# Changelog

## Score

- CAI 43 → 47 (+3.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 87 → 87 (+0.0)
- Architecture 78 → 78 (+0.0)
- Maturity 77 → 77 (+0.0)
- Readiness 16 → 18 (+1.9)
- Security 69 → 68 (-0.2)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 56 → 66 (+10.7)

## Resolved (16)

- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (.agents/skills/temporal-playground/ui/package-lock.json)
- Medium CVE: [GHSA redacted] (.agents/skills/temporal-playground/server/package-lock.json)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (.agents/skills/temporal-playground/server/package-lock.json)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (.agents/skills/temporal-playground/server/package-lock.json)
- The Payment Integration Guide mentions Stripe webhook events but does not explain how the payment system handles refunds or dispute resolution beyond succeeded/failure flows. (docs/payment/README.md)
- The frontend README lists Turborepo commands but does not mention how to run the web application locally after installation. (docs/frontend/README.md)

## New (16)

- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (.agents/skills/temporal-playground/server/package-lock.json)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- LLM evaluation failed
- Medium IaC: CKV_DOCKER_3 (Dockerfile)