Your customers prompt their own features

Every customer of your SaaS runs in their own container. So the customization box in your settings page can be a prompt.

A customer types "add a CSV export with our column names." An agent session scoped to their container edits their instance: a snapshot fires before the change, so a bad edit is a restore, not an incident. The blast radius is one machine, theirs; the neighbor's container never hears about it.

On a shared codebase this feature is unthinkable: one tenant's prompt would be everyone's deploy. Per-customer computers make it a settings page.

Your customers don't file feature requests: they prompt them.