-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[MEDIUM] armorcodex runtime banner claims ENFORCING despite documented gaps that make most tools uninterceptable
architectureSystemic architecture issuesSystemic architecture issuesbugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#64 In armoriq/armorCodex;[HIGH] Both CLI plugins route every failure through a debug logger that is disabled by default
audit-logAudit trail and logging gapsAudit trail and logging gapsbugSomething isn't workingSomething isn't workingdxDeveloper experienceDeveloper experienceStatus: Open.#63 In armoriq/armorCodex;[HIGH][SECURITY] Crypto tamper check fails open when verification fails (scope: cache present but invalid)
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#62 In armoriq/armorCodex;[HIGH][SECURITY] armorcodex treats a non-2xx backend response carrying JSON as an authorization
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#61 In armoriq/armorCodex;[HIGH][SECURITY] Corrupt or unreadable config silently disables enforcement while the banner still prints ENFORCING
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#60 In armoriq/armorCodex;[CRITICAL][SECURITY] armorcodex policy_update over MCP bypasses the actor allowlist the hook path enforces
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#59 In armoriq/armorCodex;- Status: Open.#51 In armoriq/armorCodex;
- Status: Open.#50 In armoriq/armorCodex;
- Status: Open.#49 In armoriq/armorCodex;
[MEDIUM] ArmorCodex has no MCP deny-by-default gate
securitySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#48 In armoriq/armorCodex;[MEDIUM] ArmorCodex has no trust lifecycle operations (Revoke, ReAnchor, Delegate)
architectureSystemic architecture issuesSystemic architecture issuesStatus: Open.#47 In armoriq/armorCodex;[MEDIUM] ArmorCodex has no audit WAL -- crash loses in-flight audit rows
bugSomething isn't workingSomething isn't workingStatus: Open.#46 In armoriq/armorCodex;