# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 28 → 72 (+43.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 82 (new)
- Architecture 81 (new)
- Maturity 13 → 62 (+49.0)
- Readiness 15 → 78 (+62.2)
- Security 100 → 84 (-16.4)

## Resolved (6)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- single-commit history — no usable git history window to measure hotspots

## New (39)

- Bounded contexts not declared
- Deprecated: MSTest.TestAdapter
- Deprecated: MSTest.TestFramework
- Duplicated block (14 lines × 2) (CleanArch.Api/Controllers/ContactController.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Low coverage: AuthorizationFilterAttribute.cs (CleanArch.Api/Filter/AuthorizationFilterAttribute.cs)
- Low coverage: ContactRepository.cs (CleanArch.Infrastructure/Repository/ContactRepository.cs)
- Low coverage: Logger.cs (CleanArch.Logging/Logger.cs)
- Medium CVE: log4net 2.0.17
- Medium: security finding (details withheld)
- Mock framework: Moq
- Off the main sequence: CleanArch.Core
- Off the main sequence: CleanArch.Sql
- Outdated: Dapper
- Outdated: MSTest.TestAdapter
- Outdated: MSTest.TestFramework
- Outdated: Microsoft.Extensions.Configuration
- Outdated: Microsoft.Extensions.DependencyInjection.Abstractions
- Outdated: Microsoft.NET.Test.Sdk
- …and 19 more

## API surface

- 6 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (6)

- DELETE /
- GET /
- GET /api/auth
- GET /{id}
- POST /
- PUT /

## Architecture

- Containers 2 added · 0 removed · contexts 0 added · 0 removed · edges 0 added · 0 removed

## Added containers (2)

- database:Database
- web-api:CleanArch.Api