All notable changes to SCORE will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Elasticsearch connector — connect to Elasticsearch clusters and ingest documents
- API key, basic auth, bearer token, and Elastic Cloud (
cloud_id) authentication - PIT +
search_afterpagination with automatic fallback tohelpers.scan()for older ES versions - Configurable field mapping (
content_field,title_field,author_field,date_field) - Custom Elasticsearch Query DSL filter support
- TLS certificate verification control
- HTML content auto-detection
- Fallback content extraction when configured content field is missing
- 35 unit tests covering all connector functionality
- API key, basic auth, bearer token, and Elastic Cloud (
- Per-tenant encrypted connector secrets: users can now enter API keys/secrets directly in the connector creation UI, stored encrypted in the DB using Fernet with HKDF-derived per-tenant keys
FIELD_ENCRYPTION_KEYsetting for dedicated encryption key (falls back toSECRET_KEY)connectors/crypto.pymodule withencrypt_secret()/decrypt_secret()utilitiesencrypted_secretfield onConnectorConfigmodel withset_secret()/get_secret()methods- Password input field in connector creation form (both standalone page and modal)
migrate_connector_secretsmanagement command to migrate existing env-var-based credentials into encrypted secretscryptography>=42.0dependency- Elasticsearch connector — connect to Elasticsearch clusters and ingest documents
- API key, basic auth, bearer token, and Elastic Cloud (
cloud_id) authentication - PIT +
search_afterpagination with automatic fallback tohelpers.scan()for older ES versions - Configurable field mapping (
content_field,title_field,author_field,date_field) - Custom Elasticsearch Query DSL filter support
- TLS certificate verification control
- HTML content auto-detection
- Fallback content extraction when configured content field is missing
- 35 unit tests covering all connector functionality
- API key, basic auth, bearer token, and Elastic Cloud (
- Apache 2.0 LICENSE file
CONTRIBUTING.md,CHANGELOG.md,SECURITY.mdSECRET_KEYstartup validation (refuses to start with placeholder key in production)- Full Django password validators (was only
MinimumLengthValidator) - Production HTTPS hardening settings (HSTS, SSL redirect, secure cookies)
- Multi-stage Dockerfile with health check
apps.pyfor all Django appsgunicornas explicit dependencycompute_penalty_score()shared scoring function (eliminates 3x duplication)
- Moved
scoring.pyfromdashboard/toscore/(shared across apps) - Consolidated
_grade()/_audit_grade()into singlegrade()function - Synced
pyproject.tomlandrequirements.txtdependencies - Pinned
sqlite-vec==0.1.6consistently across both dep files - Added upper bound on
django-allauth(>=65.0,<67) - Added
fakerto dev dependencies
- Initial release
- Multi-tenant document repository analysis
- Duplicate detection with LLM-assisted classification
- Contradiction detection with severity scoring
- Gap analysis with coverage scoring
- Topic clustering (HDBSCAN)
- RAG-based audit (hygiene, structure, coverage, coherence, retrievability, governance)
- SCORE 0-100 scoring with A-E letter grades
- PDF report generation with radar charts
- RAG chat interface
- SharePoint and Confluence connectors
- Docker deployment support
- French and English internationalization