# Changelog

## Score

- CAI 44 → 44 (+0.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 96 → 96 (+0.0)
- Architecture 98 → 98 (+0.0)
- Maturity 50 → 57 (+6.6)
- Readiness 33 → 33 (+0.0)
- Security 57 → 56 (-1.5)
- Domain Modelling 48 → 48 (+0.0)
- Accessibility 51 → 49 (-1.5)

## Resolved (9)

- Duplicated block (11 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (12 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (12 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (13 lines × 2) (pkg/api/handler/auth.go)
- Duplicated block (17 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (18 lines × 2) (pkg/usecase/offer.go)
- High CVE: [GHSA redacted] (go.mod)
- Medium CVE: GO-2024-3250 (go.mod)
- dormant codebase — no living knowledge left to concentrate

## New (16)

- Duplicated block (10 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (10 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (11 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (12 lines × 2) (pkg/api/handler/auth.go)
- Duplicated block (16 lines × 2) (pkg/usecase/auth.go)
- Duplicated block (17 lines × 2) (pkg/usecase/offer.go)
- High CVE: [GHSA redacted] (go.mod)
- High CVE: [GHSA redacted] (go.mod)
- Medium IaC: CKV_DOCKER_3 (Dockerfile)
- Medium IaC: CKV_DOCKER_7 (Dockerfile)
- Medium IaC: CKV_K8S_21 (ecommerce-kubernet.yaml)
- Medium IaC: CKV_K8S_21 (postgres-kubernet.yaml)
- Medium IaC: CKV_K8S_37 (ecommerce-kubernet.yaml)
- Medium IaC: CKV_K8S_37 (postgres-kubernet.yaml)
- The README outlines prerequisites, setup, and test steps but gives no concrete instructions for running the application from source (e.g. how to start Gin, where to find Swagger docs, what environment variables are needed) and no architecture or usage documentation for any package.
- single-maintainer — knowledge-concentration (bus factor) risk