diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index b5f714f..4a8e97c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.1.9"
+  ".": "0.1.10"
 }
diff --git a/.release-please-version b/.release-please-version
index 1a03094..9767cc9 100644
--- a/.release-please-version
+++ b/.release-please-version
@@ -1 +1 @@
-0.1.9
+0.1.10
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04fb6c2..cdc9d82 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.1.10](https://github.com/kontext-security/sandy/compare/v0.1.9...v0.1.10) (2026-09-01)
+
+
+### Features
+
+* **cli:** ship Linux sandboxing ([#47](https://github.com/kontext-security/sandy/issues/47)) ([b6aa19b](https://github.com/kontext-security/sandy/commit/b6aa19b6903af6b5c16b70c8cea53be3ec6c0244))
+* **linux:** prove the native enforcement substrate ([#45](https://github.com/kontext-security/sandy/issues/45)) ([ad20aca](https://github.com/kontext-security/sandy/commit/ad20acac2d977f3f8e397780f65557e412c082ef))
+* **sandbox:** enforce current-process policies on Linux ([#46](https://github.com/kontext-security/sandy/issues/46)) ([cedf9be](https://github.com/kontext-security/sandy/commit/cedf9be9ba6bba8ed9fb44d1011d562c9273d5a3))
+
+
+### Bug Fixes
+
+* **cli:** classify oversized doctor output deterministically ([#49](https://github.com/kontext-security/sandy/issues/49)) ([9531e4b](https://github.com/kontext-security/sandy/commit/9531e4b65c97e37a0030f4650f7cec809b2b46d5))
+
 ## [0.1.9](https://github.com/kontext-security/sandy/compare/v0.1.8...v0.1.9) (2026-08-30)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 6389b8b..fce1949 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -433,7 +433,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-cli"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "assert_cmd",
  "clap",
@@ -450,7 +450,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-core"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "serde",
  "serde_json",
@@ -459,7 +459,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-linux"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "landlock",
  "libc",
@@ -470,7 +470,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-sandbox"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "sandy-core",
  "sandy-linux",
@@ -480,7 +480,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-seatbelt"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "libc",
  "sandy-core",
diff --git a/Cargo.toml b/Cargo.toml
index 23ff87f..6b71136 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,7 @@ default-members = ["crates/cli"]
 resolver = "3"
 
 [workspace.package]
-version = "0.1.9" # x-release-please-version
+version = "0.1.10" # x-release-please-version
 edition = "2024"
 rust-version = "1.91"
 license = "MIT"
@@ -31,9 +31,9 @@ tempfile = "3.23.0"
 thiserror = "2.0.17"
 seccompiler = "0.5.0"
 
-sandy-core = { path = "crates/core", version = "=0.1.9" } # x-release-please-version
-sandy-seatbelt = { path = "crates/seatbelt", version = "=0.1.9" } # x-release-please-version
-sandy-linux = { path = "crates/linux", version = "=0.1.9" } # x-release-please-version
+sandy-core = { path = "crates/core", version = "=0.1.10" } # x-release-please-version
+sandy-seatbelt = { path = "crates/seatbelt", version = "=0.1.10" } # x-release-please-version
+sandy-linux = { path = "crates/linux", version = "=0.1.10" } # x-release-please-version
 
 [workspace.lints.rust]
 rust_2018_idioms = { level = "deny", priority = -1 }
diff --git a/tests/package-consumer/Cargo.lock b/tests/package-consumer/Cargo.lock
index 7ec8b03..0dfa636 100644
--- a/tests/package-consumer/Cargo.lock
+++ b/tests/package-consumer/Cargo.lock
@@ -71,7 +71,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-core"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "serde",
  "serde_json",
@@ -80,7 +80,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-linux"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "landlock",
  "libc",
@@ -97,7 +97,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-sandbox"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "sandy-core",
  "sandy-linux",
@@ -106,7 +106,7 @@ dependencies = [
 
 [[package]]
 name = "sandy-seatbelt"
-version = "0.1.9"
+version = "0.1.10"
 dependencies = [
  "libc",
  "sandy-core",
diff --git a/tests/package-consumer/Cargo.toml b/tests/package-consumer/Cargo.toml
index 298b600..2c590ca 100644
--- a/tests/package-consumer/Cargo.toml
+++ b/tests/package-consumer/Cargo.toml
@@ -7,4 +7,4 @@ publish = false
 [workspace]
 
 [dependencies]
-sandy = { package = "sandy-sandbox", path = "../../crates/sandy", version = "=0.1.9" } # x-release-please-version
+sandy = { package = "sandy-sandbox", path = "../../crates/sandy", version = "=0.1.10" } # x-release-please-version