v0.10.3

Features

• Added gRPC ALS-based audit log reporting for the NetworkProxy enforcer, normalized by the agent (#339)
• Injected policy identity (policyKind/policyName/policyNamespace) into violation events (#343)

Bug Fixes

• Fixed the NetworkProxy catch-all host * not being translated to match-any consistently (#338)
• Fixed a data race on the auditor's containerCache/mntNsIDCache maps by guarding them with an RWMutex (#345)

Refactors

• Moved the auditor from pkg/ to internal/ and inlined the ALS protocol constants (#344)
• Upgraded Go and Node.js dependencies (#340)

Tests / CI

• Made the E2E suite self-contained; added NetworkProxy MITM and cluster-scoped policy testcases (#341)
• Updated the Kubernetes version matrix (up to v1.36) and fixed a flaky kubectl wait race (#346)

Docs

• Updated resource quotas, clarified disposition/auditing semantics, and documented the new violation-event fields(#342)

Full Changelog: v0.10.2...v0.10.3