# Changelog

## Score

- CAI 55 → 43 (-11.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 69 → 53 (-16.9)
- Architecture 100 → 97 (-3.4)
- Maturity 56 → 59 (+3.1)
- Readiness 56 → 22 (-34.4)
- Security 73 → 78 (+5.5)

## Resolved (4)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Further orphaned files (smaller)
- Scanner failed to run — not a clean result

## New (3)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- No tests found

## Changes since last survey

- 10 commits — 8 feature/other, 2 fixes

## By area

- (root) — 3 commits
- .github/workflows — 2 commits
- app/channels — 2 commits
- app/controllers — 2 commits
- bin/release — 1 commit

## Notable commits

- fix: Fix version number for CI built images
- fix: Merge pull request #229 from basecamp/fix-version-number
- change: Add ONCE backup and restore hooks
- change: Authorize the room message stream at subscribe time
- change: Document the self-hosted trust model in SECURITY.md (#230)
- change: Merge pull request #231 from basecamp/once-backup-hooks
- change: Merge pull request #232 from basecamp/security/room-type-scoping
- change: Port over automatic note generation
- change: Scope room lookup to the type each controller administers
- change: Scope the unread rooms stream per user