AWARE v2.10.0 — OWASP AST10 closure (ADR-048)

10/10 AST10 risk classes covered. 6 H-confidence + 4 M-confidence rules.
25/25 standards tests + 44/44 unit tests passing.

This tag is GitHub-safe: scripts/aware-up has been restored to its
v2.9.0 version to avoid leaking operator-internal stack topology
comments to the public GitHub mirror. The Gitea release of v2.10.0
retains the original scripts/aware-up with the operator-internal
comment (per the public-boundary convention).

See docs/compliance/ast10.md and docs/adr/ADR-048-aware-ast10-coverage.md.

chore(rebrand): AWARE acronym → Adaptive Workflow Agent with Recursiv…

…e Evolution

Applies the rebrand on top of v2.9.0 (public/v2.8.x branch tip).
The previous attempt landed the rebrand on main's v2.8.0 tip; main
should have been advanced to v2.9.0 first. This commit is the
corrected state — main is now at v2.9.0 + rebrand.

  - README.md: line 1 (project title)
  - package.json: description field (version kept at 2.9.0)
  - docs/openapi.yaml: info.description
  - src/ui/README.md: subtitle + intro (replaces the 'repositioned from
    cluster management to Security Control Plane' breadcrumb with the
    current multi-vertical framing: 'operating across compliance, customer
    support, and software engineering domains')

Body of README.md intentionally NOT changed — the v2.0 tagline and 'What
AWARE Is' section still describe the project's positioning. The rebrand
is the acronym expansion; the project body stays intact.

Agent-assisted (Prism ✨); commit authored by Alvin for the public record.

v2.8.0 — public release

Public-safe changes from this release. The internal development tree
on gitea includes additional operator-internal markers and configuration
that are not shipped to github; see docs/security/branch-discipline.md
for the dual-remote discipline.

Added:
  - scripts/check-public-boundary.mjs: per-file public-boundary marker
    convention + 8 operator-internal pattern categories
  - docs/security/branch-discipline.md: dual-remote workflow documented
  - .gitleaks.toml: allowlist updated for the new checker's rule defs

Changed:
  - scripts/run-phase4-d5.sh: MODAL_PROFILE default changed from
    operator workspace to 'default' (operator-org-agnostic)
  - scripts/aware-up: marked # public-boundary: operator-internal
  - package.json: version bumped to 2.8.0
  - CHANGELOG.md: [2.8.0] section added at top; prior line 227
    sanitised to remove the literal coordinator publish port

v2.7.3 — coordinator /coordinate round-trip fix, port revert, compose…

… interpolation repair, privacy surface alignment, pre-push hook bug fix (v3: per-file scope, absolute paths). Probe 6/6.

Release v2.7.1

Release v2.7.0 — AWARE agent governance framework

Initial public release. Provides runtime safety and governance infrastructure
for AI agent deployments, including identity attestation, emergency kill
switch, policy enforcement, audit logging, and compliance evidence
collection.

See https://github.com/GoodCISO/aware for full documentation.