Cloudflare disclosed a cross-tenant KV cache exposure in its Workers AI GLM-5.3 deployment: 155 responses contained data from other customers' requests. The root cause was two overlapping bugs—an undersized KV pool that was flagged before launch and dismissed, plus an SGLang flaw that had been reported upstream months earlier. The incident is a useful case study in how LLM inference infrastructure fails differently than traditional web backends.
Cloudflare's Wrangler CLI now accepts a --temporary flag that provisions a fresh Cloudflare account, deploys a Worker, and gives a 60-minute claim window — removing the OAuth friction that had been blocking AI agents from completing autonomous write-deploy-verify cycles. Small feature, meaningful shift in how agentic infrastructure is designed.
A protocol released during Cloudflare Agents Week lets AI agents autonomously create accounts, purchase domains, and deploy to production using Stripe for identity attestation and tokenized payments. The $100/month default spending cap is the least interesting part of a design that crosses a real threshold: agents as autonomous infrastructure consumers.
