Cloudflare OS Generates Live Documents Instead Of Storing Them

Cloudflare's open-sourced OS generates documents as live micro-apps instead of storing them as files, per its blog post. That swaps the storage-and-versioning model underneath Google Drive and Notion for one that renders on demand, while staying Drive-compatible enough that nobody has to switch.

The security layer holding that together is called Gatekeeper, a policy broker sitting between the OS and any external service. It understands that service's specific API and resource model rather than applying generic permissions, enforcing per-repository scoping, operation limits, field masking, and human approval. Agents and generated apps start at zero access, per the post.

The bigger target

Cloudflare frames Gatekeeper as a security feature. The sharper implication is competitive: if documents don't need to be stored and versioned as files, the reason people keep them in Drive or Notion folders in the first place gets weaker.

Cloudflare routes around Google Drive and Notion's core assumption, that documents are files you store and sync, rather than out-featuring their apps directly. It keeps just enough Drive compatibility that nobody has to switch yet. Watch whether Artifacts push past compatibility mode into something that competes on its own terms, instead of living inside Drive's folder structure.