# Changelog

## Score

- CAI 64 → 57 (-7.0)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 100 → 71 (-29.3)
- Architecture 67 → 67 (+0.0)
- Maturity 53 → 43 (-10.0)
- Readiness 65 → 65 (+0.0)
- Security 98 → 98 (+0.0)

## Resolved (4)

- Ambiguous duplication of intent. Both methods accept arguments and likely initiate the profiling process. It is unclear if they are aliases, if one is deprecated, or if they differ by context (e.g., synchronous vs asynchronous, or block-based vs explicit start/stop).
- Off-boarding risk: anonymized user #1
- Redundant factory methods. Both methods appear to construct a Report instance from JSON input. Having two distinct names for the same deserialization operation violates the principle of least surprise.
- Workflow token permissions not restricted

## New (6)

- Ambiguous duplication of intent. Both methods accept arguments and likely initiate the profiling process. It is unclear if 'run' is a convenience wrapper for 'start' or if they serve distinct lifecycle states (e.g., one-shot vs. long-running).
- Documentation: no architecture or design documentation
- Orphaned file (bin/stackprof)
- Orphaned knowledge (lib/stackprof/report.rb)
- Redundant factory methods. Both methods appear to construct a Report instance from a JSON string. Having two public entry points for the same deserialization logic creates confusion for API consumers.
- Workflow token permissions not restricted (.github/workflows/ci.yml)