# Changelog

## Score

- CAI 52 → 52 (-0.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 78 → 78 (+0.0)
- Architecture 84 → 86 (+1.1)
- Maturity 65 → 60 (-4.9)
- Readiness 56 → 56 (+0.0)
- Security 66 → 66 (+0.0)
- Domain Modelling 70 → 74 (+4.7)
- Accessibility 40 → 40 (+0.0)
- Performance 78 → 78 (+0.0)

## Resolved (7)

- Edited copy of a member (26 corresponding lines) (client-cli/client_cli/api/__init__.py)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client-android/lib/src/main/kotlin/stasis/client_android/lib/ops/scheduling/DefaultOperationExecutor.kt)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/stasis/client/ops/Metrics.scala)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/stasis/client/service/components/Secrets.scala)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (identity-ui/deployment/production/build.py)
- Members sharing a duplicated core (5 members, 50+ identical tokens) (client-cli/client_cli/cli/maintenance.py)
- Workflow token grant is wider than its jobs use

## New (15)

- Edited copy of a member (26 corresponding lines) (client-cli/client_cli/api/__init__.py)
- Leaked secret: hardcoded-credential (deployment/dev/docker-compose-usesve.yml)
- Leaked secret: hardcoded-credential (deployment/dev/docker-compose-usesve.yml)
- Leaked secret: hardcoded-credential (deployment/dev/docker-compose.yml)
- Leaked secret: hardcoded-credential (deployment/dev/docker-compose.yml)
- Leaked secret: hardcoded-credential (identity-ui/lib/pages/manage/owners.dart)
- Leaked secret: hardcoded-credential (server-ui/deployment/dev/docker-compose.yml)
- Leaked secret: high-entropy-secret (deployment/production/docker-compose.yml)
- Leaked secret: signing-key (deployment/production/docker-compose.yml)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client-android/lib/src/main/kotlin/stasis/client_android/lib/ops/scheduling/DefaultOperationExecutor.kt)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/stasis/client/ops/Metrics.scala)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/stasis/client/service/components/Secrets.scala)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (identity-ui/deployment/production/build.py)
- Members sharing a duplicated core (5 members, 50+ identical tokens) (client-cli/client_cli/cli/maintenance.py)
- Workflow token grant is wider than its jobs use (.github/workflows/publish_release.yml)

## Architecture

- 0 containers · 3 bounded contexts · 1 dependency edges (baseline)