# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 59 → 65 (+5.6)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 94 → 94 (+0.4)
- Architecture 93 → 93 (+0.0)
- Maturity 59 → 62 (+2.7)
- Readiness 55 → 71 (+15.8)
- Security 55 → 61 (+5.7)
- Domain Modelling 66 → 66 (+0.0)

## Resolved (16)

- Dormant codebase
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Low IaC: DS-0026 (src/OneBeyond.Studio.Obelisk.Workers/Dockerfile)
- Off-boarding risk: anonymized user #1
- The README is long (343 words) but only one file exists, so no architecture or design documentation is present. (README.md)
- redundant comment (src/OneBeyond.Studio.Obelisk.Authentication/OneBeyond.Studio.Obelisk.Authentication.Application/DependencyInjection/ContainerBuilderExtensions.cs)

## New (21)

- Concentrated knowledge decay
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High CVE: System.Security.Cryptography.Xml 10.0.0
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- LLM evaluation failed
- Off-boarding risk: anonymized user #1
- Outdated: Microsoft.Azure.Functions.Worker.Sdk
- …and 1 more

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- src/OneBeyond.Studio.Obelisk.WebApi — 1 commit

## Notable commits

- change: Add  await Task.Delay so the delay is is asynchronous and non-blocking (#300)

## API surface

- Unchanged — 25 HTTP endpoints