# Changelog

## Score

- CAI 36 → 36 (+0.3)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 95 → 95 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 55 → 53 (-2.5)
- Readiness 45 → 45 (+0.0)
- Security 65 → 74 (+8.7)
- Event-Driven 10 → 10 (+0.0)
- Event Sourcing 100 → 100 (+0.0)

## Resolved (4)

- Coverage not measured — no coverage collector is wired up
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Off-boarding risk: anonymized user #1

## New (6)

- Dependency hygiene PARTLY measured — rebar3 pinning read, dependency currency not (no rebar.lock-pinned Hex declaration to grade)
- No dependency lockfile committed (applications/eradius_prometheus_collector/rebar.config)
- No dependency lockfile committed (sample/rebar.config)
- Off-boarding risk: anonymized user #1
- Orphaned knowledge (src/eradius_lib.erl)
- Unbounded dependency requirement: eradius