Live data from Hacker News

Cloudflare OS: an open platform for agents, apps, and work

blog.cloudflare.com

41–50 of 365 posts

Re: Cloudflare OS: an open platform for agents, apps, and work

#41
post #31
post #4

I liked Kenton's take on this: https://x.com/KentonVarda/status/2084990137180590572?s=20 Text from tweet: Today we are releasing Cloudflare OS, a chatbot with connectors, just like every other tech company is doing. Except actually, it's different. This is a remake of Sandstorm[.]io, my startup from 10 years ago, except this time built on Cloudflare Workers (the platform I've spent the last 9 years building) and deep…

> the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. This can only be correct when the application can’t affect anything outside the sandbox. Which would significantly restrict useful applications.

See my next tweet in the chain:

https://x.com/KentonVarda/status/2084990302784307363

-------------

Of course, personal apps are more useful if they can connect to external services. Cloudflare OS introduces a "connector" system we call Gatekeepers. This is sort of like MCP (and MCP is supported as a kind of Gatekeeper), but with a lot more:

* Instead of exposing tools, a Gatekeeper exposes a Cap'n Web RPC API. That makes it appropriate for use by both agents (via code mode) and Gadgets.

* Gatekeepers integrate with the Cloudflare OS UI to provide inline audit logging and human-in-the-loop approvals for all side-effecting actions.

* When an action requires approval, the agent does not need to stop and wait for it. A Gatekeeper will simulate the outcome, allowing the agent to keep running and queue up more work. You can then approve everything in a batch at the end. Hopefully, this means you no longer feel the need to turn on auto-approve! (But you still can if you want.)

We have already built Gatekeepers for a huge number of services, from GitHub to Home Assistant. We've found, with the right skills, AI can basically crank these things out for any given API, solving the chicken-and-egg ecosystem problem. We are working on a "software factory" of sorts where you can input the API docs for your favorite service and get a well-written Gatekeeper. That's not quite ready yet -- so for now use the ones we provide or use the write-gatekeeper skill to write your own. You can add your own Gatekeepers to your personal deployment.

Re: Cloudflare OS: an open platform for agents, apps, and work

#42
Engineers should be wary about being forced into using particular prompts/skills/instructions.

Why would I use a shared LLM-in-the-cloud, instead of my own? The shared one precludes any possibility to customize or differentiate my workflow, prompts, or skills. As an employee that sounds like a death sentence to doing my job effectively.

Re: Cloudflare OS: an open platform for agents, apps, and work

#43

Everytime I read about new things from Cloudflare they look really cool but I cannot shake the feeling of not wanting to use them for fear of lock-in, am I too paranoid?

Yeah, with love the words "open source" mean a lot less here (de facto, of course not de jure) when the resulting open source product is entirely contingent on Cloudflare's PaaS.

And I think they suffer a little a little bit from their infrastructure being _comparatively_ unique. As providers go, they're on the harder end to replace with something else if you were to ever want to retarget your workloads.

Re: Cloudflare OS: an open platform for agents, apps, and work

#44
post #41
post #31

Earlier quoted context omitted.

> the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. This can only be correct when the application can’t affect anything outside the sandbox. Which would significantly restrict useful applications.

See my next tweet in the chain: https://x.com/KentonVarda/status/2084990302784307363 ------------- Of course, personal apps are more useful if they can connect to external services. Cloudflare OS introduces a "connector" system we call Gatekeepers. This is sort of like MCP (and MCP is supported as a kind of Gatekeeper), but with a lot more: * Instead of exposing tools, a Gatekeeper exposes a Cap'n Web RPC API. That m…

Or more directly:

When you share a Gadget, we verify that anyone you share with also has direct permission to access each of the resources it is connected to (via the Gatekeeper system). Hence, no security bug in the Gadget itself could accidentally grant people access to things they don't already have.

Re: Cloudflare OS: an open platform for agents, apps, and work

#46

Everytime I read about new things from Cloudflare they look really cool but I cannot shake the feeling of not wanting to use them for fear of lock-in, am I too paranoid?

This is 100% open source and self-hostable.

https://github.com/cloudflare/cloudflare-os

It runs on top of our open source runtime.

https://github.com/cloudflare/workerd

Re: Cloudflare OS: an open platform for agents, apps, and work

#47
Setting up your public URLRetrying… (attempt 5 of 6) Fingers crossed!! The last one gotta be the one...

EDIT: It let me down... (Something unexpected went wrong on our side.)

Please let me now if deploying it on your custom domain worked for you please...

EDIT: Retrying it now worked but I had to subscribe to R2 (which is free for 10GB apparently). However, after that it will tell you that you need to enable the Dynamic Workers which is actually paid...

"Your Cloudflare account is on the Free plan, but the Cloudflare OS backend needs Dynamic Workers, which requires the Workers Paid plan."

So no free preview for me today.

Re: Cloudflare OS: an open platform for agents, apps, and work

#48
I can't help but wonder if these things that are now emerging have a sort of "borrowed time" component tied to them.

I see the examples, and they clearly tackle both organizational inefficiencies and human connection/communication as the core problems.

Sounds like things are converging to "my AI will talk to your AI" and the role of humans will just be a human "router" in the loop switching up nodes in a graph, like the return of Switchboard Operators from the 1950s.

Re: Cloudflare OS: an open platform for agents, apps, and work

#49
post #39
post #25

Earlier quoted context omitted.

Sandstorm without self hosting has no interest though. (Edit: see below, where the creator states it _can_ be run locally) Buzz looks like a more reasonable direction than this does.

What do you mean? This is 100% open source and self-hostable! https://github.com/cloudflare/cloudflare-os It runs on the open source Workers Runtime: https://github.com/cloudflare/workerd You can run it at home if you want. There's even a Home Assistant Gatekeeper.

So you can run it off the public internet with no sneaky external dependency on cloudflare, slack etc?

And it would be functionally the same? With the same performance if you put enough hardware there?

If so cool, and that should have been clearly in the announcement, because as it sounded it is “I am a sucker, lock me in!”

Re: Cloudflare OS: an open platform for agents, apps, and work

#50
post #42

Engineers should be wary about being forced into using particular prompts/skills/instructions. Why would I use a shared LLM-in-the-cloud, instead of my own? The shared one precludes any possibility to customize or differentiate my workflow, prompts, or skills. As an employee that sounds like a death sentence to doing my job effectively.

That's why this is open source.

https://github.com/cloudflare/cloudflare-os

You're supposed to customize it.

Also it features a whole system for adding your own skills and context.

Post reply on HN