# Changelog

## Score

- CAI 63 → 61 (-1.4)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 97 → 97 (+0.5)
- Architecture 93 → 93 (+0.0)
- Maturity 43 → 40 (-3.0)
- Readiness 74 → 74 (+0.0)
- Security 82 → 82 (+0.0)

## Resolved (3)

- Off-boarding risk: anonymized user #1
- Redundant getter method. `orderings()` appears to be a duplicate or alias for `getOrderings()`. In standard PHP/Doctrine conventions, `get*` is the preferred naming convention for accessors.
- Workflow token permissions not restricted

## New (10)

- Documentation: no usage examples (docs/en/derived-collections.rst)
- Duplicate intent: Both methods return the same data (orderings). One follows the standard getter convention (`getOrderings`), while the other (`orderings`) is redundant and inconsistent with the rest of the API which uses `get` prefixes for accessors.
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted (.github/workflows/coding-standards.yml)
- Workflow token permissions not restricted (.github/workflows/composer-lint.yml)
- Workflow token permissions not restricted (.github/workflows/continuous-integration.yml)
- Workflow token permissions not restricted (.github/workflows/documentation.yml)
- Workflow token permissions not restricted (.github/workflows/release-on-milestone-closed.yml)
- Workflow token permissions not restricted (.github/workflows/static-analysis.yml)
- Workflow token permissions not restricted (.github/workflows/website-schema.yml)