Except actually, it's different

Sandstorm without self hosting has no interest though. Buzz looks like a more reasonable direction than this does.

> the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. This can only be correct when the application can’t affect anything outside the sandbox. Which would significantly restrict useful applications.

That should have been the announcement. The article posted buries the lead. Cloudflare OS reads like almost any other AI knowledge base until midway when apps are introduced and then becomes overly technical with a code snippet.

> What if, when you wanted a new feature in the software you are using, you could just prompt your agent to add it? Yep, that's precisely the vision I formulated some months ago: https://manuel.kiessling.net/2025/11/04/what-if-software-shi...

This is really interesting. I built a similar product (not released yet), but it uses Kubernetes as the infrastructure layer instead of Cloudflare OS. I guess all these years later I am left with the same existential question that plagued Sandstorm. What is its relevance in the context of Linux containers? This is not a rhetorical question, is there a real benefit for a Sandstorm grain over a docker style Linux container? Does a containerized process not have all the same benefits of a Sandstorm grain, with the added benefit of not requiring any modifications of the containerized software? One argument I could bring is that despite all its claims, OpenAI still had to switch from containers to MicroVMs because its agents under test still managed to break out from their containers. Is the security model of a Sandstorm grain so much better that agents wouldn't figure out how to break out of…

https://xcancel.com/KentonVarda/status/2084990137180590572

You should probably add a disclaimer you work at Cloudflare yourself? > I liked Kenton's take on this: https://x.com/KentonVarda/status/2084990137180590572 https://archive.vn/wvgxq

Thank you. The tweet values the readers time. The blog post. Dear lord. So much noise. This was a great summation.

Oh, wow! This is a lot clearer to me. I've long had a soft spot in my heart about Sandstorm. Here's a comment[0] I made 11 years ago about what Sandstorm was, to me: > I'm a web developer, but I can't really use my skills to provide an open source web app the way I'd like to. I'd like to build a small server-side budgeting app that people can use from their computers or phones to record expenses, but there's no way I can ask people to find a web host that lets them run rails, or set up a heroku account or whatever. > So my only alternative would be to run the service myself, but then I'm storing other people's data, I have to worry about scaling if lots of people use it, and user accounts, and all this stuff. > The idea of sandstorm is folks run this platform on their personal servers, and then it lets you browse an app store like interface and one-click install these server side apps.…