Fetching from the wire…
Infra2026-08-15 · source-backed
Announced August 14, the policy binds to the Worker rather than the route, so it covers custom domains, workers.dev and preview deployments without per-developer configuration. FL2, Cloudflare's Rust proxy, made it possible by separating Workers routing from execution so Access runs before routing resolves. Identity is readable through ctx.access.getIdentity() with no manual JWT validation. Cloudflare The stated motivation is AI-assisted apps getting deployed publicly by accident. Preview-URL coverage is the part that closes the real leak.
Each link below shares sources, entities, or timing with this story.
Cloudflare released Workers / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Cloudflare Access, Identity; reported by the same outlet (blog.cloudflare.com).
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Worker, Workers; reported by the same outlet (blog.cloudflare.com).
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Rust, Workers; reported by the same outlet (blog.cloudflare.com).
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Workers; reported by the same outlet (blog.cloudflare.com).
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Workers; reported by the same outlet (blog.cloudflare.com).
Cloudflare released Workers / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, Workers; reported by the same outlet (blog.cloudflare.com).
Linked by a graph relationship (Cloudflare released Workers); both cover Cloudflare, URL; reported by the same outlet (blog.cloudflare.com).
Flagship uses Workers / Shared entity: Cloudflare / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Flagship uses Workers); both cover Cloudflare; reported by the same outlet (blog.cloudflare.com).