# Health changelog

## Score

- CAI 41 → 49 (+7.4)
- Rubric changed (rubric-2026.08.12 → rubric-2026.08.13) — scores are not directly comparable.

## Lenses

- Code Health 65 → 65 (+0.0)
- Architecture 100 → 69 (-31.0)
- Maturity 65 → 69 (+3.6)
- Readiness 34 → 49 (+14.7)
- Security 29 → 39 (+9.7)

## Resolved (91)

- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [CVE redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- Critical CVE: [GHSA redacted] (docs/package-lock.json)
- …and 71 more

## New (4)

- A codebase of 486 lines of code across 3 projects is too small to warrant explicit bounded context declarations.
- Low XML-doc coverage: Arcus.EventGrid.Proxy.Api (src/Arcus.EventGrid.Proxy.Api/Arcus.EventGrid.Proxy.Api.csproj)
- redundant comment (src/Arcus.EventGrid.Proxy.Api/Startup.cs)
- redundant comment (src/Arcus.EventGrid.Proxy.Tests.Integration/Endpoints/v1/EventEndpointTests.cs)