release: v0.10.0 (#303)

Bump project version 0.9.0 -> 0.10.0 and finalize the CHANGELOG for the
v0.10.0 release (ecosystem integration + programmatic enforcement):

- Node-local control API (root-only Unix socket)
- Falco -> AegisBPF enforcement adapter (aegis-responder)
- OCSF -> SIEM/data-lake pipeline (Vector)
- TTL / auto-expiry for dynamically-added denies

No breaking changes (additive features) -> minor bump per SemVer.
Tag to be pushed separately once the self-hosted signing runners are online.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: ErenAri

CMakeLists.txt

@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.20)
-project(aegisbpf VERSION 0.9.0 LANGUAGES C CXX)
+project(aegisbpf VERSION 0.10.0 LANGUAGES C CXX)
 
 set(CMAKE_C_STANDARD 11)
 set(CMAKE_CXX_STANDARD 20)

docs/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.0] - 2026-08-11
+
+Ecosystem integration and programmatic enforcement: AegisBPF now plugs into the
+detection/response and SIEM stack. Highlights since v0.9.0 — a root-only node
+control API, a Falco → AegisBPF enforcement adapter, an OCSF → SIEM/data-lake
+pipeline, and TTL auto-expiry so automated response can't wedge a deny forever.
+
 ### Added — Auto-expiry (TTL) for dynamic denies
 - **Timed denies over the control API** (`src/ttl_registry.{hpp,cpp}`,
   `src/daemon.cpp` reaper wiring, `tests/test_ttl_registry.cpp`,