Package publish is a permissioned release step, not a routine tool call.

Package publish is a permissioned release step, not a routine tool call. The RubyGems agent uploads show why: let agents draft, build, and stage artifacts, but reserve final gem push for a human or service identity with separate keys, an explicit promotion action, and audit-friendly gates. Treat publish like a deploy: isolated credentials, reviewable promotion logs, and throttleable channels. The practical win is narrower than banning agents; it is reducing blast radius by separating artifact creation from authority to publish.