# Changelog

## Score

- CAI 61 → 48 (-12.9)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 99 → 75 (-24.0)
- Architecture 73 → 73 (+0.0)
- Maturity 56 → 34 (-21.7)
- Readiness 61 → 61 (+0.0)
- Security 67 → 55 (-12.1)
- Accessibility 64 → 64 (+0.0)

## Resolved (3)

- High CVE: [GHSA redacted] (elasticsearch-api/elasticsearch-api.gemspec)
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block

## New (9)

- Duplicated block (12 lines × 5) (elasticsearch-api/api-spec-testing/rspec_matchers.rb)
- Duplicated block (13 lines × 4) (elasticsearch-api/api-spec-testing/rspec_matchers.rb)
- Off-boarding risk: anonymized user #1
- Orphaned file (elasticsearch-api/api-spec-testing/rspec_matchers.rb)
- Orphaned file (elasticsearch-api/api-spec-testing/test_file/task_group.rb)
- Orphaned file (elasticsearch-api/api-spec-testing/test_file/test.rb)
- PR-triggered workflow without a permissions block (.github/workflows/license.yml)
- PR-triggered workflow without a permissions block (.github/workflows/main.yml)
- PR-triggered workflow without a permissions block (.github/workflows/otel.yml)