Twitter/X

Author @farhanhelmycode (post published 2026-08-05) paired Cloudflare OS with a…

Brief

Cloudflare OS, released by Kenton Varda as a Sandstorm.io remake on Cloudflare Workers, uses per-'Gadget' sandboxes that isolate instances and let users run and modify their own app copies; author @farhanhelmycode reports pairing it with self-hosted deepseek-v4-flash (video demo, 2026-08-05), claiming a private, DGX Spark–ready "work companion" and asserting wide compatibility with open-weight models.

Why it matters

Author @farhanhelmycode (post published 2026-08-05) paired Cloudflare OS with a self-hosted deepseek-v4-flash model, calling the result "freakin amazing" and envisioning it running inside DGX Spark as a fully private "work companion".

Key details

  • Kenton Varda released Cloudflare OS as a Sandstorm.io remake built on Cloudflare Workers; its per-'Gadget' sandbox model enforces access control and gives each user their own modifiable app copy, which lets AI agents directly modify app code.
  • Farhan claims deepseek-v4-flash "already have a good harness" and "probably can work out of the box with every open weight model," implying straightforward integration with open-weight LLMs.
Source evidence

I paired Cloudflare OS with self hosted deepseek-v4-flash and the result is freakin amazing

Imagine running this setup inside DGX spark, you get fully private work companion solving all your work stuff

The thing about this type of software is it already have a good harness and it probably can work out of the box with every open weight model

Cant wait for the future

Video

Kenton Varda (@KentonVarda)

Today we are releasing Cloudflare OS, a chatbot with connectors, just like every other tech company is doing.

Except actually, it's different. This is a remake of Sandstorm[.]io, my startup from 10 years ago, except this time built on Cloudflare Workers (the platform I've spent the last 9 years building) and deeply leveraging AI. This is more or less the culmination of my secret 10-year master plan.

This is a full-on personal app vibe coding platform, in which the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. We believe a company's security team can feel comfortable giving non-technical users permission to vibe code and then sleep soundly at night.

How is that possible? It's the Sandstorm security model, revisited. A "Gadget" is the same thing as a Sandstorm "Grain": a fine-grained app instance. For example, if you have a document editor app, each document runs as a separate instance of the app, in a separate sandbox (one "Gadget").

This means two things, both of which I think are Big Deals:
1. The platform can manage all access control, by controlling who can access the Gadget at all. There is no way the Gadget can accidentally leak itself to an attacker -- even an attacker who has access to other Gadgets based on the same app.
2. Since everyone is running their own copy of the code, everyone can freely modify their copy of the code.

Think about #2 a bit more.

What if, when you wanted a new feature in the software you are using, you could just prompt your agent to add it?

This doesn't work in the cloud Software-as-a-Service model, because you are not running your own copy of the app.

Sandstorm tried to change that 10 years ago, but the world wasn't ready, because not enough people had the skills or patience to actually modify their software. AI has changed that. Now you just ask the agent -- the same agent that you are using to help you interact with the Gadget can also modify the code of the Gadget.

And it is so fun.

github.com/cloudflare/cloudf…

Link

GitHub - cloudflare/cloudflare-os: Agent workspace built on Cloudflare Workers for creating...

Agent workspace built on Cloudflare Workers for creating documents, building apps, and running agents with your company’s context and systems. - cloudflare/cloudflare-os
github.com

— https://nitter.net/KentonVarda/status/2084990137180590572#m