# Changelog

## Score

- CAI 48 → 50 (+1.1)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 54 → 54 (+0.0)
- Readiness 17 → 26 (+8.4)
- Security 98 → 78 (-19.9)

## Resolved (2)

- Dependency hygiene not measured — no supported dependency manifest was read
- Low IaC: DS-0026 (Dockerfile)

## New (16)

- Critical CVE: [GHSA redacted] (composer.lock)
- Critical CVE: [GHSA redacted] (composer.lock)
- Critical CVE: [GHSA redacted] (composer.lock)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High CVE: [GHSA redacted] (composer.lock)
- High CVE: [GHSA redacted] (composer.lock)
- High CVE: [GHSA redacted] (composer.lock)
- High CVE: [GHSA redacted] (composer.lock)
- High CVE: [GHSA redacted] (composer.lock)
- High CVE: [GHSA redacted] (composer.lock)
- Low CVE: [GHSA redacted] (composer.lock)
- Low CVE: [GHSA redacted] (composer.lock)
- Low CVE: [GHSA redacted] (composer.lock)
- Medium CVE: [GHSA redacted] (composer.lock)
- Medium CVE: [GHSA redacted] (composer.lock)
- Medium CVE: [GHSA redacted] (composer.lock)