# Changelog

## Score

- CAI 28 → 47 (+18.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 79 (new)
- Architecture 79 (new)
- Maturity 13 → 82 (+69.1)
- Readiness 15 → 25 (+9.5)
- Security 100 → 49 (-51.5)
- Event-Driven 100 (new)

## Resolved (7)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (105)

- Bounded contexts not declared
- CpfValidator.IsValid (cognitive 17) (src/BankMore.ContaCorrente.Application/Services/CpfValidator.cs)
- Critical CVE: [GHSA redacted] (frontend/package-lock.json)
- Critical CVE: [GHSA redacted] (frontend/package-lock.json)
- Deprecated: xunit
- Duplicated block (10 lines × 2) (src/BankMore.BacenSim/Iso20022/PacsAssinatura.cs)
- Duplicated block (12 lines × 2) (src/BankMore.BacenSim/Iso20022/PacsAssinatura.cs)
- Duplicated block (13 lines × 2) (src/BankMore.BacenSim/Iso20022/PacsAssinatura.cs)
- Duplicated block (15 lines × 2) (src/BankMore.BacenSim/Iso20022/PacsAssinatura.cs)
- Duplicated block (7 lines × 2) (src/BankMore.Pix.Infrastructure/PixRepository.cs)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- High CVE: [GHSA redacted] (frontend/package-lock.json)
- …and 85 more

## API surface

- 17 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (17)

- DELETE /dict/entries/{chave}
- GET /api/admin/fraude/stream
- GET /api/admin/outbox/dlq
- GET /api/contacorrente/extrato
- GET /api/contacorrente/saldo
- GET /dict/entries
- GET /dict/entries/{chave}
- GET /health
- POST /api/admin/outbox/dlq/{id}/reprocess
- POST /api/contacorrente/criar
- POST /api/contacorrente/login
- POST /api/contacorrente/movimentar
- POST /api/transferencia/efetuar
- POST /dict/entries
- POST /dict/entries/{chave}/claims
- POST /spi/pacs004
- POST /spi/pacs008