# Changelog

## Score

- CAI 34 → 37 (+3.5)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 47 → 47 (+0.3)
- Architecture 65 → 65 (+0.0)
- Maturity 54 → 54 (+0.0)
- Readiness 25 → 34 (+9.0)
- Security 26 → 28 (+2.6)
- Domain Modelling 59 → 59 (+0.0)
- Event-Driven 77 → 77 (+0.0)
- Accessibility 69 → 69 (+0.0)

## Resolved (24)

- Coverage not measured — test suite did not build
- Duplicated block (11–12 lines × 2) (src/Infrastructure/EventBus/Duber.Infrastructure.EventBus.RabbitMQ/EventBusRabbitMQ.cs)
- High IaC: KSV-0118 (deploy/k8s/gke/invoice/invoice-deployment-with-proxy.yaml)
- High IaC: KSV-0118 (deploy/k8s/gke/invoice/invoice-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/gke/notifications/notifications-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/gke/trip/trip-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/gke/website/website-deployment-with-proxy.yaml)
- High IaC: KSV-0118 (deploy/k8s/gke/website/website-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/external-system/payment-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/invoice/invoice-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/mongo/mongo-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/notifications/notifications-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/rabbit/rabbit-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/redis/redis-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/sql-server/sql-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/trip/trip-deployment.yaml)
- High IaC: KSV-0118 (deploy/k8s/local/website/website-deployment.yaml)
- Medium CVE: SharpCompress 0.23.0
- No admission-control policy
- No runtime threat detection
- …and 4 more

## New (36)

- Coverage not measured — test suite did not build
- Duplicated block (11 lines × 2) (src/Infrastructure/EventBus/Duber.Infrastructure.EventBus.RabbitMQ/EventBusRabbitMQ.cs)
- High IaC: DS-0002 (src/Application/Duber.Invoice.API/Dockerfile)
- High IaC: DS-0002 (src/Application/Duber.Invoice.API/Dockerfile.original)
- High IaC: DS-0002 (src/Application/Duber.Trip.API/Dockerfile)
- High IaC: DS-0002 (src/Application/Duber.Trip.Notifications/Dockerfile)
- High IaC: DS-0002 (src/Web/Duber.WebSite/Dockerfile)
- LLM evaluation failed
- Medium CVE: SharpCompress 0.23.0
- Medium IaC: KSV-0001 (deploy/k8s/gke/invoice/invoice-deployment-with-proxy.yaml)
- Medium IaC: KSV-0001 (deploy/k8s/gke/invoice/invoice-deployment.yaml)
- Medium IaC: KSV-0001 (deploy/k8s/gke/notifications/notifications-deployment.yaml)
- Medium IaC: KSV-0001 (deploy/k8s/gke/trip/trip-deployment.yaml)
- Medium IaC: KSV-0001 (deploy/k8s/gke/website/website-deployment-with-proxy.yaml)
- Medium IaC: KSV-0012 (deploy/k8s/gke/invoice/invoice-deployment-with-proxy.yaml)
- Medium IaC: KSV-0012 (deploy/k8s/gke/invoice/invoice-deployment.yaml)
- Medium IaC: KSV-0012 (deploy/k8s/gke/notifications/notifications-deployment.yaml)
- Medium IaC: KSV-0012 (deploy/k8s/gke/trip/trip-deployment.yaml)
- Medium IaC: KSV-0013 (deploy/k8s/gke/invoice/invoice-deployment-with-proxy.yaml)
- Medium IaC: KSV-0013 (deploy/k8s/gke/invoice/invoice-deployment.yaml)
- …and 16 more

## API surface

- Unchanged — 14 HTTP endpoints