# Changelog

## Score

- CAI 53 → 56 (+3.1)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 70 → 70 (+0.2)
- Architecture 100 → 94 (-6.0)
- Maturity 81 → 86 (+4.8)
- Readiness 64 → 72 (+7.6)
- Security 38 → 42 (+4.6)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 59 → 59 (+0.0)

## Resolved (234)

- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (go.mod)
- DatabaseTool.describeTable (cognitive 20) (tools/mcp-gateway/tools/mcp-database/tool.go)
- DatabaseTool.query (cognitive 26) (tools/mcp-gateway/tools/mcp-database/tool.go)
- DatabaseTool.query (cyclomatic 17) (tools/mcp-gateway/tools/mcp-database/tool.go)
- DatabaseTool.validateSQL (cognitive 16) (tools/mcp-gateway/tools/mcp-database/tool.go)
- Dependency hygiene not measured — no supported dependency manifest was read
- Disclosure policy routes reports to a public channel
- Duplicated block (10 lines × 2) (cmd/cli/client.go)
- Duplicated block (10 lines × 2) (examples/skill_agent/main.go)
- Duplicated block (10 lines × 2) (internal/agent/runtime/executor/node_adapter.go)
- Duplicated block (10 lines × 2) (internal/agent/runtime/executor/node_adapter.go)
- Duplicated block (10 lines × 2) (internal/agent/runtime/executor/runner.go)
- Duplicated block (10 lines × 2) (internal/api/http/handler.go)
- Duplicated block (10 lines × 2) (internal/api/http/handler.go)
- …and 214 more

## New (150)

- Change coupling: node_adapter.go ↔ memory_store.go (internal/agent/runtime/executor/node_adapter.go)
- Change coupling: runner.go ↔ store.go (internal/agent/runtime/executor/runner.go)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Disclosure policy has no reporting contact
- Duplicated block (10 lines × 2) (internal/agent/runtime/executor/node_adapter.go)
- Duplicated block (10 lines × 2) (internal/agent/runtime/executor/node_adapter.go)
- Duplicated block (10 lines × 2) (internal/api/http/handler.go)
- Duplicated block (10 lines × 2) (internal/api/http/handler.go)
- Duplicated block (10 lines × 2) (internal/app/api/app.go)
- Duplicated block (10 lines × 2) (internal/app/api/app.go)
- Duplicated block (10 lines × 2) (internal/app/api/app.go)
- Duplicated block (10 lines × 2) (internal/einoext/factory.go)
- Duplicated block (10 lines × 2) (internal/tool/builtin/ingest.go)
- Duplicated block (11 lines × 2) (internal/agent/executor/executor.go)
- Duplicated block (11 lines × 2) (internal/agent/runtime/executor/eino_agent/agent.go)
- Duplicated block (11 lines × 2) (internal/agent/runtime/executor/eino_agent/agent.go)
- Duplicated block (11 lines × 2) (internal/agent/runtime/executor/runner.go)
- Duplicated block (11 lines × 2) (internal/agent/runtime/executor/runner.go)
- Duplicated block (11 lines × 2) (internal/api/http/handler.go)
- Duplicated block (11 lines × 2) (internal/api/http/handler.go)
- …and 130 more