Cloudflare open-sources Cloudflare OS and ties agent authorization to what the agent has read

Sources: announcement, discussion
Summary: Cloudflare open-sourced Cloudflare OS, a runtime in which agents and apps start with access to nothing and receive each resource as a typed capability binding. The credential is held by a per-service Gatekeeper Worker that enforces policy and records what was read, and server code runs in a Dynamic Worker with global outbound networking disabled. Authorization is evaluated against data provenance rather than stopping at the tool call.
Why it matters: Sharing an agent-built dashboard cannot become a way to share a table the recipient could not read directly, because the check follows the data rather than the call.