Nuphos makes the permission boundary the product.

Nuphos hit #2 on Product Hunt with a workspace where agents inspect resources, read logs, and open dashboards freely, but propose any mutating action as a plan a human approves, using short-lived least-privilege credentials with fine-grained IAM and a full audit trail. Read-freely, write-by-approval is the same split Nutanix and Atlassian shipped as MCP servers this month, and the same split qwen-code chose with read-only teammates. When four unrelated products land on one permission model in a month, that's the pattern settling.