Sumanth (@Sumanth_077) “Cloudflare open-sourced their own internal AI OS! Cloudflare OS is an AI product” — TopicDigg

Cloudflare open-sourced their own internal AI OS! Cloudflare OS is an AI productivity workspace originally built for internal use at Cloudflare. A large portion of their workforce - engineering, sales, and everything in between - uses it every day. They're open-sourcing it so others can fork and customize it as their own company OS. The core idea is a departure from how cloud software has worked for the past 25 years. When you create a slide deck in Cloudflare OS, you're not connecting to a shared SaaS app running on someone else's server. The system creates a private instance of slide deck software just for you, running in its own sandbox. They call these Gadgets. This has two direct consequences. First, a security bug in the slide deck app can't leak your slides to anyone else because your instance is completely isolated. Second, if the app is missing a feature you need, you can ask the agent to add it. And because you're running your own copy, it's safe to do so. The security model underneath this is called Gatekeepers. Each external resource connection gets a Gatekeeper that handles authorization, enforces narrow access to only what you intended, and logs every action for review. The genuinely interesting part is how Gatekeepers handle human approval. Most agent setups stop and wait for the human to approve each action before continuing - which is why people often end up using "dangerously-skip-permissions." Gatekeepers simulate the action locally instead, let the agent keep working, queue the real action, and let the human approve or reject in bulk later when convenient. Key capabilities: • Gadgets: private per-user instances of every app, sandboxed and AI-modifiable • Gatekeepers: async human-in-the-loop approval without blocking agent progress • Blueprints: shareable app templates where each user runs their own copy • Built-in coding agent that builds, tests, and debugs Gadgets • Real-time multiplayer collaboration via Durable Objects • Capability-based security - agents get access to nothing by default • Runs on Cloudflare Workers or self-hosted on workerd I've shared the link in the replies!