Patch release. Lets an owner who works in a non-prompting mode publish without an interactive approval for every action.
Added
v2.0.0 required an interactive native approval for every publication, so an owner working in a non-prompting mode could not push, tag or release at all.
An owner may now record consent once in the ignored .rpi/local/publication-trust.json:
{"schema_version": 1, "publication_without_prompt": true}The file authorizes only the checkout that holds it and never travels with the product.
What it does not change
This replaces the prompt boundary alone. Candidate verification, clean tree, topology, refspec, remote and branch checks all still apply. A missing, malformed or symlinked authorization grants nothing. The Codex path now reports command shape and execution mode as separate denials.
Consider the tradeoff before enabling it: with the file present, anything running in a non-prompting mode can complete a publication unattended, since every remaining check is machine-verifiable.
Verification
Local gate on the released candidate: 10 checks, 396 tests, zero failures.