# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 53 → 53 (+0.1)

## Lenses

- Code Health 70 → 71 (+0.9)
- Architecture 77 → 77 (-0.0)
- Maturity 65 → 65 (+0.3)
- Readiness 58 → 58 (+0.2)
- Security 41 → 41 (+0.0)
- Event-Driven 86 → 86 (+0.0)
- Performance 73 → 72 (-0.6)

## Resolved (10)

- BareSuppressMessage (src/SlimMessageBus.Host.Redis/GlobalSuppressions.cs)
- BareSuppressMessage (src/SlimMessageBus.Host.Redis/GlobalSuppressions.cs)
- BareSuppressMessage (src/Tests/SlimMessageBus.Host.Memory.Test/GlobalSuppressions.cs)
- Duplicated block (7 lines × 2) (src/Samples/Sample.Serialization.MessagesAvro/Sample/Serialization/MessagesAvro/AddCommand.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- LLM evaluation failed
- Off-boarding risk: anonymized user #1
- redundant comment (src/SlimMessageBus.Host.Serialization.Json/SerializationBuilderExtensions.cs)
- redundant comment (src/SlimMessageBus.Host/Consumer/ErrorHandling/IConsumerErrorHandler.cs)

## New (58)

- BareSuppressMessage (src/SlimMessageBus.Host.Redis/GlobalSuppressions.cs)
- BareSuppressMessage (src/SlimMessageBus.Host.Redis/GlobalSuppressions.cs)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Low XML-doc coverage: Sample.AsyncApi.Service (src/Samples/Sample.AsyncApi.Service/Sample.AsyncApi.Service.csproj)
- Low XML-doc coverage: Sample.CircuitBreaker.HealthCheck (src/Samples/Sample.CircuitBreaker.HealthCheck/Sample.CircuitBreaker.HealthCheck.csproj)
- Low XML-doc coverage: Sample.ConsoleApp (src/Samples/Sample.Simple.ConsoleApp/Sample.ConsoleApp.csproj)
- Low XML-doc coverage: Sample.DomainEvents.Application (src/Samples/Sample.DomainEvents.Application/Sample.DomainEvents.Application.csproj)
- Low XML-doc coverage: Sample.DomainEvents.Domain (src/Samples/Sample.DomainEvents.Domain/Sample.DomainEvents.Domain.csproj)
- Low XML-doc coverage: Sample.DomainEvents.WebApi (src/Samples/Sample.DomainEvents.WebApi/Sample.DomainEvents.WebApi.csproj)
- Low XML-doc coverage: Sample.Hybrid.ConsoleApp (src/Samples/Sample.Hybrid.ConsoleApp/Sample.Hybrid.ConsoleApp.csproj)
- Low XML-doc coverage: Sample.Images.FileStore (src/Samples/Sample.Images.FileStore/Sample.Images.FileStore.csproj)
- Low XML-doc coverage: Sample.Images.Messages (src/Samples/Sample.Images.Messages/Sample.Images.Messages.csproj)
- Low XML-doc coverage: Sample.Images.WebApi (src/Samples/Sample.Images.WebApi/Sample.Images.WebApi.csproj)
- Low XML-doc coverage: Sample.Images.Worker (src/Samples/Sample.Images.Worker/Sample.Images.Worker.csproj)
- Low XML-doc coverage: Sample.Nats.WebApi (src/Samples/Sample.Nats.WebApi/Sample.Nats.WebApi.csproj)
- Low XML-doc coverage: Sample.OutboxWebApi (src/Samples/Sample.OutboxWebApi/Sample.OutboxWebApi.csproj)
- Low XML-doc coverage: Sample.Serialization.ConsoleApp (src/Samples/Sample.Serialization.ConsoleApp/Sample.Serialization.ConsoleApp.csproj)
- Low XML-doc coverage: Sample.Serialization.MessagesAvro (src/Samples/Sample.Serialization.MessagesAvro/Sample.Serialization.MessagesAvro.csproj)
- Low XML-doc coverage: Sample.ValidatingWebApi (src/Samples/Sample.ValidatingWebApi/Sample.ValidatingWebApi.csproj)
- …and 38 more

## API surface

- Unchanged — 10 HTTP endpoints