Tooling32d ago
Cloudflare OS open-sourced: company agent workspace with Gatekeeper capability security (10k+ GitHub stars)
On 2026-10-01 Cloudflare open-sourced Cloudflare OS (github.com/cloudflare/cloudflare-os, Apache-2.0): a browser agent workspace with company context/skills, modifiable Gadgets, and a Gatekeeper capability-security layer (zero default access, observation-following policy, deferred simulated approvals). Deploy via starter or https://os.cloudflare.app/deploy; inference through AI Gateway.
Tooling8d ago
Cloudflare discloses a cross-request KV cache leak in GLM-5.3 on Workers AI: a config mismatch plus an SGLang bug let 155 responses carry other users' data over 13 days
In an Oct 26 incident report on its blog, Cloudflare said that between Aug 27 and Sep 9, 155 responses from GLM-5.3 on Workers AI (@cf/zai-org/glm-5.3) to prompts longer than 681,280 tokens contained data from other customers' recent requests, all returned with HTTP 200. The cause was a prefill KV cache pool smaller than the 1,048,576-token context window, combined with an SGLang bug in disaggregated prefill/decode mode. Cloudflare found no evidence of deliberate exploitation, has fixed it, and recommends operators upgrade to SGLang v0.5.22 or later.
Release22d ago
OpenCode 2.0 ships: one background service for TUI, web and desktop, Code Mode for all MCP servers, background subagents, and @opencode/sdk
Anomaly published the OpenCode 2.0 launch note on Oct 12: a single auto-started local service shared by the TUI, web and desktop apps; a rewritten server API with the new @opencode/client; @opencode/codemode, which turns MCP servers and OpenAPI endpoints into functions the model composes in scripts (all MCP servers opt into Code Mode by default); background subagents and background shell commands; 80+ internal features rebuilt as hot-reloadable plugins; and @opencode/sdk for embedding the same engine as a library. V1 plugins and the old server API are not compatible.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.