# Changelog

## Score

- CAI 54 → 54 (-0.0)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 93 → 93 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 56 → 56 (+0.0)
- Readiness 47 → 47 (+0.0)
- Security 65 → 65 (-0.1)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 51 → 51 (+0.0)

## Resolved (4)

- Medium CVE: [GHSA redacted] (uv.lock)
- Off-boarding risk: anonymized user #1
- The benchmark results table lists groups and tests but no links to a documented API surface (e.g. how to load .flm models, what MCP endpoints are available) for readers who want to run benchmarks locally. (benchmarks/README.md)
- The benchmark table lists groups and tests but no comparison rows (e.g. 2026 vs 2025 benchmarks) for readers who want to compare versions. (benchmarks/README.md)

## New (6)

- High CVE: [GHSA redacted] (lib/templates/pnpm-lock.yaml)
- High CVE: [GHSA redacted] (uv.lock)
- Low CVE: [GHSA redacted] (uv.lock)
- Medium CVE: [GHSA redacted] (uv.lock)
- Medium IaC: CKV_DOCKER_2 (Dockerfiles/slim/Dockerfile)
- Off-boarding risk: anonymized user #1