# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 28 → 54 (+26.0)

## Lenses

- Code Health 81 (new)
- Architecture 75 (new)
- Maturity 13 → 57 (+44.0)
- Readiness 15 → 43 (+27.4)
- Security 100 → 60 (-39.9)
- Performance 88 (new)

## Resolved (8)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No exposed public API
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (53)

- Bounded contexts not declared
- Change coupling: ChannelFactory.cs ↔ RabbitMessageSubscriber.cs (src/OpenSleigh.Transport.RabbitMQ/ChannelFactory.cs)
- Change coupling: KafkaMessageParser.cs ↔ QueueReferenceFactory.cs (src/OpenSleigh.Transport.Kafka/KafkaMessageParser.cs)
- Change coupling: SagaExecutionService.cs ↔ SagaInstance.cs (src/OpenSleigh/SagaExecutionService.cs)
- Change coupling: SagaState.cs ↔ SqlOutboxRepository.cs (src/OpenSleigh.Persistence.SQL/Entities/SagaState.cs)
- Coverage not measured — analyzer environment
- Duplicated block (12 lines × 2) (src/OpenSleigh.Persistence.SQL/SqlSagaStateRepository.cs)
- Duplicated block (18 lines × 2) (src/OpenSleigh.Persistence.SQL/SqlSagaStateRepository.cs)
- Duplicated block (19 lines × 2) (src/OpenSleigh.Persistence.SQL/Entities/OutboxMessage.cs)
- High CVE: Microsoft.OpenApi 2.0.0
- High CVE: Snappier 1.0.0
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- …and 33 more

## API surface

- 2 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (2)

- POST /orders
- POST /saga