# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 52 → 52 (+0.1)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 64 → 64 (+0.0)
- Readiness 44 → 44 (+0.0)
- Security 37 → 38 (+0.2)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (7)

- Duplicated block (12 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/core/data/paging/MovieRemoteMediator.kt)
- Duplicated block (13 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/feature/home/HomeViewModel.kt)
- Duplicated block (13 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/feature/home/HomeViewModel.kt)
- Duplicated block (14 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/core/data/paging/SearchMoviePagingSource.kt)
- High: security finding (details withheld)
- Medium: security finding (details withheld)
- The Getting Started section instructs readers to put the API key in local.properties but does not explain what happens after the key is configured (e.g. how search or details work with it). (README.md)

## New (6)

- Duplicated block (10 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/core/data/paging/MovieRemoteMediator.kt)
- Duplicated block (12 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/core/data/paging/SearchMoviePagingSource.kt)
- Duplicated block (12 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/feature/home/HomeViewModel.kt)
- Duplicated block (12 lines × 2) (composeApp/src/commonMain/kotlin/com/cinemax/feature/home/HomeViewModel.kt)
- High: security finding (details withheld)
- The Android build command is shown as `./gradlew :composeApp:assembleDebug` but the Gradle wrapper path and local.properties file location are not referenced in the Getting Started section. (README.md)

## Architecture

- Unchanged — 0 containers · 1 contexts · 0 edges
