[MEDIUM] ArmorCodex has no audit WAL -- crash loses in-flight audit rows

[Aniketvish0]

ArmorCodex has no audit WAL -- crash loses in-flight audit rows

Severity: MEDIUM
Type: bug
Audit area: armor-tools-policy
Parent: armoriq/armorClaude#83

Evidence

ArmorCodex engine.mjs PostToolUse (line 616) calls iapService.createAuditLog(dto) directly with no WAL/daemon. If the process crashes or the HTTP call fails, the audit row is silently lost. ArmorClaude has audit-wal.mjs with JSONL append + shipped.offset for crash recovery.

Files

• armorcodex/plugins/armorcodex/scripts/lib/engine.mjs:616
• armorclaude/scripts/lib/audit-wal.mjs:1-208

Suggested Fix

N/A

---

From ArmorIQ Platform Audit Jul-2026