# Changelog

## Score

- CAI 60 → 41 (-19.4)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 100 → 71 (-29.3)
- Architecture 74 → 74 (+0.0)
- Maturity 59 → 55 (-3.7)
- Readiness 57 → 50 (-6.6)
- Security 57 → 24 (-33.3)

## Resolved (1)

- PR-triggered workflow without a permissions block

## New (3)

- Documentation: no usage examples (README.md)
- Leaked secret: hardcoded-credential (database/factories/UserFactory.php)
- PR-triggered workflow without a permissions block (.github/workflows/pipeline.yml)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- (root) — 1 commit

## Notable commits

- change: docs: fix broken license and PHP support badge links in `README.md`