# Changelog

## Score

- CAI 41 → 43 (+1.5)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 67 → 67 (+0.0)
- Architecture 70 → 70 (-0.0)
- Maturity 47 → 51 (+3.1)
- Readiness 32 → 32 (+0.0)
- Security 39 → 44 (+4.5)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 56 → 56 (+0.0)

## Resolved (34)

- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- …and 14 more

## New (24)

- Change coupling: Endpoint.cs ↔ Endpoint.cs (src/Application/Endpoint.cs)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- High vulnerability: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- Medium CVE: [GHSA redacted] (src/Web/ClientApp/yarn.lock)
- …and 4 more

## API surface

- Unchanged — 8 HTTP endpoints