# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 57 → 58 (+0.9)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 75 → 75 (-0.0)
- Architecture 93 → 97 (+4.3)
- Maturity 55 → 54 (-0.6)
- Readiness 47 → 49 (+2.0)
- Security 76 → 75 (-1.3)

## Resolved (6)

- Duplicated block (5 lines × 2) (src/IcedTasks/ColdTask.fs)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (src/IcedTasks/CancellableTask.fs)
- Members sharing a duplicated core (7 members, 50+ identical tokens) (src/IcedTasks/CancellableTask.fs)
- Outdated: Microsoft.Bcl.AsyncInterfaces
- Projects may be oversized for their cohesion
- Workflow holding a long-lived secret is unscoped

## New (9)

- Duplicated block (23 lines × 2) (src/IcedTasks/ColdTask.fs)
- Duplicated block (9–11 lines × 2) (src/IcedTasks/CancellableTask.fs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- IL efficiency: 2 authored method(s) exceed the IL budget (build/FsDocs.fs)
- Low cohesion: FileWriteBenchmarks (LCOM4 11) (benchmarks/FSharpBenchmarks/FileWritingBenchmarks.fs)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (src/IcedTasks/CancellableTask.fs)
- Members sharing a duplicated core (7 members, 50+ identical tokens) (src/IcedTasks/CancellableTask.fs)
- Outdated: Microsoft.Bcl.AsyncInterfaces (Directory.Packages.props)

## Changes since last survey

- 5 commits — 4 feature/other, 1 fixes

## By area

- tests/IcedTasks.Tests — 2 commits
- (root) — 1 commit
- .github/workflows — 1 commit
- src/IcedTasks — 1 commit

## Notable commits

- fix: Fix multi-start of cold and cancellable tasks on the dynamic path (#67)
- change: Align the background cold builder exception path and remove comments (#66)
- change: Bump version to 0.11.10-beta001
- change: Speed up the test suite (#70)
- change: Use NuGet trusted publishing in the publish workflow (#68)

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)