# Changelog

## Score

- CAI 66 → 53 (-13.3)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 98 → 74 (-23.5)
- Architecture 99 → 99 (+0.1)
- Maturity 53 → 32 (-21.1)
- Readiness 61 → 61 (+0.0)
- Security 90 → 84 (-5.4)

## Resolved (2)

- Members sharing a duplicated core (4 members, 50+ identical tokens) (lib/vagrant-parallels/action.rb)
- Workflow token permissions not restricted

## New (17)

- Members sharing a duplicated core (4 members, 50+ identical tokens) (lib/vagrant-parallels/action.rb)
- Orphaned file (lib/vagrant-parallels/action.rb)
- Orphaned file (lib/vagrant-parallels/action/box_register.rb)
- Orphaned file (lib/vagrant-parallels/action/export.rb)
- Orphaned file (lib/vagrant-parallels/action/forward_ports.rb)
- Orphaned file (lib/vagrant-parallels/action/handle_guest_tools.rb)
- Orphaned file (lib/vagrant-parallels/action/import.rb)
- Orphaned file (lib/vagrant-parallels/action/network.rb)
- Orphaned file (lib/vagrant-parallels/config.rb)
- Orphaned file (lib/vagrant-parallels/driver/meta.rb)
- Orphaned file (lib/vagrant-parallels/errors.rb)
- Orphaned file (lib/vagrant-parallels/plugin.rb)
- Orphaned file (lib/vagrant-parallels/provider.rb)
- Orphaned file (lib/vagrant-parallels/synced_folder.rb)
- Orphaned file (lib/vagrant-parallels/util/unix_mount_helpers.rb)
- The Driver exposes two distinct methods for reading the guest IP based on the source (DHCP leases vs prlctl output). This forces consumers to know which source is authoritative or to implement fallback logic themselves, rather than having a single `guest_ip` or `read_guest_ip` method that handles the resolution strategy internally.
- Workflow token permissions not restricted (.github/workflows/pr-build.yml)

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)