payback with no arguments. It only asks about what is new or undecided: after the first run, a machine with nothing new to upload and hooks already on shows two lines and exits.
1. Sign in with GitHub

read:user and user:email scopes), never for repository access. The machine gets its own token, kept in ~/.payback/config.toml.
2. Open-source sessions

- Upload for review queues every listed session; they upload in the background.
- Skip uploads nothing.
payback uploadoffers the same list any time, with a picker.
3. Passive income

- Turn on for all public repos writes the
publicpolicy to~/.payback/allow: every public GitHub repository you work in, now and later, is recorded. This is the default, and what the setup bonus asks for. - Choose repos lets you tick repositories; only those are written, by name.
- Not now installs nothing.
The close
The last screen lists only what is left to do (for example, approving Codex’s hooks once with/hooks) and, while the setup bonus is open, its three conditions. Then it opens your account page.
Setup never writes
* (every repository, private ones too) to the allow list. Only payback allow every does, after asking.