# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 42 → 48 (+5.3)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 66 → 68 (+1.8)
- Architecture 75 → 75 (-0.4)
- Maturity 52 → 58 (+6.6)
- Readiness 23 → 31 (+7.7)
- Security 65 → 66 (+0.7)
- Domain Modelling 59 → 59 (+0.0)
- Event-Driven 100 → 100 (+0.0)

## Resolved (12)

- AccountController.Login (cognitive 26) (samples/IdentityServer/Quickstart/Account/AccountController.cs)
- Duplicated block (14–21 lines × 2) (samples/IdentityServer/Program.cs)
- High IaC: DS-0002 (samples/AppGateway/Dockerfile)
- High IaC: DS-0002 (samples/Product/ProductService.Api/Dockerfile)
- High IaC: DS-0002 (samples/Setting/SettingService.Api/Dockerfile)
- High: security finding (details withheld)
- High: security finding (details withheld)
- LLM evaluation failed
- Low IaC: DS-0026 (samples/AppGateway/Dockerfile)
- Low IaC: DS-0026 (samples/Product/ProductService.Api/Dockerfile)
- Low IaC: DS-0026 (samples/Setting/SettingService.Api/Dockerfile)
- TodoComment (samples/IdentityServer/Quickstart/Device/DeviceController.cs)

## New (45)

- Duplicated block (18 lines × 2) (samples/IdentityServer/Program.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Prerelease dependency: Duende.BFF
- Prerelease dependency: EFCore.NamingConventions
- Prerelease dependency: Microsoft.AspNetCore.Authentication.JwtBearer
- Prerelease dependency: Microsoft.EntityFrameworkCore
- Prerelease dependency: Microsoft.EntityFrameworkCore.Design
- Prerelease dependency: Microsoft.EntityFrameworkCore.Relational
- Prerelease dependency: Microsoft.EntityFrameworkCore.Tools
- Prerelease dependency: Microsoft.Extensions.Configuration
- Prerelease dependency: Microsoft.Extensions.Configuration.Abstractions
- Prerelease dependency: Microsoft.Extensions.Configuration.EnvironmentVariables
- Prerelease dependency: Microsoft.Extensions.Configuration.FileExtensions
- Prerelease dependency: Microsoft.Extensions.Configuration.Json
- Prerelease dependency: Microsoft.Extensions.DependencyInjection
- Prerelease dependency: Microsoft.Extensions.DependencyInjection.Abstractions
- Prerelease dependency: Microsoft.Extensions.DependencyModel
- Prerelease dependency: Microsoft.Extensions.Hosting
- Prerelease dependency: Microsoft.Extensions.Hosting.Abstractions
- …and 25 more

## API surface

- Unchanged — 9 HTTP endpoints