# Changelog

## Score

- CAI 41 → 42 (+1.0)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 77 → 73 (-4.0)
- Architecture 74 → 74 (+0.1)
- Maturity 63 → 63 (+0.0)
- Readiness 28 → 31 (+2.3)
- Security 40 → 39 (-0.4)
- Accessibility 55 → 61 (+6.3)

## Resolved (19)

- Change coupling: AccountController.cs ↔ AccountService.cs (backend/src/MessagingPlatform.Api/Controllers/AccountController.cs)
- Change coupling: AccountController.cs ↔ DependencyInjection.cs (backend/src/MessagingPlatform.Api/Controllers/AccountController.cs)
- Change coupling: AccountController.cs ↔ UserService.cs (backend/src/MessagingPlatform.Api/Controllers/AccountController.cs)
- Change coupling: ChatController.cs ↔ ChatRepository.cs (backend/src/MessagingPlatform.Api/Controllers/ChatController.cs)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- Low CVE: [GHSA redacted] (web/package-lock.json)
- Low CVE: [GHSA redacted] (web/package-lock.json)
- Low CVE: [GHSA redacted] (web/package-lock.json)
- Low CVE: [GHSA redacted] (web/package-lock.json)
- Low CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)

## New (26)

- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)
- Medium IaC: CKV2_GHA_1 (.github/workflows/backend.yml)
- Medium IaC: CKV2_GHA_1 (.github/workflows/compose-build.yml)
- Medium IaC: CKV2_GHA_1 (.github/workflows/web.yml)
- Medium IaC: CKV_DOCKER_3 (backend/src/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (web/Dockerfile)
- Medium IaC: CKV_SECRET_6 (backend/src/MessagingPlatform.Api/appsettings.json)
- …and 6 more

## API surface

- Unchanged — 24 HTTP endpoints