4 findings resolved and 1 appeared; Architecture & Codebase — including AI provenance, Organization & Key-Person Risk moved the wrong way.

4 findings resolved, 1 appeared, 0 changed severity without clearing. AI-declared share moved from 0% to 0% of added lines — a disclosure, not a rating.

	Dimension	Before	After
01	Architecture & Codebase — including AI provenance	strong	adequate	worsened
02	Engineering Process & SDLC Maturity	strong	strong	—
03	Organization & Key-Person Risk	strong	adequate	worsened
04	Product & Engineering Maturity	strong	adequate	worsened
05	Security & Reliability Posture	adequate	adequate	—
06	Observability & Operations	not assessable	strong	—
07	Fit with the Acquirer	not assessable	not assessable	—

Organization & Key-Person Risk

Appeared — The next contributor after the top one has not committed here for more than a year

Product & Engineering Maturity

Resolved — Releases are cut from another branch than the one surveyed

Security & Reliability Posture

Resolved — 6 advisories against this project in the last 24 months, 5 high or critical

Resolved — 5 credential-shaped strings in the tree sit in tests, examples, documentation or local development settings

Resolved — Relicensed: MPL-2.0 → BUSL-1.1 (2023-08-10)

Still present, reason changed — Licence text does not match a standard licence

Before After

DIFF MODE · DETERMINISTIC LAYER