[HIGH][SECURITY] Crypto tamper check fails open when verification fails (scope: cache present but invalid)

[Aniketvish0]

Migrated from armoriq/conmap-auto#713.

Fix lands in: armoriq/armorclaude and armoriq/armorcodex. Filed here because conmap-auto is this session's tracker for CLI/SDK work.

Line refs from origin/main: armorclaude @ 688bbc3 (AC), armorcodex @ 72d9e13 (AX).

AC engine.mjs:879-893 and AX engine.mjs:339-354 — the integrity check catches, writes a debugLog (off by default, see the companion debug-logging issue) and continues.

Separately the check is skipped altogether when the digest cache is missing, and that file is trivially deletable.

Ask

• Fail closed.
• Treat a missing digest cache as a failed verification, not a skip.

[Aniketvish0]

Filed in both CLI plugin repos — the defect has a distinct instance in each.
Companion: armoriq/armorClaude#113