Introducing Read-Only Mode for Pulumi Neo

A platform engineer with broad access might want Neo to analyze infrastructure and suggest changes, but include guarantees it won’t actually apply them. Read-only mode makes that possible: Neo does the heavy lifting and hands off a pull request for your existing deployment process to pick up. Control what Neo can change Neo runs with the permissions of the user who creates a task, but you often want a tighter boundary.