Tags: GoodCISO/aware

v2.11.1 — docs patch: README compliance frameworks table updated for …

…v2.11.0 catalogs

- ISO/IEC 42001 (ADR-055)
- OWASP LLM Top 10:2025 rebinding from v1.1 (ADR-050 GAP-1)
- OWASP AST10 (ADR-048)
- OWASP MCP Top 10 (ADR-051)
- New 'What's new in v2.11.0' subsection

No code/runtime changes from v2.11.0. The v2.11.0 tag remains immutable.

— Alvin Chang, 2026-08-02

v2.11.0 — @goodciso/aware rebrand + OWASP LLM Top 10:2025 + AST10 + M…

…CP + Vaara + ISO 42001 + npm publish prep (C1 creds + M1 acronym + tarball 88.3 MB→452 kB)

chore(release): 2.10.0 — OWASP AST10 support (ADR-048)

Closes the remaining 3 AST10 gaps (AST01, AST06, AST08) per ADR-048.

10/10 OWASP AST10 risk classes now have dedicated rules in
src/compliance/ast10-mapper.js. See CHANGELOG for full rule mapping
and confidence breakdown.

This commit:
- Bumps CHANGELOG to [2.10.0] with the AST10 closure entry
- Bumps package.json from 2.9.0 to 2.10.0

Tag: v2.10.0 (separate commit)

chore(rebrand): AWARE acronym → Adaptive Workflow Agent with Recursiv…

…e Evolution

Applies the rebrand on top of v2.9.0 (public/v2.8.x branch tip).
The previous attempt landed the rebrand on main's v2.8.0 tip; main
should have been advanced to v2.9.0 first. This commit is the
corrected state — main is now at v2.9.0 + rebrand.

  - README.md: line 1 (project title)
  - package.json: description field (version kept at 2.9.0)
  - docs/openapi.yaml: info.description
  - src/ui/README.md: subtitle + intro (replaces the 'repositioned from
    cluster management to Security Control Plane' breadcrumb with the
    current multi-vertical framing: 'operating across compliance, customer
    support, and software engineering domains')

Body of README.md intentionally NOT changed — the v2.0 tagline and 'What
AWARE Is' section still describe the project's positioning. The rebrand
is the acronym expansion; the project body stays intact.

Agent-assisted (Prism ✨); commit authored by Alvin for the public record.

v2.8.0 — public release

Public-safe changes from this release. The internal development tree
on gitea includes additional operator-internal markers and configuration
that are not shipped to github; see docs/security/branch-discipline.md
for the dual-remote discipline.

Added:
  - scripts/check-public-boundary.mjs: per-file public-boundary marker
    convention + 8 operator-internal pattern categories
  - docs/security/branch-discipline.md: dual-remote workflow documented
  - .gitleaks.toml: allowlist updated for the new checker's rule defs

Changed:
  - scripts/run-phase4-d5.sh: MODAL_PROFILE default changed from
    operator workspace to 'default' (operator-org-agnostic)
  - scripts/aware-up: marked # public-boundary: operator-internal
  - package.json: version bumped to 2.8.0
  - CHANGELOG.md: [2.8.0] section added at top; prior line 227
    sanitised to remove the literal coordinator publish port

v2.7.3 — coordinator /coordinate round-trip fix, port revert, compose…

… interpolation repair, privacy surface alignment, pre-push hook bug fix (v3: per-file scope, absolute paths). Probe 6/6.

Release v2.7.1

Release v2.7.0 — AWARE agent governance framework

Initial public release. Provides runtime safety and governance infrastructure
for AI agent deployments, including identity attestation, emergency kill
switch, policy enforcement, audit logging, and compliance evidence
collection.

See https://github.com/GoodCISO/aware for full documentation.