# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 48 → 51 (+2.6)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 83 → 84 (+1.0)
- Architecture 78 → 78 (-0.0)
- Maturity 56 → 59 (+2.8)
- Readiness 32 → 35 (+2.9)
- Security 60 → 64 (+3.9)
- Event-Driven 73 → 73 (+0.0)
- Accessibility 71 → 71 (+0.0)

## Resolved (9)

- Coverage not measured — analyzer environment
- Duplicated block (16 lines × 2) (src/LighthouseSocial.Data/Repositories/LighthouseRepository.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- TodoComment (src/LighthouseSocial.Backoffice/Pages/Lighthouse/List.cshtml.cs)
- TodoComment (src/LighthouseSocial.Backoffice/Pages/Lighthouse/List.cshtml.cs)
- TodoComment (src/LighthouseSocial.Infrastructure/Auditors/ExternalCommentAuditor.cs)
- TodoComment (src/LighthouseSocial.Infrastructure/Auditors/ExternalCommentAuditor.cs)
- Typo in the name 'Ligthouse' (missing 'h') compared to the correct spelling 'Lighthouse' used elsewhere in the codebase (e.g., LighthouseSocial.Domain.Entities.Lighthouse, LighthouseSocial.Application.Features.Lighthouse.*).

## New (11)

- Change coupling: CommentRepository.cs ↔ PhotoRepository.cs (src/LighthouseSocial.Data/Repositories/CommentRepository.cs)
- Coverage not measured — analyzer environment
- Duplicated block (14 lines × 2) (src/LighthouseSocial.Data/Repositories/LighthouseRepository.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- TodoComment (src/LighthouseSocial.Backoffice/Pages/Lighthouse/List.cshtml.cs)
- TodoComment (src/LighthouseSocial.Backoffice/Pages/Lighthouse/List.cshtml.cs)
- TodoComment (src/LighthouseSocial.Infrastructure/Auditors/ExternalCommentAuditor.cs)
- TodoComment (src/LighthouseSocial.Infrastructure/Auditors/ExternalCommentAuditor.cs)
- Typo in namespace/assembly path: 'Distribted' instead of 'Distributed'. This typo is present in the namespace path, which is inconsistent with the correct spelling 'Distributed' used in standard .NET libraries and likely intended here.
- Typo in service client name: 'Ligthouse' instead of 'Lighthouse'. This typo is present in the interface, implementation, and usage, but the misspelling itself is an inconsistency with the correct domain term 'Lighthouse' used elsewhere in the codebase (e.g., LighthouseRepository, LighthouseController).

## API surface

- Unchanged — 15 HTTP endpoints