# Changelog

## Score

- CAI 48 → 51 (+3.2)
- Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (-0.2)
- Architecture 69 → 69 (+0.0)
- Maturity 80 → 85 (+5.5)
- Readiness 18 → 25 (+6.8)
- Security 100 → 88 (-11.8)
- Domain Modelling 67 → 68 (+0.5)

## Resolved (8)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — no supported dependency manifest was read
- No exposed public API
- Test reliability not included
- early-stage repository — too few commits for a meaningful bus factor
- early-stage repository — too little history to judge knowledge freshness
- git history depth insufficient
- git history depth insufficient

## New (34)

- Documentation: no installation or build instructions (README.md)
- Duplicated block (9 lines × 2) (src/controllers/product_controller.rs)
- High CVE: [GHSA redacted] (Cargo.lock)
- High IaC: WD-COMPOSE-0002 (docker-compose.yml)
- High IaC: WD-COMPOSE-0002 (docker-compose.yml)
- High vulnerability: [GHSA redacted] (Cargo.lock)
- High vulnerability: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: RUSTSEC-2024-0336 (Cargo.lock)
- Medium CVE: RUSTSEC-2025-0055 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2021-0141 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2024-0384 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2024-0436 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2025-0010 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2025-0056 (Cargo.lock)
- …and 14 more