# Changelog

## Baseline

- First survey — no prior run to compare against. CAI 68.

## Lenses

- Code Health 77
- Architecture 81
- Maturity 89
- Readiness 67
- Security 68
- Accessibility 65

## Changes since last survey

- 300 commits — 282 feature/other, 18 fixes

## By area

- openbank-infra/gitops — 232 commits
- (root) — 29 commits
- openbank-customer-edge/src — 4 commits
- openbank-kyb-service/src — 4 commits
- openbank-admin-ui/app-status.json — 3 commits
- openbank-admin-ui/src — 3 commits
- .github/workflows — 2 commits
- openbank-account-service/src — 2 commits
- openbank-aml-service/src — 2 commits
- openbank-interest-service/src — 2 commits
- openbank-party-service/src — 2 commits
- (repo) — 1 commit
- .github/gates — 1 commit
- build-logic/src — 1 commit
- docs/adr — 1 commit
- docs/threat-models — 1 commit
- openbank-admin-ui/package-lock.json — 1 commit
- openbank-admin-ui/security-kpis.json — 1 commit
- openbank-copilot-service/src — 1 commit
- openbank-delegation-service/src — 1 commit

## Notable commits

- fix: Revert "chore(interest): fire capitalization every 5 min in sandbox to measure #10404" (#10465)
- fix: fix(admin-ui): harden and accelerate operator workflows (#10138)
- fix: fix(admin-ui): harden operator evidence, contrast and table access (#10205)
- fix: fix(aml): point the party-resolution sweep at account-service, not localhost (#10380)
- fix: fix(consent): add an mTLS listener and point lending + copilot at it (#10400)
- fix: fix(document): give document-service an mTLS listener and point its three blocked callers at it (#10393)
- fix: fix(fx): give fx-service an mTLS listener and point transaction-service's rate lookup at it (#10401)
- fix: fix(infra): keep the plain-HTTP port on the seven mTLS listeners (#10505)
- fix: fix(infra): run infra-vuln-scanner's scan where a shell exists (#10519)
- fix: fix(interest): book late capitalizations forward and keep ledger 4xx out of the breaker (#10487)
- fix: fix(interest): recover capitalization claims stranded by a failed ledger post (#10470)
- fix: fix(ledger): give ledger an mTLS listener and point clearing + interest at it (#10397)
- fix: fix(lending): inject demonstration risk flag into CDI adapter (#10170)
- fix: fix(notification): point EMAIL recipient resolution at party-service, not localhost (#10382)
- fix: fix(party): make party read-modify-write atomic under a row lock (#10360)
- fix: fix(product-catalog): add an mTLS listener and point interest + lending at it (#10398)
- fix: fix(sca): add an mTLS listener and give account-service's SCA approval a URL and a bearer (#10402)
- fix: fix(transaction): give transaction-service an mTLS listener and wire interest's remittance leg to it (#10399)
- change: build(deps): Bump anyio in /.github/workflows/requirements (#10291)
- change: chore(admin-ui): deploy sandbox-01b1dae9f-run35475082277 (#10396)
- …and 280 more