# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 58 → 58 (-0.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 60 → 58 (-1.8)
- Architecture 86 → 86 (+0.0)
- Maturity 76 → 77 (+0.6)
- Readiness 52 → 52 (+0.1)
- Security 61 → 61 (-0.3)
- Accessibility 66 → 66 (+0.0)
- Performance 67 → 66 (-1.2)

## Resolved (10)

- Build action pinned to a mutable branch
- Dead code: TypedConsumerServiceSelector (samples/Sample.RabbitMQ.SqlServer/TypedConsumers/TypedConsumerServiceSelector.cs)
- LLM evaluation failed
- Low coverage: BrokerConnectionException.cs (src/DotNetCore.CAP/BrokerConnectionException.cs)
- Low coverage: FilterContext.cs (src/DotNetCore.CAP/Internal/Filter/FilterContext.cs)
- Low coverage: SubscriberNotFoundException.cs (src/DotNetCore.CAP/SubscriberNotFoundException.cs)
- No assertions: ChangePublishStateTest (test/DotNetCore.CAP.MySql.Test/MySqlStorageConnectionTest.cs)
- Off-boarding risk: anonymized user #1
- The type `MediumMessage` is used as a parameter type in `IDataStorage` methods (e.g., `StoreMessageAsync`, `StoreReceivedMessageAsync`), but the class `MediumMessage` is also referenced directly in other parts of the codebase (e.g., `MongoDBDataStorage.ChangeReceiveStateAsync`). While the name is consistent, the usage pattern suggests `MediumMessage` is a specific implementation detail that is exposed in the public API of `IDataStorage`, which might be an inconsistency if `MediumMessage` is an internal concept not meant to be part of the public contract.
- redundant comment (samples/Sample.ConsoleApp/Program.cs)

## New (40)

- CRAP 34: AzureServiceBusTransport.SendAsync (src/DotNetCore.CAP.AzureServiceBus/ITransport.AzureServiceBus.cs)
- CRAP 43: ConsumerRegister.WriteLog (src/DotNetCore.CAP/Internal/IConsumerRegister.Default.cs)
- EmptyCatchBlock (src/DotNetCore.CAP.NATS/NATSConsumerClient.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Low XML-doc coverage: BuildScript (build/BuildScript.csproj)
- Low XML-doc coverage: DotNetCore.CAP(net8.0) (src/DotNetCore.CAP/DotNetCore.CAP.csproj)
- Low XML-doc coverage: DotNetCore.CAP.AmazonSQS (src/DotNetCore.CAP.AmazonSQS/DotNetCore.CAP.AmazonSQS.csproj)
- Low XML-doc coverage: DotNetCore.CAP.AzureServiceBus (src/DotNetCore.CAP.AzureServiceBus/DotNetCore.CAP.AzureServiceBus.csproj)
- Low XML-doc coverage: DotNetCore.CAP.Dashboard (src/DotNetCore.CAP.Dashboard/DotNetCore.CAP.Dashboard.csproj)
- Low XML-doc coverage: DotNetCore.CAP.Dashboard.K8s (src/DotNetCore.CAP.Dashboard.K8s/DotNetCore.CAP.Dashboard.K8s.csproj)
- Low XML-doc coverage: DotNetCore.CAP.InMemoryStorage (src/DotNetCore.CAP.InMemoryStorage/DotNetCore.CAP.InMemoryStorage.csproj)
- Low XML-doc coverage: DotNetCore.CAP.Kafka (src/DotNetCore.CAP.Kafka/DotNetCore.CAP.Kafka.csproj)
- Low XML-doc coverage: DotNetCore.CAP.MongoDB (src/DotNetCore.CAP.MongoDB/DotNetCore.CAP.MongoDB.csproj)
- Low XML-doc coverage: DotNetCore.CAP.MySql(net8.0) (src/DotNetCore.CAP.MySql/DotNetCore.CAP.MySql.csproj)
- Low XML-doc coverage: DotNetCore.CAP.NATS (src/DotNetCore.CAP.NATS/DotNetCore.CAP.NATS.csproj)
- Low XML-doc coverage: DotNetCore.CAP.OpenTelemetry (src/DotNetCore.CAP.OpenTelemetry/DotNetCore.CAP.OpenTelemetry.csproj)
- Low XML-doc coverage: DotNetCore.CAP.PostgreSql(net8.0) (src/DotNetCore.CAP.PostgreSql/DotNetCore.CAP.PostgreSql.csproj)
- Low XML-doc coverage: DotNetCore.CAP.Pulsar (src/DotNetCore.CAP.Pulsar/DotNetCore.CAP.Pulsar.csproj)
- Low XML-doc coverage: DotNetCore.CAP.RabbitMQ (src/DotNetCore.CAP.RabbitMQ/DotNetCore.CAP.RabbitMQ.csproj)
- …and 20 more

## API surface

- Unchanged — 7 HTTP endpoints