Fresh triage of the 75 prior ๐ข Implement items against the current stack, as of Jul 21 2026. Verified: no CF Workflows / Sandbox SDK / Agents SDK in code, KV via bindings (not legacy REST), OTP not SAML, no active clients. Set your call per row โ it saves locally; hit Export to send me your confirmed decisions.
| Vendor | Update & why (Jul 21) | My rec | Your call |
|---|---|---|---|
| Cloudflare | Cloudflare Agents sandbox preview tunnels No CF Agents SDK in our code; nice for gstack demo sharing if we adopt it. Gated on adoption. |
๐ Review | |
| OpenAI | OpenAI frontier models and Codex on AWS No AWS-native client work; we're CF-primary. Bedrock is last-resort only. |
โญ๏ธ Skip | |
| PostHog | PostHog AI observability for MVPs PostHog is our default analytics. Instrument swarm LLM calls (tokens/cost/traces) = real leverage, low cost. |
๐ข Implement | |
| PostHog | PostHog AI autoresearch for benchmark-driven bug hunting Autoresearch bug-hunt pilot is worthwhile but needs one constrained target picked first. |
๐ Review | |
| OpenAI | OpenAI Codex for knowledge work adoption report Adoption/thought-leadership report, no concrete action for us. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Agents SDK v0.14.0 Superseded by Agents SDK v0.17.0, and we don't run the Agents SDK. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Security Center default scans + higher scan frequency Cheap security win on our live CF zones (STC + IL Pages). Verify Security Insights coverage. |
๐ข Implement | |
| OpenAI | OpenAI Codex role-specific plugins, Sites preview, and annotations Evaluate Codex plugin surfaces vs our gstack skill set for one packaging win. |
๐ Review | |
| PostHog | PostHog Slack app beta for repo-aware bugfixes and PRs Slack-native; we run on Discord. Pattern only, no action. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workflow binding schedules We run zero CF Workflows (verified). No scheduler glue to simplify. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workflow binding schedules (canonical URL) Duplicate of #10; and no CF Workflows in use. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare MCP portal tool/prompt aliases Only if we expose third-party MCP via CF portals; audit worst tool names if so. |
๐ Review | |
| Cloudflare | Cloudflare Workers bulk secrets API Already used in the ARS bulk-secret scrub (Jun 30). |
โ Done | |
| Cloudflare | Cloudflare: Access - SAML assertion encryption for identity providers We use email OTP on CF Access, not SAML. No IdP to encrypt assertions for. |
โญ๏ธ Skip | |
| OpenAI | OpenAI: Dreaming: Better memory for a more helpful ChatGPT Consumer ChatGPT memory feature; gbrain already owns our persistent memory. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare: Billable usage and budget alerts now in product sidebars Cheap cost-control: enable CF budget alerts on any pay-as-you-go usage beyond credits. |
๐ข Implement | |
| Cloudflare | Cloudflare: Access - Share identity providers across accounts with IdP federation Single ZT org, OTP-based. No multi-account SAML federation need. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare AI Gateway: Control AI costs with spend limits We cap Gemini spend separately. Consolidate under AI Gateway only if traffic routes through it. |
๐ Review | |
| Cloudflare | Cloudflare Workers VPC: Filter Workers public Internet traffic using Gateway policies Real security upside (egress policy) but needs Workers VPC egress stood up first. |
๐ Review | |
| Cloudflare | Cloudflare AI Gateway: Spend controls plus identity-driven budgets Duplicate of #18. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workers VPC: Route public egress through Gateway policies Duplicate of #19. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workflows: Saga-style rollback handlers No CF Workflows in use (verified). |
โญ๏ธ Skip | |
| Google Colab CLI: Remote Colab runtimes from local terminals and AI agents Burst GPU/TPU fallback via Colab CLI โ niche; keep as an overflow option. |
๐ Review | ||
| Cloudflare | Cloudflare AI Gateway: spend limits and identity-driven budgets Duplicate of #18. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workflows: saga-style rollback support Duplicate of #22; no CF Workflows. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare WAF: managed rules release for June 9, 2026 Cheap security: verify WAF managed-ruleset coverage on our live zones (STC/IL). |
๐ข Implement | |
| DigitalOcean | DigitalOcean upcoming release notes audit October 20 ACT-NOW Swarm droplet runs on DO. Audit app specs for xl-build + MySQL 8.0 before Oct 20. |
๐ Review | |
| Cloudflare | Cloudflare Sandbox SDK deprecation migration deprecat No @cloudflare/sandbox usage in our code (verified). Deprecation doesn't touch us. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Browser Run multi-format snapshot output We use chrome-devtools/gstack for browser work now; adopt only if we move to CF Browser Run. |
๐ Review | |
| Cloudflare | Cloudflare Workers AI Kimi K2.7 Code availability We don't use Workers AI for coding; coding is Opus 4.8 / GPT-5.5. |
โญ๏ธ Skip | |
| X/Twitter | Anthropic Fable 5 / Mythos 5 forced access suspension Fable 5 fallback risk already handled โ trial ran, fallbacks pinned. |
โ Done | |
| Cloudflare | Cloudflare WAF threat-intelligence fields Needs Cloudforce One / Enterprise WAF we don't have. |
โญ๏ธ Skip | |
| Cloudflare | Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue Research spike: Agents SDK / Flue fit for OpenClaw workflows. Worth a look, not a build. |
๐ Review | |
| OpenAI | New usage analytics and updated spend controls for enterprises Not on ChatGPT Enterprise; analytics/spend controls N/A. |
โญ๏ธ Skip | |
| Cloudflare | Temporary accounts for AI agent deployments Temp CF accounts genuinely improve gstack deploy-verify loops. Trial with Wrangler 4.102+. |
๐ Review | |
| Cloudflare | Temporary Cloudflare Accounts for AI agents Duplicate of #35. |
โญ๏ธ Skip | |
| Cloudflare | Temporary Cloudflare Accounts for AI agents Duplicate of #35. |
โญ๏ธ Skip | |
| OpenAI | OpenAI Daybreak platform expansion Evaluate Codex Security plugin for swarm repos (scan quality/patch usefulness). |
๐ Review | |
| OpenAI | OpenAI Codex long-running work whitepaper Pull long-running-agent patterns into the swarm playbook โ cheap, useful. |
๐ Review | |
| PostHog | PostHog Scout architecture deep dive Scout pattern maps to our platform-intel reviewer; adopt durable-memory + structured signal. |
๐ Review | |
| Anthropic | Claude Tag for Slack Slack-native; we're on Discord. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare self-managed OAuth for all Prefer CF self-managed OAuth over long-lived tokens where feasible in automations. |
๐ Review | |
| Cloudflare | Cloudflare PQC ML-DSA origin certificates PQC origin certs are niche; needs AOP/custom origin trust store. Low priority. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Workflows saga rollbacks Duplicate; no CF Workflows in use. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Audit Logs v2 for Organizations We manage a CF org. Cheap ops/security: adopt Audit Logs v2 in the runbook, verify admin coverage. |
๐ข Implement | |
| Cloudflare | Cloudflare Agents SDK v0.17.0 Only relevant if we build on CF Agents SDK. Roadmap candidate, not running it today. |
๐ Review | |
| OpenAI | OpenAI GPT-5.6 Sol preview Superseded by GPT-5.6 GA (#74). Track only. |
๐ Review | |
| Cloudflare | Cloudflare Agents SDK v0.17.0 Duplicate of #46. |
โญ๏ธ Skip | |
| PostHog | PostHog managed warehouse architecture on DuckDB PostHog managed-warehouse beta โ eval whether it simplifies our analytics/context stack. |
๐ Review | |
| DigitalOcean | DigitalOcean Serverless Inference prepaid-balance requirement prepaid We don't use DO Serverless Inference (Gradient dead). No prepaid dependency. |
โญ๏ธ Skip | |
| Anthropic | Claude in Microsoft Foundry GA No Azure-native work; Claude-in-Foundry N/A. |
โญ๏ธ Skip | |
| DigitalOcean | DigitalOcean Private Droplets GA Private Droplets could be a safer default for the swarm droplet. Eval. |
๐ Review | |
| Cloudflare | Cloudflare One Client for macOS 2026.6.822.0 No CF One-managed macOS fleet. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare One Client for Windows 2026.6.822.0 mandatory No Windows endpoints under CF One. |
โญ๏ธ Skip | |
| Driving the Agent Quality Flywheel from Your Coding Agent Adapt the 5-stage eval-loop pattern into one gstack workflow โ real quality leverage, but a build. |
๐ Review | ||
| Anthropic | Introducing Claude Sonnet 5 Aug 31 ACT-NOW Benchmark Claude Sonnet 5 vs Opus 4.8 for sub-agent/coding lanes. Not forced; Aug 31 window. |
๐ Review | |
| Cloudflare | Cloudflare AMP/SXG end of life end of life No legacy SXG config in our zones. Nothing to clean up. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare WAF Release - 2026-07-01 2026-07-01 ACT-NOW Jul-1 WAF release already shipped โ caught-up check: confirm no critical bot rule regressed. |
๐ข Implement | |
| Cloudflare | Cloudflare BotBase + Attribution Business Insights 2026-07-01 Needs Enterprise Bot Management we don't run. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare AI traffic controls 2026-09-15 ACT-NOW AI traffic controls default-change hits our content zones (STC/IL). Set Search/Agent/Training policy before Sep 15. |
๐ข Implement | |
| Cloudflare | Cloudflare Gateway granular roles Single admin (nick/admin). Granular Gateway roles add nothing yet. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare account-scoped firewall events in Logpush Account-scoped firewall Logpush live โ ars-crm-workers-trace job (id 1759256). |
โ Done | |
| Cloudflare | Cloudflare memory usage metrics for Workers and Durable Objects We run 10+ Workers. Add memory metrics to the standard observability checklist โ free regression signal. |
๐ข Implement | |
| Cloudflare | Cloudflare MCP portals with service tokens Service-token MCP portals โ adopt when we harden any CF-protected MCP endpoint. |
๐ Review | |
| Anthropic | Claude Fable 5 promotional access Fable 5 promo trial already run; decision captured. |
โ Done | |
| Cloudflare | Cloudflare AI traffic controls by bot behavior September 15 Duplicate of #60 (same Sep-15 AI traffic controls). |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Access independent SSH MFA with YubiKey PIV 2026-07-01 No SSH flows fronted by CF Access; no YubiKey PIV fleet. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Wrangler auth profiles 2026-07-02 Wrangler auth profiles already in use across our CF work. |
โ Done | |
| Cloudflare | Cloudflare Workers Cache Workers Cache โ eval on cacheable routes (STC pages, mailer). Latency + CPU-billing win. |
๐ Review | |
| Cloudflare | Cloudflare Workflows per-step billing starts Aug. 10 Aug. 10 No CF Workflows in use (verified) โ per-step billing has zero cost impact on us. |
โญ๏ธ Skip | |
| Cloudflare | Cloudflare Images binding billing model change 2026-07-01 We don't use the CF Images binding. |
โญ๏ธ Skip | |
| OpenAI | OpenAI SWE-Bench Pro audit Note the SWE-Bench-Pro caveat in our model-eval notes; prefer real-task evals. Low effort. |
๐ Review | |
| Google Cloud Run sandboxes Cloud Run sandboxes โ platform option for untrusted-code exec. Eval when the need arises. |
๐ Review | ||
| OpenAI | OpenAI GPT-5.6 family (Sol / Terra / Luna) โ GA ACT-NOW GPT-5.6 Terra is GA. Benchmark vs 5.5 on one live sub-agent task, then decide the sub-agent default. |
๐ข Implement | |
| Cloudflare | Cloudflare deprecating legacy Workers KV namespace API routes (hard deadline Oct 15, 2026) deprecat ACT-NOW Verified our Workers use KV bindings (not legacy REST). Quick close-out confirm before Oct 15; low risk. |
๐ข Implement |
Source data: 336 triaged platform-intel items (Jun 1โJul 21), deduped by PI id. Full log dashboard: platform-intel-log.pages.dev