# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 64 → 63 (-0.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 99 → 99 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 64 → 64 (+0.0)
- Readiness 50 → 50 (+0.0)
- Security 72 → 67 (-5.1)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (1)

- A robots.txt file exists (user-agent: *, allow: /, sitemap), which is standard for an open site and helps crawlers discover content. It does not expose any documentation quality defect. (docs/robots.txt)

## New (16)

- A robots.txt file exists but it is a thin 'User-agent: * Allow: / Sitemap' file with no human-relevant information, serving only as an sitemap pointer rather than adding value. (docs/robots.txt)
- Medium IaC: CKV_DOCKER_3 (docker/service/mailpit/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/service/mysql/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/service/nginx/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/service/php/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/service/postgres/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (docker/service/redis/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/mailpit/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/mysql/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/nginx/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/php/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/postgres/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (docker/service/redis/Dockerfile)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)