# Changelog

## Score

- CAI 45 → 46 (+1.0)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 91 → 91 (-0.1)
- Architecture 90 → 90 (+0.0)
- Maturity 59 → 59 (+0.0)
- Readiness 29 → 33 (+4.4)
- Security 56 → 52 (-3.3)
- Domain Modelling 100 → 73 (-26.6)
- Event-Driven 55 → 55 (+0.0)
- Event Sourcing 75 → 75 (+0.0)
- Accessibility 57 → 57 (+0.0)

## Resolved (51)

- Duplicated block (10 lines × 2) (cmd/auth/internal/infrastructure/persistence/mongo/token_repository.go)
- Duplicated block (10 lines × 2) (cmd/auth/main.go)
- Duplicated block (10 lines × 3) (cmd/auth/internal/interfaces/grpc/server.go)
- Duplicated block (10 lines × 4) (cmd/user/internal/infrastructure/persistence/mysql/user_repository.go)
- Duplicated block (11 lines × 2) (pkg/eventstore/mysql/event_store.go)
- Duplicated block (12 lines × 2) (pkg/eventstore/mysql/event_store.go)
- Duplicated block (12 lines × 3) (cmd/auth/internal/infrastructure/repository/client_repository.go)
- Duplicated block (12 lines × 3) (cmd/user/internal/domain/user/commands.go)
- Duplicated block (12 lines × 3) (pkg/eventstore/mongo/event_store.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/application/config/env.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/domain/client/client.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/domain/client/client.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/domain/client/commands.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/interfaces/http/router.go)
- Duplicated block (13 lines × 2) (cmd/auth/internal/interfaces/http/router.go)
- Duplicated block (13 lines × 2) (cmd/auth/main.go)
- Duplicated block (13 lines × 2) (pkg/eventbus/memory/event_bus.go)
- Duplicated block (13 lines × 2) (pkg/eventbus/pubsub/event_bus.go)
- Duplicated block (13 lines × 3) (cmd/auth/internal/interfaces/http/handlers/client.go)
- Duplicated block (13 lines × 4) (cmd/auth/internal/domain/token/token.go)
- …and 31 more

## New (112)

- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical CVE: [GHSA redacted] (go.mod)
- Critical CVE: [GHSA redacted] (cmd/web/yarn.lock)
- Critical vulnerability: [GHSA redacted] (cmd/web/yarn.lock)
- Duplicated block (10 lines × 2) (cmd/auth/internal/infrastructure/persistence/mongo/token_repository.go)
- Duplicated block (10 lines × 2) (pkg/eventstore/mysql/event_store.go)
- Duplicated block (10 lines × 4) (cmd/auth/internal/domain/token/token.go)
- Duplicated block (10 lines × 5) (cmd/auth/internal/domain/client/client.go)
- Duplicated block (10 lines × 6) (pkg/eventstore/mysql/event_store.go)
- Duplicated block (11 lines × 2) (cmd/auth/internal/domain/client/client.go)
- …and 92 more