# Changelog

## Score

- CAI 59 → 66 (+7.2)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 63 → 65 (+1.9)
- Architecture 81 → 84 (+2.9)
- Maturity 51 → 70 (+19.8)
- Readiness 62 → 62 (-0.1)
- Security 77 → 77 (+0.0)

## Resolved (3)

- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block
- Workflow holding a long-lived secret is unscoped

## New (11)

- Documentation: no architecture or design documentation (README.md)
- Off-boarding risk: anonymized user #1
- Outdated (compile): com.fasterxml.jackson.core:jackson-core
- Outdated (compile): com.fasterxml.jackson.core:jackson-databind
- Outdated (compile): com.fasterxml.jackson.module:jackson-module-scala_2.13
- PR-triggered workflow without a permissions block (.github/workflows/build-docs.yaml)
- PR-triggered workflow without a permissions block (.github/workflows/build-maven.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/backport.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/publish-docs.yaml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/release.yml)
- Workflow token permissions not restricted (.github/workflows/dispatch-release.yaml)

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)