@charl_dot_dev

Cloudflare fan boy

 Cape Town, South Africa
charl.dev
Joined February 2010
  • Tweets1.6K
  • Following149
  • Followers992
258Media
Ran out of space on my old mac pro. No problem, just REA a premium thing to free up space My first (Claude and I) swift app
5
362
lol cloudflare acquiring CellID, so basically they own Vercel sandboxes
5
2
175
20,863
You can now make phone calls on x - calls.x.com
1
1
215
call.x.com not calls.. my bad
54
Google search peeps, your Gemini is living in the past. Today is Thursday, Gemini recons its Monday. Almost made me go into work for nothing.
2
255
Gemini recons it was a hallucination
19
@OfficialLoganK tell your friends
33
Diogo Almeida going to Cloudflare Connect, nice!
141
What is Cloudflare going to call their Github killer when they drop it for bday week?
2
217
Request for the @Cloudflare worker vars and secrets guys - Allow enum with comments So when I have like "log" / "off", I can see the available options and what they mean
233
Stripe bought Openrouter for $7.5 billion, Jev solves model routing for $0.0008
1
8
307
Lol guy I worked with made this after I told him we have access to granular worker tokesn
1
8
1,600
Tokens should just be called Mana
2
1
2
204
Mana - A finite coding resource or energy pool used by developers to cast spells, perform special abilities, or use supernatural skills
34
Introducing zeroness.dev/ zeroness is a capability and identity mesh for Cloudflare Sandboxes. Code starts with zero network and zero secrets. You allow exactly what it needs with createGovernedSandbox, identity is injected at egress, and every crossing is logged.

zeroness

Govern untrusted code on Cloudflare Sandboxes.

zeroness.dev
1
5
402
You're letting AI agents run code. Are you also handing them your API keys and the whole internet? Meet zeroness: run untrusted code on Cloudflare with zero network + zero secrets by default. Grant exactly what it needs. Every call brokered, every action audited.
4
3
400
The killer part: secrets never enter the sandbox. You give the code a capability handle (cap:stripe). The broker injects a short-lived, audience-bound token at the moment the request leaves. Dump the filesystem → you get nothing reusable.
15
zeroness flips the default. The sandbox boots with nothing: default: "deny" network. No credentials. No ambient anything. Then you allow-list exactly what the code needs - by host, path, and method.
17
The problem: one prompt injection, one poisoned npm package, one bug — and the agent has your Stripe key and an open socket. Isolation (containers, microVMs) stops it from breaking out. It does nothing to stop it phoning home with your secrets.
41
github.com/charl-kruger/zero…

GitHub - charl-kruger/zeroness: A capability & identity mesh for Cloudflare Sandboxes.

A capability & identity mesh for Cloudflare Sandboxes. - charl-kruger/zeroness

github.com
49
Load more