diff --git a/pkgbuilds/omarchy-settings-dev/omarchy-settings-dev.install b/pkgbuilds/omarchy-settings-dev/omarchy-settings-dev.install
index b0470d695..d1b0fc468 100644
--- a/pkgbuilds/omarchy-settings-dev/omarchy-settings-dev.install
+++ b/pkgbuilds/omarchy-settings-dev/omarchy-settings-dev.install
@@ -47,6 +47,10 @@ post_upgrade() {
 }
 
 post_remove() {
+  # Removing this package also removes the boot-time tmpfiles rule that owns
+  # this namespace, so revoke any live Omarchy grant in the same transaction.
+  rm -f -- /etc/sudoers.d/99-omarchy-nopasswd-*
+
   # Restore the standard Arch selector if removing this package left its exact
   # Omarchy link dangling. During a stable/dev replacement, the incoming
   # package either still supplies the target or replaces this link afterward.
diff --git a/pkgbuilds/omarchy-settings/omarchy-settings.install b/pkgbuilds/omarchy-settings/omarchy-settings.install
index 4fbcf4457..a33c68ae0 100644
--- a/pkgbuilds/omarchy-settings/omarchy-settings.install
+++ b/pkgbuilds/omarchy-settings/omarchy-settings.install
@@ -47,6 +47,10 @@ post_upgrade() {
 }
 
 post_remove() {
+  # Removing this package also removes the boot-time tmpfiles rule that owns
+  # this namespace, so revoke any live Omarchy grant in the same transaction.
+  rm -f -- /etc/sudoers.d/99-omarchy-nopasswd-*
+
   # Restore the standard Arch selector if removing this package left its exact
   # Omarchy link dangling. During a stable/dev replacement, the incoming
   # package either still supplies the target or replaces this link afterward.