# Changelog

## Score

- CAI 70 → 70 (+0.0)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 91 → 91 (-0.1)
- Architecture 99 → 95 (-4.3)
- Maturity 59 → 59 (-0.0)
- Readiness 71 → 72 (+1.0)
- Security 80 → 85 (+5.0)

## Resolved (6)

- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Hotspot: src/pam/rpassword.rs (src/pam/rpassword.rs)
- Hotspot: src/sudoers/ast.rs (src/sudoers/ast.rs)
- Off-boarding risk: anonymized user #1
- Off-boarding risk: anonymized user #2

## New (8)

- Dependency hygiene PARTLY measured — Cargo dependencies read, dependency currency not (crates.io unreachable)
- Documentation: no licence statement (README.md)
- Low cohesion: Command (LCOM4 4) (test-framework/sudo-test/src/docker/command.rs)
- Low cohesion: SudoString (LCOM4 4) (src/common/string.rs)
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #1
- Projects may be oversized for their cohesion
- Two top-level factory methods with nearly identical signatures and return types, differing only by a suffix ('NoImplicit'). The semantic distinction is not obvious from the signature alone and requires external documentation to understand.

## Changes since last survey

- 7 commits — 7 feature/other, 0 fixes

## By area

- (repo) — 2 commits
- test-framework/Cargo.lock — 2 commits
- .github/workflows — 1 commit
- docs/man — 1 commit
- po/ka.po — 1 commit

## Notable commits

- change: Add missing `passwd_timeout` to documentation (#1689)
- change: Bump the ci-dependencies group with 4 updates
- change: Update getrandom dependency for the test framework
- change: Update most test framework dependencies
- change: add missing `passwd_timeout` entry in man sudoers
- change: po: Add Georgian translation
- change: po: Add Georgian translation (#1680)