# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 47 → 34 (-12.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 29 → 38 (+8.7)
- Architecture 98 → 69 (-28.8)
- Maturity 76 → 60 (-15.7)
- Readiness 45 → 19 (-26.1)
- Security 66 → 54 (-11.7)

## Resolved (466)

- (anonymous) (cognitive 19) (packages/whatsapp-gateway/index.js)
- (anonymous) (cognitive 43) (packages/whatsapp-gateway/index.js)
- AgentRouter::binding_matches (cognitive 18) (crates/openfang-channels/src/router.rs)
- AgentSelectState::handle_agent_list (cognitive 23) (crates/openfang-cli/src/tui/screens/agents.rs)
- AgentSelectState::handle_agent_list (cyclomatic 17) (crates/openfang-cli/src/tui/screens/agents.rs)
- AnthropicDriver::complete (cognitive 17) (crates/openfang-runtime/src/drivers/anthropic.rs)
- AnthropicDriver::stream (cognitive 152) (crates/openfang-runtime/src/drivers/anthropic.rs)
- AnthropicDriver::stream (cyclomatic 53) (crates/openfang-runtime/src/drivers/anthropic.rs)
- App::draw_tab_bar (cognitive 29) (crates/openfang-cli/src/tui/mod.rs)
- App::draw_tab_bar (cyclomatic 17) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_agent_action (cyclomatic 16) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_channel_action (cognitive 17) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_event (cognitive 57) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_event (cyclomatic 109) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_key (cognitive 44) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_key (cyclomatic 64) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_slash_command (cognitive 78) (crates/openfang-cli/src/tui/mod.rs)
- App::handle_slash_command (cyclomatic 34) (crates/openfang-cli/src/tui/mod.rs)
- App::switch_model (cognitive 25) (crates/openfang-cli/src/tui/mod.rs)
- AuditLog::with_db (cognitive 17) (crates/openfang-runtime/src/audit.rs)
- …and 446 more

## New (68)

- (anonymous) (cognitive 20) (packages/whatsapp-gateway/index.js)
- (anonymous) (cognitive 45) (packages/whatsapp-gateway/index.js)
- Change coupling: agents.js ↔ wizard.js (crates/openfang-api/static/js/pages/agents.js)
- Change coupling: chat.js ↔ wizard.js (crates/openfang-api/static/js/pages/chat.js)
- Critical CVE: [GHSA redacted] (agents/langchain-code-reviewer/requirements.txt)
- Dimension evaluation failed
- High CVE: [GHSA redacted] (agents/langchain-code-reviewer/requirements.txt)
- High CVE: [GHSA redacted] (agents/langchain-code-reviewer/requirements.txt)
- High CVE: [GHSA redacted] (Cargo.lock)
- High CVE: [GHSA redacted] (Cargo.lock)
- High CVE: [GHSA redacted] (agents/langchain-code-reviewer/requirements.txt)
- High CVE: [GHSA redacted] (Cargo.lock)
- High CVE: [GHSA redacted] (agents/langchain-code-reviewer/requirements.txt)
- High CVE: [GHSA redacted] (Cargo.lock)
- Hotspot: crates/openfang-api/static/js/app.js (crates/openfang-api/static/js/app.js)
- Hotspot: crates/openfang-api/static/js/pages/agents.js (crates/openfang-api/static/js/pages/agents.js)
- Hotspot: crates/openfang-api/static/js/pages/settings.js (crates/openfang-api/static/js/pages/settings.js)
- Low IaC: DS-0026 (scripts/docker/install-smoke.Dockerfile)
- Low: security finding (details withheld)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- …and 48 more