# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 55 → 56 (+1.8)
- Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 95 → 97 (+2.0)
- Architecture 98 → 96 (-2.0)
- Maturity 46 → 46 (+0.0)
- Readiness 50 → 55 (+4.7)
- Security 56 → 60 (+3.9)

## Resolved (17)

- Change coupling: FlowGraph.java ↔ FlowOperatorConfig.java (flow/src/main/java/io/reacted/flow/FlowGraph.java)
- Change coupling: FlowGraph.java ↔ GraphController.java (flow/src/main/java/io/reacted/flow/FlowGraph.java)
- Change coupling: SystemLogger.java ↔ ReactedSubmissionPublisher.java (core/src/main/java/io/reacted/core/reactors/systemreactors/SystemLogger.java)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — no supported dependency manifest was read
- Duplicated block (12 lines × 2) (examples/src/main/java/io/reacted/examples/quickstart/QuickstartClient.java)
- Duplicated block (12 lines × 2) (examples/src/main/java/io/reacted/examples/typedsubscription/RemoteBroadcastingApp.java)
- Duplicated block (6 lines × 2) (drivers/src/main/java/io/reacted/drivers/channels/grpc/GrpcDriver.java)
- Duplicated block (7 lines × 2) (examples/src/main/java/io/reacted/examples/remoting/services/ServicePublicationApp.java)
- Duplicated block (8–9 lines × 2) (examples/src/main/java/io/reacted/examples/replay/SystemReplayApp.java)
- High: security finding (details withheld)
- High: security finding (details withheld)
- No exposed public API
- Test reliability not included
- The replay showoff is described but there is no guidance on how to run it locally or what output one can expect. (examples/src/main/java/io/reacted/examples/replay/README.txt)
- The webapp backend example requires a running MongoDB instance but the README states it 'requires a running mongodb instance' without specifying how to obtain one or where to connect in code. (examples/src/main/java/io/reacted/examples/webappbackend/README.txt)
- dormant codebase — no living knowledge left to concentrate

## New (30)

- Change coupling: Ask.java ↔ ReActorSystem.java (core/src/main/java/io/reacted/core/reactors/systemreactors/Ask.java)
- Change coupling: RemotingDriver.java ↔ RegistryGatesCentralizedManager.java (core/src/main/java/io/reacted/core/drivers/system/RemotingDriver.java)
- ClassTooLong: ReActorSystem (core/src/main/java/io/reacted/core/reactorsystem/ReActorSystem.java)
- Dependency hygiene PARTLY measured — Maven/Gradle declarations read, no dependency graph resolved
- Documentation: no contributor guidance (README.md)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Duplicated block (11 lines × 2) (examples/src/main/java/io/reacted/examples/quickstart/QuickstartClient.java)
- Duplicated block (11 lines × 2) (examples/src/main/java/io/reacted/examples/typedsubscription/RemoteBroadcastingApp.java)
- Duplicated block (5 lines × 2) (core/src/main/java/io/reacted/core/mailboxes/BoundedMbox.java)
- Duplicated block (5 lines × 2) (drivers/src/main/java/io/reacted/drivers/channels/grpc/GrpcDriver.java)
- Duplicated block (7 lines × 2) (examples/src/main/java/io/reacted/examples/remoting/services/ServicePublicationApp.java)
- Duplicated block (7–8 lines × 2) (examples/src/main/java/io/reacted/examples/replay/SystemReplayApp.java)
- FileTooLong: reactorsystem/ReActorSystem.java (core/src/main/java/io/reacted/core/reactorsystem/ReActorSystem.java)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- Most significant orphaned file (core/src/main/java/io/reacted/core/reactorsystem/ReActorSystem.java)
- Most significant orphaned file (drivers/src/main/java/io/reacted/drivers/serviceregistries/zookeeper/ZooKeeperDriver.java)
- …and 10 more