# Changelog

## Score

- CAI 62 → 63 (+0.9)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 74 → 74 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 44 → 46 (+1.8)
- Readiness 77 → 77 (+0.0)
- Security 79 → 79 (+0.0)

## Resolved (2)

- Ambiguous distinction between 'available' and 'rules that will run'. Without documentation, it is unclear if `rulesThatWillRun` filters `availableRules` based on current configuration/args, or if they are distinct sets. This creates cognitive load for the user to determine which method to call for the final list of active rules.
- Workflow token permissions not restricted

## New (6)

- Documentation: no installation or build instructions (readme.md)
- Documentation: no usage examples (readme.md)
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted (.github/workflows/ci.yml)
- Workflow token permissions not restricted (.github/workflows/release-drafter.yml)
- Workflow token permissions not restricted (.github/workflows/release.yml)

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)