Audit before pairing
Pairing is disabled on the live install. No config or restart change is made in this lesson.
Treat devices as access
A paired device can reach agents and create spending. Inventory is an access review.
Read the two entry points
armaraos devices pair
armaraos qr
List before removal
armaraos devices list --json
Read the error literally
Pairing not enabled is not an empty device array. A roster cannot be claimed.
Remove only a genuine ID
armaraos devices remove <DEVICE_ID>
No ID exists in current output, so no removal runs.
Keep the localhost boundary visible
Pairing widens who can reach the local service, so it deserves recurring review.
Leave disabled state intact
Enabling pairing would require a config change and restart, neither needed for this access-control lesson.
Check it / distinguish unavailable from empty
Why is there no revoke candidate?
Point to the pairing-disabled error and the absence of a real device ID.
Device removal is immediate. Use only an exact ID you cannot account for.