release: v0.10.0

Phase G11.0 (Kiraman Katibin) closing release. Sigstore-CASM
Gate 11 v1.0 ships behind the opt-in [gate11] extra; default
install path unchanged.

Local verification (sandbox sigstore 3.6.7, rfc8785 0.1.4,
onnx 1.17.0, onnxruntime 1.23.2, numpy 2.2.6, onnx_tool installed):

- pytest --collect-only -q -> 511 tests collected (target: 511,
  +70 from v0.9.4's 441: +67 across test_gate11_*.py modules,
  +3 in test_regenerate_check_table.py)
- pytest -q -> 465 passed, 46 skipped
- ruff check . clean
- ruff format --check . clean
- mypy src/furqan_lint clean
- furqan-lint version -> 'furqan-lint 0.10.0'
- Em-dash check (extended scope; excludes CODE_OF_CONDUCT.md) clean
- Manifest sign-and-verify smoke (manifest_schema +
  module_canonicalization + signature_canonicalization +
  bundle + verification) round-trips with a stub Bundle and
  raises CASM-V-NNN on each documented failure mode
- regenerate_check_table.py --check -> no drift on README
- CASM-V-INDETERMINATE surfaces on dynamic __all__ rather than
  silent false-pass
- additive-only contract: manifest update refuses removals
  (CASM-V-050) and signature drift on retained names
  (CASM-V-051)

Closes finding F1 (README count drift).
Documents Shape A scope statements F4 (recursive linter trust)
and F7 (Rekor public-surface leakage).
Documents Newman 2022 disclosures N1 (OIDC compromise),
N2 (typosquatting), N3 (Rekor privacy), N4 (log retention).

Co-authored-by: Claude (cowork) <claude+cowork@anthropic.com>

Author: BayyinahEnterprise

CHANGELOG.md

@@ -19,7 +19,7 @@ introduced this convention.
 
 ---
 
-## [0.10.0] - <DATE>
+## [0.10.0] - 2026-05-07
 
 Phase G11.0 (Kiraman Katibin) ships Sigstore-CASM Gate 11 v1.0
 for Python. New optional ``[gate11]`` extra brings in
@@ -30,22 +30,71 @@ The CASM v1.0 manifest schema enforces the additive-only
 contract on a Python module's public surface via Sigstore's
 OIDC-keyed ephemeral certificates plus Rekor transparency log.
 
-### Fixed
-
-(populate during release commit)
-
 ### Added
 
-(populate during release commit)
+- ``[gate11]`` optional extra (``sigstore>=3.0.0,<4`` and
+  ``rfc8785>=0.1.4,<0.2``). Independent of ``[onnx]`` /
+  ``[onnx-runtime]`` / ``[onnx-profile]``; adds no inference
+  dependencies.
+- New ``furqan_lint.gate11`` package: ``manifest_schema``
+  (frozen ``Manifest`` + ``PublicName`` dataclasses, RFC 8785
+  canonical serialization), ``module_canonicalization``
+  (BOM-strip + UTF-8 decode + LF-normalize + SHA-256),
+  ``signature_canonicalization`` (canonical type-string
+  collapse for ``Optional[X]`` / ``Union[X, None]`` / ``X | None``
+  to alphabetized ``X | None``), ``surface_extraction``
+  (reuses ``furqan_lint.additive._extract_public_names``),
+  ``signing`` (Sigstore production / staging / GitHub-OIDC),
+  ``bundle`` (``<module>.furqan.manifest.sigstore`` wire
+  format), ``verification`` (9-step CASM-V flow), ``cli``
+  (manifest subcommand dispatch).
+- ``furqan-lint manifest init / verify / update <module.py>``
+  CLI subcommand.
+- ``furqan-lint check --gate11 <path>`` flag that runs the
+  normal check pipeline plus CASM-V verification on any
+  sibling ``.furqan.manifest.sigstore`` bundle.
+- ``CASM-V-NNN`` error namespace covering parse (010), version
+  / language (001..002), TUF (020 / 021), Sigstore (030..034),
+  module-hash (040), additive-only contract (050 / 051),
+  chain (060 / 061).
+- ``CASM-V-INDETERMINATE`` result on dynamic ``__all__``
+  modules (rather than a false pass).
+- ``scripts/regenerate_check_table.py`` plus pre-commit hook
+  plus ``tests/test_regenerate_check_table.py`` close
+  finding F1 (README structural-checks block now auto-derived
+  between sentinel comments).
+- ``.github/workflows/ci.yml`` ``gate11-smoke-test`` job
+  (push-to-main only; ``id-token: write``;
+  ``FURQAN_LINT_GATE11_SMOKE_TEST=1``).
+- ``action.yml`` composite-action ``gate11`` input (default
+  ``false``).
+- README ``Sigstore-CASM Gate 11 (opt-in)`` section,
+  ``Closed in v0.10.0`` block, the four Newman 2022 disclosures
+  (N1 short-window OIDC compromise, N2 typosquatting, N3 Rekor
+  privacy, N4 retention horizon), the SCITT vocabulary
+  citation, and Shape A scope statements F4 (recursive linter
+  trust) and F7 (Rekor public-surface leakage).
+- ``SECURITY.md`` Gate 11 disclosures section; supported-versions
+  table refreshed (0.10.x supported, 0.8.x EOL).
+- ``CONTRIBUTING.md`` Gate 11 testing section.
 
 ### Changed
 
-(populate during release commit)
+- The CLI dispatcher now recognises ``args[0] == "manifest"``
+  and routes to ``furqan_lint.gate11.cli.dispatch_manifest``;
+  the ``check`` subcommand parses out an optional ``--gate11``
+  flag before invoking the existing primary-check pipeline.
+
+### Fixed
+
+- F1 (README count drift): closed structurally via the
+  pre-commit / CI ``regenerate_check_table.py --check`` gate.
 
 ### Tests
 
-Test count: 441 (v0.9.4 ship state) -> <TBD>
-(v0.10.0). Net delta: <TBD>.
+Test count: 441 (v0.9.4 ship state) -> 511 (v0.10.0).
+Net delta: +70 (67 across the eight ``test_gate11_*.py``
+modules; 3 in ``test_regenerate_check_table.py``).
 
 ## [0.9.4] - 2026-05-05
 

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "furqan-lint"
-version = "0.9.4"
+version = "0.10.0"
 description = "Structural-honesty checks for Python, powered by Furqan"
 readme = "README.md"
 requires-python = ">=3.10"

src/furqan_lint/__init__.py

@@ -1,6 +1,6 @@
 """furqan-lint: structural-honesty checks for Python."""
 
-__version__ = "0.9.4"
+__version__ = "0.10.0"
 
 # Explicit public surface declaration. The implicit surface (anything
 # not starting with an underscore at module level) is fragile: any