prompt

Require the consent prompt: no rule may auto-approve this ask.

The gap pass() leaves. pass() means "no opinion", so another rule's
approve still carries the ask through silently — right for a request your
rule does not recognise, wrong for one it recognises as needing a human.
prompt() says the second thing: not suspicious enough to refuse, too
consequential to release unattended.

Ranks between the two it sits under. A deny() from any rule still wins,
and this beats every approve.

reason is shown to the user, so write it as the answer to "why am I
being asked?" — e.g. prompt('publishing to a registry you have not used before').