# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 59 → 63 (+4.8)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 64 → 61 (-2.9)
- Architecture 100 → 100 (+0.0)
- Maturity 46 → 55 (+9.3)
- Readiness 79 → 79 (+0.0)
- Security 61 → 66 (+5.8)
- Domain Modelling 97 → 99 (+1.3)
- Event Sourcing 100 → 100 (+0.0)

## Resolved (17)

- Dependency hygiene not measured — no supported dependency manifest was read
- EditorData.go_to_definition (cyclomatic 17) (velocirust-app/src/editor.rs)
- EditorData.select_completion (cognitive 18) (velocirust-app/src/editor.rs)
- High IaC: DS-0002 (extra/linux/docker/alpine/Dockerfile)
- High IaC: DS-0002 (extra/linux/docker/debian/Dockerfile)
- High IaC: DS-0002 (extra/linux/docker/fedora/Dockerfile)
- High IaC: DS-0002 (extra/linux/docker/ubuntu/Dockerfile)
- High IaC: DS-0019 (extra/linux/docker/fedora/Dockerfile)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Low IaC: DS-0026 (extra/linux/docker/alpine/Dockerfile)
- Low IaC: DS-0026 (extra/linux/docker/debian/Dockerfile)
- Low IaC: DS-0026 (extra/linux/docker/fedora/Dockerfile)
- Low IaC: DS-0026 (extra/linux/docker/ubuntu/Dockerfile)
- PaletteData.preview (cognitive 16) (velocirust-app/src/palette.rs)
- plugin$module.plugin_info_view (cyclomatic 18) (velocirust-app/src/plugin.rs)

## New (50)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- FileTooLong: editor/view.rs (velocirust-app/src/editor/view.rs)
- FileTooLong: keypress/keymap.rs (velocirust-app/src/keypress/keymap.rs)
- FileTooLong: panel/debug_view.rs (velocirust-app/src/panel/debug_view.rs)
- FileTooLong: plugin/catalog.rs (velocirust-proxy/src/plugin/catalog.rs)
- FileTooLong: plugin/dap.rs (velocirust-proxy/src/plugin/dap.rs)
- FileTooLong: plugin/mod.rs (velocirust-proxy/src/plugin/mod.rs)
- FileTooLong: plugin/psp.rs (velocirust-proxy/src/plugin/psp.rs)
- FileTooLong: src/app.rs (velocirust-app/src/app.rs)
- FileTooLong: src/command.rs (velocirust-app/src/command.rs)
- FileTooLong: src/config.rs (velocirust-app/src/config.rs)
- FileTooLong: src/dap_types.rs (velocirust-rpc/src/dap_types.rs)
- FileTooLong: src/dispatch.rs (velocirust-proxy/src/dispatch.rs)
- FileTooLong: src/doc.rs (velocirust-app/src/doc.rs)
- FileTooLong: src/editor.rs (velocirust-app/src/editor.rs)
- FileTooLong: src/language.rs (velocirust-core/src/language.rs)
- FileTooLong: src/main_split.rs (velocirust-app/src/main_split.rs)
- FileTooLong: src/palette.rs (velocirust-app/src/palette.rs)
- FileTooLong: src/plugin.rs (velocirust-app/src/plugin.rs)
- FileTooLong: src/proxy.rs (velocirust-rpc/src/proxy.rs)
- …and 30 more