# Changelog

## Score

- CAI 62 → 59 (-2.7)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 99 → 75 (-24.0)
- Architecture 75 → 88 (+13.2)
- Maturity 57 → 51 (-5.0)
- Readiness 55 → 57 (+1.7)
- Security 70 → 64 (-5.7)
- Domain Modelling 81 → 81 (+0.0)
- Performance 100 → 100 (+0.0)

## Resolved (2)

- Projects may be oversized for their cohesion
- Workflow token permissions not restricted

## New (11)

- Leaked secret: signing-key (.env)
- Leaked secret: signing-key (app/docker-compose.yml)
- Orphaned file (build.sbt)
- Orphaned file (modules/core/src/main/scala/shop/config/types.scala)
- Orphaned file (modules/core/src/main/scala/shop/domain/item.scala)
- Orphaned file (modules/core/src/main/scala/shop/modules/HttpApi.scala)
- Orphaned file (modules/core/src/main/scala/shop/services/Auth.scala)
- Orphaned file (modules/core/src/main/scala/shop/services/Items.scala)
- Orphaned file (modules/core/src/main/scala/shop/services/Orders.scala)
- Orphaned file (project/Dependencies.scala)
- Workflow token permissions not restricted (.github/workflows/ci.yml)