# Changelog

## Score

- CAI 68 → 59 (-9.1)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 100 → 76 (-24.2)
- Architecture 69 → 69 (+0.0)
- Maturity 59 → 43 (-16.2)
- Readiness 75 → 75 (+0.0)
- Security 87 → 87 (-0.4)

## Resolved (2)

- Inconsistent method signature for the primary crawling operation. `Wombat.crawl` takes only a block (implying the URL is configured elsewhere or via DSL), while `Crawler.crawl` takes an explicit `url` argument. This creates two different patterns for initiating a crawl depending on the entry point.
- Workflow token permissions not restricted

## New (5)

- Inconsistent crawl entry points: The main Wombat class takes a block but no explicit URL, while the Crawler class takes a URL and a block. It is unclear if Wombat.crawl implicitly uses a configured URL or if Crawler.crawl is the primary method, creating confusion about the correct entry point for crawling.
- Medium CVE: [GHSA redacted] (Gemfile.lock)
- Orphaned file (lib/wombat/processing/parser.rb)
- Orphaned files with no living knowledge
- Workflow token permissions not restricted (.github/workflows/ci.yml)