure)</summary>
+
+```markdown
+[OVERWATCHER REJECTION NOTICE]
+Worker ID: {worker_name}
+Target Domain: {domain_name}
+Status: REJECTED — REWORK REQUIRED
+
+1. Flaws Detected:
+   - File: {file_path}:{line_number}
+     Issue: {defect}
+     Evidence: {failing_test_output_or_diff_snippet}
+
+2. Required Remediation:
+   - {instruction}
+
+Re-submit only after passing: `{verification_command}`.
+```
+</details>
+
+<details>
+<summary><b>Master report</b> (delivered to the user)</summary>
+
+```markdown
+# Overwatcher Master Verification Report
+
+## Summary
+- Domains audited: 2
+- Workers: 2
+- Cross-examination rounds: 3
+- Status: VERIFIED / ZERO REGRESSIONS
+
+## Breakdown
+| Domain | Worker | Files | Status | Evidence |
+| :-- | :-- | :-- | :-- | :-- |
+| Auth | auth_guard | src/core/auth.py | PASSED | 8/8 tests |
+| DB | db_reliability | src/core/db.py | PASSED | 14/14 tests |
+```
+</details>
+
+---
+
+## Examples
+
+| File | Shows |
+| :-- | :-- |
+| [sample_workflow.md](examples/sample_workflow.md) | End-to-end supervised refactor |
+| [sample_worker_contract.md](examples/sample_worker_contract.md) | A filled-in contract |
+| [sample_rejection_order.md](examples/sample_rejection_order.md) | A real rejection notice |
+| [sample_adjudication_report.md](examples/sample_adjudication_report.md) | A passing report |
+
+---
+
+## Repository layout
+
+```
+pyproject.toml        # PEP 517 / PEP 621 package config
+SKILL.md              # skill spec
+src/overwatcher/      # core Python package & CLI implementation
+templates/            # contract, rejection, report templates
+scripts/              # standalone wrapper script
+tests/                # cross_examiner tests
+examples/             # worked examples
+assets/               # logo, icons, and social banner
+```
+
+---
+
+## Contributing
+
+New audit rules, heuristics, and language support are welcome.
+
+1. Fork and branch: `git checkout -b feature/audit-rule`
+2. Add tests; run `python tests/test_cross_examiner.py`
+3. Open a PR
+
+---
+
+## License
+
+[MIT](LICENSE) © 2026 Fahad Bin Nasir

overwatcher_ai-0.1.0/src/overwatcher_ai.egg-info/SOURCES.txt

@@ -0,0 +1,13 @@
+LICENSE
+README.md
+pyproject.toml
+src/overwatcher/__init__.py
+src/overwatcher/__main__.py
+src/overwatcher/cli.py
+src/overwatcher/cross_examiner.py
+src/overwatcher_ai.egg-info/PKG-INFO
+src/overwatcher_ai.egg-info/SOURCES.txt
+src/overwatcher_ai.egg-info/dependency_links.txt
+src/overwatcher_ai.egg-info/entry_points.txt
+src/overwatcher_ai.egg-info/top_level.txt
+tests/test_cross_examiner.py

overwatcher_ai-0.1.0/src/overwatcher_ai.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

overwatcher_ai-0.1.0/src/overwatcher_ai.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+overwatcher = overwatcher.cli:main

overwatcher_ai-0.1.0/src/overwatcher_ai.egg-info/top_level.txt

@@ -0,0 +1 @@
+overwatcher

overwatcher_ai-0.1.0/tests/test_cross_examiner.py

@@ -0,0 +1,85 @@
+import unittest
+import os
+import sys
+
+# Add src and scripts directories to path
+sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "src")))
+sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "scripts")))
+
+import overwatcher
+from overwatcher import (
+    CrossExaminer,
+    check_file_boundaries,
+    audit_diff_for_slop,
+    format_rejection_notice,
+)
+
+
+class TestOverwatcherCrossExaminer(unittest.TestCase):
+    def test_package_metadata(self):
+        self.assertEqual(overwatcher.__version__, "0.1.0")
+        self.assertEqual(overwatcher.__author__, "Fahad Bin Nasir")
+
+    def test_file_boundaries_clean(self):
+        modified = ["src/auth/jwt.py", "tests/test_jwt.py"]
+        allowed = ["src/auth/*", "tests/*"]
+        violations = check_file_boundaries(modified, allowed)
+        self.assertEqual(violations, [])
+
+    def test_file_boundaries_breach(self):
+        modified = ["src/auth/jwt.py", "src/database/models.py", "tests/test_jwt.py"]
+        allowed = ["src/auth/*", "tests/*"]
+        violations = check_file_boundaries(modified, allowed)
+        self.assertEqual(violations, ["src/database/models.py"])
+
+    def test_audit_diff_slop_detection(self):
+        diff_sample = """--- a/src/auth.py
++++ b/src/auth.py
+@@ -10,4 +10,7 @@ def verify_token():
++    try:
++        decrypt()
++    except: pass
++    assert True
++    debugger
+"""
+        issues = audit_diff_for_slop(diff_sample)
+        self.assertTrue(len(issues) >= 3)
+        issues_text = " ".join(i["issue"] for i in issues)
+        self.assertIn("Bare exception swallowing", issues_text)
+        self.assertIn("Trivial test assertion", issues_text)
+        self.assertIn("Leftover debugger statement", issues_text)
+
+    def test_format_rejection_notice(self):
+        flaws = [{
+            "file": "src/auth.py",
+            "line": "12",
+            "issue": "Bare exception swallowing",
+            "evidence": "except: pass"
+        }]
+        remediations = ["Catch specific exceptions and log the error."]
+        notice = format_rejection_notice(
+            worker_id="worker_auth",
+            domain="security",
+            flaws=flaws,
+            verification_cmd="pytest tests/test_auth.py",
+            remediations=remediations
+        )
+        self.assertIn("[OVERWATCHER REJECTION NOTICE]", notice)
+        self.assertIn("Worker ID: worker_auth", notice)
+        self.assertIn("Bare exception swallowing", notice)
+        self.assertIn("pytest tests/test_auth.py", notice)
+
+    def test_cross_examiner_class_clean(self):
+        examiner = CrossExaminer(
+            allowed_files=["*"],
+            verify_cmd="python -c \"exit(0)\"",
+            worker_id="tester",
+            domain="unit_test"
+        )
+        # Test basic instantiation and properties
+        self.assertEqual(examiner.worker_id, "tester")
+        self.assertEqual(examiner.domain, "unit_test")
+
+
+if __name__ == "__main__":
+    unittest.main()