# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 68 → 49 (-19.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 97 → 100 (+3.0)
- Maturity 72 → 65 (-6.4)
- Readiness 55 → 26 (-29.1)
- Security 74 → 66 (-8.0)

## Resolved (16)

- Change coupling: ExecCommand.swift ↔ RunCommand.swift (vminitd/Sources/vmexec/ExecCommand.swift)
- Change coupling: LinuxContainer.swift ↔ VZVirtualMachineManager.swift (Sources/Containerization/LinuxContainer.swift)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- FileTooLong: Containerization/LinuxContainer.swift (Sources/Containerization/LinuxContainer.swift)
- FileTooLong: Containerization/LinuxPod.swift (Sources/Containerization/LinuxPod.swift)
- FileTooLong: ContainerizationNetlink/NetlinkSession.swift (Sources/ContainerizationNetlink/NetlinkSession.swift)
- FileTooLong: ContainerizationNetlink/Types.swift (Sources/ContainerizationNetlink/Types.swift)
- FileTooLong: SandboxContext/SandboxContext.grpc.swift (Sources/Containerization/SandboxContext/SandboxContext.grpc.swift)
- FileTooLong: SandboxContext/SandboxContext.pb.swift (Sources/Containerization/SandboxContext/SandboxContext.pb.swift)
- Further orphaned files (smaller)
- Further sole-owners (lower concentration)
- Off-boarding risk: anonymized user #1
- Scanner failed to run — not a clean result
- TooManyMethods: Vminitd (Sources/Containerization/Vminitd.swift)
- complexity unreadable for .swift — churn × complexity hotspots could not be measured

## New (14)

- Dimension evaluation failed
- High IaC: DS-0002 (Tests/TestImages/dockermanifestimage/Dockerfile)
- High IaC: DS-0002 (Tests/TestImages/emptyimage/Dockerfile)
- High: security finding (details withheld)
- Low IaC: DS-0005 (Tests/TestImages/dockermanifestimage/Dockerfile)
- Low IaC: DS-0005 (Tests/TestImages/emptyimage/Dockerfile)
- Low IaC: DS-0026 (Tests/TestImages/dockermanifestimage/Dockerfile)
- Low IaC: DS-0026 (Tests/TestImages/emptyimage/Dockerfile)
- Low IaC: DS-0026 (images/linux-dev/Dockerfile)
- Low IaC: DS-0026 (kernel/image/Dockerfile)
- Low IaC: DS-0026 (vminitd/.devcontainer/Dockerfile)
- No artifact signing
- No automated tests
- No tests found

## Changes since last survey

- 4 commits — 2 feature/other, 2 fixes

## By area

- (root) — 2 commits
- Sources/ContainerizationOCI — 2 commits

## Notable commits

- fix: Fix bug when comparing the Platform struct (#833)
- fix: fix(oci): render arm64 platform description without redundant v8 (#783)
- change: Use a custom volume for build cache inside of a container (#828)
- change: [gitignore]: ignore vscode workspace files (#817)