# Changelog

## Score

- CAI 49 → 52 (+3.8)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 88 → 99 (+11.2)
- Architecture 100 → 100 (+0.0)
- Maturity 50 → 58 (+7.9)
- Readiness 26 → 26 (+0.0)
- Security 75 → 82 (+6.4)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (46)

- Dependency hygiene not measured — no supported dependency manifest was read
- High CVE: [GHSA redacted] (capability-provider/Cargo.lock)
- High IaC: DS-0002 (examples/bankaccount/eventcatalog/Dockerfile)
- Low IaC: DS-0026 (examples/bankaccount/eventcatalog/Dockerfile)
- Low IaC: DS-0026 (examples/lunar_frontiers/eventcatalog/Dockerfile)
- Medium CVE: [GHSA redacted] (capability-provider/Cargo.lock)
- Medium CVE: [GHSA redacted] (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2020-0071 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2022-0093 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2023-0034 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2023-0052 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2023-0053 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2023-0075 (crates/concordance-gen-core/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0003 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0019 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0332 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0336 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0404 (crates/concordance-gen/Cargo.lock)
- Medium CVE: RUSTSEC-2024-0421 (capability-provider/Cargo.lock)
- Medium CVE: RUSTSEC-2025-0009 (capability-provider/Cargo.lock)
- …and 26 more

## New (1)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene