# Changelog

## Score

- CAI 56 → 55 (-0.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 95 → 95 (+0.1)
- Architecture 92 → 92 (+0.0)
- Maturity 67 → 67 (+0.1)
- Readiness 41 → 41 (+0.0)
- Security 54 → 57 (+2.4)

## Resolved (8)

- Dimension evaluation failed
- Duplicated block (10 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- Duplicated block (13 lines × 2) (lib/supavisor/client_handler/auth_methods/jit.ex)
- Duplicated block (5 lines × 2) (lib/supavisor/monitoring/tenant.ex)
- Duplicated block (7 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- Duplicated block (9 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- Off-boarding risk: anonymized user #1
- The Overview section links to the main README rather than the dedicated Supavisor docs site, which is a minor usability gap. (docs/index.md)

## New (23)

- Duplicated block (12 lines × 2) (lib/supavisor/client_handler/auth_methods/jit.ex)
- Duplicated block (6 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- Duplicated block (8 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- Duplicated block (9 lines × 2) (lib/supavisor/monitoring/prom_ex.ex)
- High CVE: [GHSA redacted] (mix.lock)
- Medium CVE: [CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: [GHSA redacted] (native/Cargo.lock)
- Medium IaC: CKV2_DOCKER_1 (Dockerfile)
- Medium IaC: CKV_DOCKER_3 (Dockerfile)
- Medium IaC: CKV_DOCKER_3 (priv/jit/Dockerfile.builder)
- Medium IaC: CKV_DOCKER_3 (priv/jit/jit_api_service/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (priv/jit/postgres/Dockerfile)
- Medium IaC: CKV_DOCKER_7 (Dockerfile)
- …and 3 more
