# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 46 → 51 (+5.3)
- Rubric changed (rubric-2026.08.15 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 97 → 94 (-3.6)
- Architecture 94 → 100 (+5.9)
- Maturity 57 → 62 (+5.5)
- Readiness 17 → 25 (+8.3)
- Security 81 → 79 (-1.2)

## Resolved (10)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Duplicated block (6 lines × 2) (tests/test_attention_fallback.py)
- Low: security finding (details withheld)
- Low: security finding (details withheld)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- No exposed public API
- No tests found
- Test reliability not included

## New (49)

- Critical CVE: [GHSA redacted] (uv.lock)
- Duplicated block (6–8 lines × 2) (nanochat/flash_attention.py)
- Duplicated block (7 lines × 2) (scripts/chat_eval.py)
- Engine.generate (cognitive 33) (nanochat/engine.py)
- Engine.generate (cyclomatic 18) (nanochat/engine.py)
- Further sole-owners (lower concentration)
- HackComment (nanochat/checkpoint_manager.py)
- High CVE: [GHSA redacted] (uv.lock)
- High CVE: [GHSA redacted] (uv.lock)
- High CVE: [GHSA redacted] (uv.lock)
- High CVE: [GHSA redacted] (uv.lock)
- High CVE: [GHSA redacted] (uv.lock)
- Hotspot: scripts/chat_sft.py (scripts/chat_sft.py)
- Low: security finding (details withheld)
- Low: security finding (details withheld)
- Medium CVE: [GHSA redacted] (uv.lock)
- Medium CVE: [GHSA redacted] (uv.lock)
- Medium CVE: [GHSA redacted] (uv.lock)
- Medium CVE: [GHSA redacted] (uv.lock)
- Medium CVE: [GHSA redacted] (uv.lock)
- …and 29 more