# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 65 → 60 (-5.7)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 94 → 67 (-26.9)
- Architecture 69 → 69 (+0.0)
- Maturity 58 → 49 (-9.1)
- Readiness 69 → 69 (+0.0)
- Security 68 → 68 (+0.0)
- Performance 100 → 100 (+0.0)

## Resolved (2)

- Hotspot: bin/browser.cjs (bin/browser.cjs)
- PR-triggered workflow without a permissions block

## New (5)

- High: security finding (details withheld)
- Orphaned file (src/ChromiumResult.php)
- Orphaned files with no living knowledge
- PR-triggered workflow without a permissions block (.github/workflows/run-tests.yml)
- Workflow token permissions not restricted (.github/workflows/update-changelog.yml)

## Changes since last survey

- 2 commits — 1 feature/other, 1 fixes

## By area

- (root) — 2 commits

## Notable commits

- fix: Fix temporary file cleanup when browser execution fails (#985)
- change: Update CHANGELOG

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)