Cloudflare Open-Sources 'Cloudflare OS' — Zero-Permission Agents Mediated by Per-Service 'Gatekeeper' Workers
Announced August 5 and released as two GitHub repos (core plus a starter mirroring Cloudflare's internal deployment), Cloudflare OS is a self-deployable platform with three parts: a browser-based Agent Workspace where agents run isolated code with company context and persistent state, a governance layer where service-specific 'Gatekeeper' Workers mediate every resource request from a zero-permission baseline while tracking every resource an agent observes, and an app platform where agents build full-stack apps on Dynamic Workers and Durable Objects with SQLite. It ran internally at Cloudflare since May with no pricing announced. The interesting design choice for builders is the capability-request model — agents start with nothing and ask, rather than inheriting a user's ambient credentials.
↳ Follow the thread