# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 55 → 57 (+1.5)
- Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 99 → 99 (-0.6)
- Architecture 100 → 97 (-3.2)
- Maturity 48 → 47 (-0.9)
- Readiness 47 → 50 (+3.7)
- Security 80 → 95 (+15.3)
- Domain Modelling 85 → 85 (+0.2)
- Accessibility 66 → 66 (+0.0)

## Resolved (13)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — no supported dependency manifest was read
- Duplicated block (10 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/command/middleware/WithExecutionDurationLoggingCommandBusMiddleware.java)
- Duplicated block (13 lines × 3) (cqrs-spring-utils/src/main/java/com/barsifedron/candid/cqrs/spring/CommandHandlersRegistry.java)
- Duplicated block (18 lines × 2) (happy-neighbourhood-spring-shell/src/main/java/com/barsifedron/candid/cqrs/happy/shell/StartupApplicationListenerExample.java)
- Duplicated block (8 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/query/middleware/ExecutionDurationLoggingQueryBusMiddleware.java)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- LLM evaluation failed
- No exposed public API
- Test reliability not included
- dormant codebase — no living knowledge left to concentrate

## New (25)

- Dependency hygiene PARTLY measured — Maven/Gradle declarations read, no dependency graph resolved
- Documentation: no installation or build instructions (README.md)
- Duplicated block (10 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/query/middleware/ExecutionDurationLoggingQueryBusMiddleware.java)
- Duplicated block (10 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/query/middleware/WithFilteringQueryBusMiddleware.java)
- Duplicated block (11 lines × 2) (cqrs-spring-utils/src/main/java/com/barsifedron/candid/cqrs/spring/CommandHandlersRegistry.java)
- Duplicated block (11 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/domain/ItemId.java)
- Duplicated block (11 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/command/middleware/WithExecutionDurationLoggingCommandBusMiddleware.java)
- Duplicated block (11–16 lines × 3) (happy-neighbourhood-spring-shell/src/main/java/com/barsifedron/candid/cqrs/happy/shell/StartupApplicationListenerExample.java)
- Duplicated block (13 lines × 3) (cqrs-spring-utils/src/main/java/com/barsifedron/candid/cqrs/spring/CommandHandlersRegistry.java)
- Duplicated block (23 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/command/middleware/WithErrorLogCommandBusMiddleware.java)
- Duplicated block (6 lines × 2) (bus-cqrs-api/src/main/java/com/barsifedron/candid/cqrs/command/MapCommandBus.java)
- Duplicated block (6 lines × 2) (happy-neighbourhood-core/src/main/java/com/barsifedron/candid/cqrs/happy/utils/cqrs/command/middleware/ValidatingCommandBusMiddleware.java)
- Duplicated block (6 lines × 2) (happy-neighbourhood-spring-shell/src/main/java/com/barsifedron/candid/cqrs/happy/shell/controllers/ItemController.java)
- Duplicated block (9 lines × 2) (cqrs-spring-utils/src/main/java/com/barsifedron/candid/cqrs/spring/CommandHandlersRegistry.java)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- No ADRs found
- …and 5 more