Plan Detail Tabs
The Flow, Proof, Context, and Audit tabs on a plan's detail page, and how the Merkle audit chain and trust deltas are verified.
A plan's detail page organizes its information into four tabs.
Flow
The reasoning graph for the plan, an integrity strip, and - for a held plan - a decision rail to approve or reject it. A side panel plots the plan's trust-delta timeline (see Trust deltas below).
Proof
The tamper-evident record for the plan: an integrity banner, the commitment hashes (Merkle root, when it was committed, and the signing key used), the delegation chain that authorized it ("authority trace"), and the immutable record of what was committed. Verifying a plan here reads its persisted Merkle snapshot.
The Merkle audit chain
ArmorIQ's reasoning-graph hashing is built by CSRG, a dedicated service the backend calls to turn a plan's steps into a canonical, deterministic graph and a Merkle tree over that graph's leaves. The backend persists the resulting snapshot - root hash, internal nodes, and leaves - and can serve a stored inclusion proof for a step even if CSRG is unreachable, falling back to the live CSRG proof first when it's available.
The Merkle root is embedded in the plan's signed intent token as merkle_root, so a verifier holding the token can confirm a specific tool call belongs to the exact plan that was authorized - not a plan that was edited after the fact.
Context
The outcome of the plan: which policy rule fired, which tools were authorized versus actually attempted, and the plan's trust-delta history with a trust-over-the-run visualization.
Trust deltas
Trust deltas are a signed event log, not a reputation or trust score. There is no numeric trust rating for an agent or organization anywhere in the platform.
Each trust delta is a signed record of one event in a plan's cryptographic chain of custody:
| Delta Type | Meaning |
|---|---|
| ReAnchor | The plan was modified after its initial commit; the new Merkle root is chained to the previous one |
| Delegate | A delegation request was approved, extending trust to a downstream approver or agent |
| Revoke | A token or delegation was revoked, cascading to any delegations that descended from it |
Audit
The raw, step-by-step execution audit log for the plan - timestamp, action, result, and metadata for every recorded step.
Plans Governance
How intent plans move through pending, held, approved, and terminal states, and how human delegation approvals fit into that lifecycle.
Policies
Define fine-grained access control policies with the visual policy builder - tool permissions, IP restrictions, time constraints, and rate limiting.