[MEDIUM] ArmorCodex has no trust lifecycle operations (Revoke, ReAnchor, Delegate)

[Aniketvish0]

ArmorCodex has no trust lifecycle operations (Revoke, ReAnchor, Delegate)

Severity: MEDIUM
Type: architecture
Audit area: armor-tools-policy
Parent: armoriq/armorClaude#83

Evidence

grep for autoRevoke/revokeViaSdk/reanchorViaSdk/delegateSubtree in armorcodex returns no results. ArmorClaude engine.mjs has auto-reanchor on plan change (line 667-728), auto-revoke on session end (line 1319-1348), and full trust operation logging via appendTrustOp.

Files

• armorclaude/scripts/lib/engine.mjs:667-728
• armorclaude/scripts/lib/engine.mjs:1319-1348
• armorclaude/scripts/lib/iap-service.mjs:282-391

Suggested Fix

N/A

---

From ArmorIQ Platform Audit Jul-2026