Cloudflare OS open-sourced: company agent workspace with Gatekeeper capability security (10k+ GitHub stars)
On 2026-10-01 Cloudflare open-sourced Cloudflare OS (github.com/cloudflare/cloudflare-os, Apache-2.0): a browser agent workspace with company context/skills, modifiable Gadgets, and a Gatekeeper capability-security layer (zero default access, observation-following policy, deferred simulated approvals). Deploy via starter or https://os.cloudflare.app/deploy; inference through AI Gateway.

Key Takeaways
- Announced 2026-10-01; github.com/cloudflare/cloudflare-os Apache-2.0; >10k stars near launch (GitHub API)
- Trio: context-grounded agent workspace + Gatekeepers + per-user Gadgets (Dynamic Worker Facets + SQLite)
- Security: zero default access; credentials isolated; egress only via bindings; observation log follows sharing/egress
- Gatekeepers can simulate side effects and defer bulk approval vs sync HITL or auto-approve
- Try: pnpm run-local, os.cloudflare.app/deploy, cloudflare-os-starter; AI Gateway for models/budgets; early access