# Changelog

## Score

- CAI 52 → 52 (+0.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 32 → 32 (+0.0)
- Readiness 47 → 47 (+0.0)
- Security 79 → 80 (+1.1)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (2)

- Duplicated block (10 lines × 2) (persistence/subject_repository_impl.go)
- OSV Dependency Vulnerabilities not included (check did not complete)

## New (11)

- Duplicated block (9 lines × 2) (persistence/subject_repository_impl.go)
- High CVE: [GHSA redacted] (go.mod)
- Medium CVE: [GHSA redacted] (go.mod)
- Medium CVE: [GHSA redacted] (go.mod)
- Medium CVE: GO-2023-2041 (go.mod)
- Medium IaC: CKV_DOCKER_3 (docker/mysql/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/server/Dockerfile)
- Medium IaC: CKV_DOCKER_4 (docker/migrate/Dockerfile)
- Medium IaC: CKV_DOCKER_4 (docker/server/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/migrate/Dockerfile)
- The How to start this app section is a single bulleted list with only one actionable step (import data) and no links, while the mock_data.md reference is an external link. (README.md)