# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 51 → 62 (+10.2)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 73 → 75 (+1.1)
- Architecture 83 → 83 (+0.0)
- Maturity 74 → 74 (+0.5)
- Readiness 57 → 64 (+6.4)
- Security 35 → 53 (+17.6)

## Resolved (9)

- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Inconsistent namespace spelling: 'Persistance' is a common misspelling of 'Persistence'. This is inconsistent with the rest of the codebase which correctly uses 'CleanTemplate.Persistence' (e.g., CleanTemplate.Persistence.Repositories).
- Off-boarding risk: anonymized user #1
- Typo in interface name: 'IReanOnlyRepository' is likely a typo for 'IReadOnlyRepository'. This creates a confusingly similar but distinct name from the standard 'IRepository' interface.
- Typo in name: 'SingUp' is likely a typo for 'SignUp' or 'Sign Up'. This is inconsistent with standard English spelling and likely a typo in the codebase.

## New (14)

- Build did not complete in the analyzer
- Coverage not measured
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Inconsistent namespace spelling: 'Persistance' (missing 'e') vs the rest of the codebase which uses 'CleanTemplate' or 'Persistence'. This suggests a typo in the namespace name itself.
- Off-boarding risk: anonymized user #1
- Test reliability not measured — no test run produced results
- Typo in interface name: 'ReanOnly' instead of 'ReadOnly'. This creates a confusingly similar but distinct name from the standard 'IRepository' interface.
- Typo in name: 'SingUp' instead of 'SignUp'. This is inconsistent with standard 'SignUp' terminology and likely a typo in the codebase.
- Vulnerable: System.Security.Cryptography.Xml
- redundant comment (src/Web/Api/DependencyInjection.cs)

## API surface

- Unchanged — 7 HTTP endpoints