# Changelog

## Score

- CAI 62 → 66 (+3.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 91 → 92 (+0.7)
- Architecture 100 → 100 (+0.0)
- Maturity 73 → 72 (-0.9)
- Readiness 47 → 47 (+0.0)
- Security 76 → 84 (+7.3)
- Event-Driven 100 → 100 (+0.0)
- Event Sourcing 100 → 100 (+0.0)

## Resolved (49)

- Critical CVE: [GHSA redacted] (_examples/basic/1-your-first-app/go.mod)
- Duplicated block (11 lines × 2) (_examples/real-world-examples/persistent-event-log/main.go)
- Duplicated block (11 lines × 2) (_examples/real-world-examples/server-sent-events/server/http.go)
- Duplicated block (12 lines × 2) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Duplicated block (12 lines × 2) (dev/update-examples-deps/main.go)
- Duplicated block (13 lines × 2) (components/cqrs/event_processor.go)
- Duplicated block (14 lines × 2) (_examples/real-world-examples/delayed-messages/main.go)
- Duplicated block (14 lines × 2) (components/cqrs/command_processor.go)
- Duplicated block (15 lines × 2) (components/cqrs/command_processor.go)
- Duplicated block (15 lines × 3) (_examples/real-world-examples/consumer-groups/newsletter-service/main.go)
- Duplicated block (16 lines × 2) (_examples/real-world-examples/exactly-once-delivery-counter/server/main.go)
- Duplicated block (16 lines × 3) (_examples/pubsubs/sql/main.go)
- Duplicated block (17 lines × 2) (_examples/real-world-examples/delayed-messages/main.go)
- Duplicated block (17 lines × 4) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Duplicated block (18 lines × 7) (_examples/real-world-examples/consumer-groups/newsletter-service/main.go)
- Duplicated block (19 lines × 2) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Further sole-owners (lower concentration)
- High IaC: DS-0002 (_examples/real-world-examples/server-sent-events-htmx/Dockerfile)
- High IaC: DS-0002 (_examples/real-world-examples/server-sent-events-htmx/docker/Dockerfile)
- High vulnerability: [GHSA redacted] (_examples/pubsubs/googlecloud/go.mod)
- …and 29 more

## New (24)

- Critical CVE: [GHSA redacted] (tools/mill/go.mod)
- Duplicated block (10 lines × 2) (_examples/real-world-examples/persistent-event-log/main.go)
- Duplicated block (10 lines × 2) (dev/update-examples-deps/main.go)
- Duplicated block (11 lines × 2) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Duplicated block (12 lines × 2) (components/cqrs/event_processor.go)
- Duplicated block (13 lines × 2) (_examples/real-world-examples/delayed-messages/main.go)
- Duplicated block (13 lines × 2) (components/cqrs/command_processor.go)
- Duplicated block (14 lines × 2) (components/cqrs/command_processor.go)
- Duplicated block (14 lines × 3) (_examples/real-world-examples/consumer-groups/newsletter-service/main.go)
- Duplicated block (15 lines × 2) (_examples/real-world-examples/exactly-once-delivery-counter/server/main.go)
- Duplicated block (15 lines × 3) (_examples/pubsubs/sql/main.go)
- Duplicated block (16 lines × 2) (_examples/real-world-examples/delayed-messages/main.go)
- Duplicated block (16 lines × 4) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Duplicated block (17 lines × 7) (_examples/real-world-examples/consumer-groups/newsletter-service/main.go)
- Duplicated block (18 lines × 2) (_examples/real-world-examples/consumer-groups/crm-service/main.go)
- Duplicated block (9 lines × 2) (_examples/pubsubs/nats-core/main.go)
- Duplicated block (9 lines × 2) (_examples/real-world-examples/server-sent-events/server/http.go)
- High vulnerability: [GHSA redacted] (tools/mill/go.mod)
- Medium CVE: [GHSA redacted] (tools/mill/go.mod)
- Medium CVE: GO-2025-3955 (dev/validate-examples/go.mod)
- …and 4 more