Overview
- Cloudflare published the rebuilt Cloudflare OS code as open-source software so organizations can deploy the platform against their own systems and data.
- The platform bundles per-user agent workspaces, a governance layer called Gatekeepers, and a way to turn agent interactions into runnable personal apps.
- Gatekeepers are service-specific Cloudflare Workers that mediate every resource request so agents start with no access and credentials never touch the agent.
- Cloudflare OS records detailed logs and requires a person’s access check before a workspace can be opened or an agent’s output can be viewed.
- Each agent-built app runs as a real Cloudflare Worker using Dynamic Workers, Durable Object Facets, and Cap'n Web, which raises a choice for adopters between self-hosting and trusting Cloudflare’s edge runtime.