diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3451736..8ce951a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Chock changelog
 
-## Unreleased
+## 0.10.0 — A script gate's evals replay, and its ambient line names the script by file
 
 - **A script gate's evals replay.** `chock check --only evals` runs a staged-files case against
   the compiled gate in a throwaway repository that holds only the case's own files -- whole
diff --git a/CITATION.cff b/CITATION.cff
index dc9a6c7..d479409 100644
--- a/CITATION.cff
+++ b/CITATION.cff
@@ -7,7 +7,7 @@ abstract: >-
 type: software
 authors:
   - name: Open Coder AI
-version: 0.9.3
+version: 0.10.0
 license: Apache-2.0
 repository-code: https://github.com/open-coder-ai/chock
 url: https://github.com/open-coder-ai/chock
diff --git a/action.yml b/action.yml
index 7fb99fc..5d8dbe1 100644
--- a/action.yml
+++ b/action.yml
@@ -16,7 +16,7 @@ inputs:
   version:
     description: Chock version to install
     required: false
-    default: "0.9.3"
+    default: "0.10.0"
 
 runs:
   using: composite
diff --git a/docs/assets/social-preview.png b/docs/assets/social-preview.png
index e6a432f..c621a6f 100644
Binary files a/docs/assets/social-preview.png and b/docs/assets/social-preview.png differ
diff --git a/docs/assets/social-preview.svg b/docs/assets/social-preview.svg
index 1f295e6..d28f5c1 100644
--- a/docs/assets/social-preview.svg
+++ b/docs/assets/social-preview.svg
@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1280" height="640" viewBox="0 0 1280 640"
-     role="img" aria-label="chock — governance-as-code for AI coding agents: write a rule once and every agent obeys it. A policy compiles to whatever control each agent actually supports. 15 agents (claude, aider, antigravity, codex, copilot, cursor, devin, gemini, grok, junie, kimi-code, replit, tabnine, vscode, windsurf); 9 enforcement surfaces (ambient-rule, git-hook, ci-gate, pre-tool-use, stop, managed-setting, gateway, mcp-gateway, agent-hooks), of which 4 are installed by chock sync (ambient-rule, ci-gate, git-hook, stop); 8 everyday commands (init, add, remove, sync, check, status, enable, disable). Python 3.11–3.13, Apache-2.0, on PyPI as chock, version 0.9.3.">
+     role="img" aria-label="chock — governance-as-code for AI coding agents: write a rule once and every agent obeys it. A policy compiles to whatever control each agent actually supports. 15 agents (claude, aider, antigravity, codex, copilot, cursor, devin, gemini, grok, junie, kimi-code, replit, tabnine, vscode, windsurf); 9 enforcement surfaces (ambient-rule, git-hook, ci-gate, pre-tool-use, stop, managed-setting, gateway, mcp-gateway, agent-hooks), of which 4 are installed by chock sync (ambient-rule, ci-gate, git-hook, stop); 8 everyday commands (init, add, remove, sync, check, status, enable, disable). Python 3.11–3.13, Apache-2.0, on PyPI as chock, version 0.10.0.">
   <rect width="1280" height="640" fill="#0D1626"/>
   <rect x="45.0" y="39.0" width="38" height="38" rx="8.4" fill="#111E33"/>
   <circle cx="64.0" cy="55.7" r="7.6" fill="none" stroke="#D9B45C" stroke-width="2.09" stroke-opacity="0.95"/>
@@ -10,7 +10,7 @@
   <text x="151" y="64" font-family="Geist Mono" font-size="12" fill="#5A6B80">open-coder-ai/chock</text>
   <rect x="1042" y="44" width="190" height="27" rx="13" fill="#111E33" stroke="#D9B45C" stroke-opacity="0.22"/>
   <circle cx="1062" cy="57.5" r="3.2" fill="#D9B45C"/>
-  <text x="1074" y="62" font-family="Geist Mono" font-size="11" letter-spacing="0.2" fill="#D9B45C">v0.9.3 · APACHE-2.0</text>
+  <text x="1074" y="62" font-family="Geist Mono" font-size="11" letter-spacing="0.2" fill="#D9B45C">v0.10.0 · APACHE-2.0</text>
   <line x1="48" y1="92" x2="1232" y2="92" stroke="#D9B45C" stroke-opacity="0.13" stroke-width="1"/>
   <text x="48" y="140" font-family="Geist Mono" font-size="10.5" letter-spacing="3.4" fill="#8A7340">— GOVERNANCE AS CODE</text>
   <text x="48" y="190" font-family="Geist Mono" font-size="33" font-weight="700" letter-spacing="-1.2" fill="#E8EEF6">Write the rule once.</text>
diff --git a/docs/installation.md b/docs/installation.md
index 09ac197..4e42caa 100644
--- a/docs/installation.md
+++ b/docs/installation.md
@@ -94,10 +94,10 @@ chock init .
 Use the action in a workflow:
 
 ```yaml
-- uses: open-coder-ai/chock@v0.9.3
+- uses: open-coder-ai/chock@v0.10.0
   with:
     command: check
-    version: 0.9.3
+    version: 0.10.0
 ```
 
 The action installs the pinned version via `pipx` and runs the command. The `v1` major
diff --git a/pyproject.toml b/pyproject.toml
index 050419c..330b43e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -3,7 +3,7 @@ name = "chock"
 # Version contract (docs/compatibility.md): PATCH releases are emitter-byte-identical;
 # MINOR releases may change compiled output. 0.1.0 is the first public release; the
 # 0.0.1a0 pre-release exists only because PyPI names are claimed by uploading.
-version = "0.9.3"
+version = "0.10.0"
 description = "Governance-as-code for AI coding agents: write a rule once, enforce it on git hooks, CI, and every agent"
 readme = "README.md"
 # PEP 639 SPDX expression; needs setuptools >= 77 (pinned in build-system below).