We have discovered a hidden requirement for publishing Installed Packages, which is that a Business Rule must be enabled by someone at Salesforce for the BU wanting to publish the package, and that is after the components have gone through a security review. Furthermore, that Business Rule will only be enabled long enough to publish the Installed Package, and will then be disabled. This is the same process any ISV goes through today when wanting to create and publish a new app via Installed Packages, but the security review and temporary enabling/disabling of the BR was news to our team.

We are working with our platform and framework teams to streamline this process. In the meantime, you will need to log a case with support to get escalated to the team that can approve the request for your BU.

Apologies for the extra steps that weren't documented. Once we finalize a process, we will ensure docs are updated accordingly. Thanks for your understanding, and we look forward to hearing your input on this and other features for the roadmap!