Cloudflare OS
Cloudflare is framing enterprise agents as an operating surface: access, model routing, cost controls, workflows, skills, MCP connectors, and generated apps in one deployable platform. Kenton Varda's thread adds the sharper Sandstorm lineage: per-user, per-document app instances that make AI-modifiable software safer.
Links: Original source · Shared link · Related link · Related link 1
Logged at IST: 2026-08-05 19:44 IST; updated 2026-08-05 19:56 IST with Kenton Varda's launch thread and the GitHub README.
What it is: Cloudflare's announcement of Cloudflare OS, an open-source platform for organization-scoped agents, apps, and internal workflows.
Gist: Cloudflare OS is pitched as a company-specific work environment rather than a generic chatbot. It combines Cloudflare Access, AI Gateway, Gatekeepers, MCP Server Portals, Skills, Workflows, and generated apps so employees can automate work and reach internal systems under policy.
Kenton Varda's launch thread gives the sharper framing: this is a remake of Sandstorm.io on Cloudflare Workers, now made more practical by AI. The unit of software is a fine-grained "Gadget", like a Sandstorm "Grain": each document, slide deck, or custom app runs as its own private app instance in its own sandbox.
That model matters because access control can live at the platform boundary. If a gadget instance is only accessible to the right people, the app code inside it has much less room to leak data across users or across other gadget instances. It also changes the SaaS feature-request loop: because each user has their own copy of the code, they can ask an agent to modify their copy instead of waiting for the central service to grow the feature.
The generated app part is the most interesting systems angle. A workspace can ask an agent to build a full-stack app with browser UI, server behavior, API, and durable state. The server side runs on demand as a Dynamic Worker and uses a Durable Object Facet with its own SQLite database, separate from the Cloudflare OS runtime. The README also makes the OS analogy explicit: gadgets are processes, blueprints are executables, Gatekeepers are drivers, and agents need capability-based treatment rather than ambient user permissions.
Cloudflare is also making governance part of the product shape. Organizations can route inference through AI Gateway, pick different models for different jobs, attribute requests to people or teams, and set budgets or rate limits. Gatekeepers provide narrow introductions to resources, logs, and human approval flows, including simulated outcomes so an agent can keep working before the human approves or rejects side effects in bulk.
Newsletter angle: Agent platforms are turning into enterprise work operating systems: permissioned tools, reusable institutional context, generated internal apps, and model-cost controls bundled together instead of bolted on later. The Sandstorm lineage makes the more interesting claim: AI may revive per-user modifiable software because users can now change their own app instances safely.