# Changelog

## Score

- CAI 64 → 53 (-10.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 94 → 73 (-21.7)
- Architecture 88 → 88 (+0.2)
- Maturity 59 → 54 (-5.0)
- Readiness 56 → 39 (-16.9)
- Security 70 → 70 (+0.0)
- Performance 100 → 100 (+0.0)

## Resolved (3)

- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block
- Workflow holding a long-lived secret is unscoped

## New (7)

- Documentation: contradicts the code (docs/_docs/migration3-0.md)
- Leaked secret: hardcoded-credential (examples/borerSerialization/src/io/github/iltotore/iron/borerSerialization/main.scala)
- Leaked secret: hardcoded-credential (examples/borerSerialization/src/io/github/iltotore/iron/borerSerialization/main.scala)
- Leaked secret: hardcoded-credential (examples/formJsoniter/src/io/github/iltotore/iron/formJsoniter/main.scala)
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block (.github/workflows/ci.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/release.yml)

## Changes since last survey

- 1 commits — 0 feature/other, 1 fixes

## By area

- main/src — 1 commit

## Notable commits

- fix: fix: Avoid deprecated charWrapper in char constraints (#395)