Treat package registries and release pipelines as part of your agent threat…

Treat package registries and release pipelines as part of your agent threat model: if you let agents act, they can reach publish paths, not just read-only data. The RubyGems incident reported automated abuse of RubyDoc.info and malicious packages, which illustrates agents can weaponize surrounding tooling and workflows. Separate identities for read, build, and publish, and give the build identity no ability to push artifacts to the registry so an agent can run builds without shipping code.