# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 61 → 48 (-12.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 95 → 90 (-4.9)
- Architecture 99 → 96 (-3.4)
- Maturity 64 → 63 (-0.4)
- Readiness 44 → 26 (-17.7)
- Security 77 → 60 (-17.3)

## Resolved (18)

- Change coupling: Package.swift ↔ VPhoneVirtualMachine.swift (Package.swift)
- Change coupling: Package.swift ↔ cfw.py (Package.swift)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- FileTooLong: DeviceTree/DeviceTreePatcher.swift (sources/FirmwarePatcher/DeviceTree/DeviceTreePatcher.swift)
- FileTooLong: Filesystem/CryptexFilesystemPatcher.swift (sources/FirmwarePatcher/Filesystem/CryptexFilesystemPatcher.swift)
- FileTooLong: vphone-cli/VPhoneControl.swift (sources/vphone-cli/VPhoneControl.swift)
- Further orphaned files (smaller)
- Further sole-owners (lower concentration)
- Off-boarding risk: anonymized user #1
- Orphaned knowledge (sources/FirmwarePatcher/Kernel/KernelPatcherBase.swift)
- Orphaned knowledge (sources/FirmwarePatcher/TXM/TXMDevPatcher.swift)
- TooManyMethods: CryptexFilesystemPatcher (sources/FirmwarePatcher/Filesystem/CryptexFilesystemPatcher.swift)
- TooManyMethods: KernelJBPatcher (sources/FirmwarePatcher/Kernel/KernelJBPatcher.swift)
- TooManyMethods: KernelPatcher (sources/FirmwarePatcher/Kernel/KernelPatcher.swift)
- TooManyMethods: VPhoneControl (sources/vphone-cli/VPhoneControl.swift)
- TooManyMethods: VPhoneMenuController (sources/vphone-cli/VPhoneMenuController.swift)
- complexity unreadable for .py, .swift — churn × complexity hotspots could not be measured

## New (5)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Medium: security finding (details withheld)
- No artifact signing
- No tests found

## Changes since last survey

- 9 commits — 9 feature/other, 0 fixes

## By area

- sources/VPhoneCore — 4 commits
- sources/vphone-cli — 3 commits
- (root) — 2 commits

## Notable commits

- change: deps: Add cmake
- change: requirements: Add missing setuptools
- change: vphone-cli: Add --disk-size to `vm create`
- change: vphone-cli: Add --headless boot option
- change: vphone-cli: Add `fw catalog` with recommended pairings and `--json`
- change: vphone-cli: Add network to `vm info`/`vm list` JSON
- change: vphone-cli: Show fw prepare output during vm create
- change: vphone-cli: Stream CFW install log live under --root-popup
- change: vphone-cli: Verify and repair libkeystone in the managed venv