# Changelog

## Score

- CAI 53 → 54 (+0.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 48 → 48 (+0.0)
- Readiness 33 → 33 (+0.0)
- Security 82 → 84 (+1.4)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (4)

- Duplicated block (7 lines × 2) (src/app/infra/http/transports/aiohttp.py)
- High CVE: [GHSA redacted] (requirements-dev.txt)
- High IaC: DS-0002 (Dockerfile)
- The README does not mention how to run the service locally or deploy it, which is standard information for a microservice. (README.md)

## New (5)

- Duplicated block (6 lines × 2) (src/app/infra/http/transports/aiohttp.py)
- Medium CVE: [GHSA redacted] (requirements-dev.txt)
- Medium IaC: CKV_DOCKER_3 (Dockerfile)
- Medium IaC: CKV_DOCKER_4 (Dockerfile)
- The overview mentions 'обрабатывает логику применения промокодов и купонов' (processes coupon and discount logic), but the body never explains how this is implemented in code or tested, leaving it a thin hook. (README.md)