# Changelog

## Score

- CAI 62 → 57 (-4.6)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 99 → 75 (-24.1)
- Architecture 69 → 69 (+0.0)
- Maturity 49 → 43 (-5.9)
- Readiness 65 → 65 (+0.0)
- Security 97 → 97 (+0.0)

## Resolved (3)

- Duplicate functionality with inconsistent signatures. The class method accepts an 'options' argument while the instance method does not, despite both performing decryption. This creates confusion about where options should be passed.
- Duplicate functionality with inconsistent signatures. The class method accepts an 'options' argument while the instance method does not, despite both performing encryption.
- Workflow token permissions not restricted

## New (5)

- Duplicate intent with inconsistent signatures. Similar to decryption, the class method accepts an optional `options` hash while the instance method does not, despite performing the same encryption operation.
- Duplicate intent with inconsistent signatures. The class method and instance method perform the same decryption logic but differ in parameter count (class method accepts an optional `options` hash, instance method does not). This creates confusion about where to pass configuration.
- Orphaned file (lib/attr_encrypted.rb)
- Orphaned file (lib/attr_encrypted/adapters/active_record.rb)
- Workflow token permissions not restricted (.github/workflows/CI.yml)