Cloudflare Worldedge community field guide

RETROSPECTIVE EDITION / 2026-02

Agents: durable identity before tool autonomy

State, sessions, tools, approvals, recovery, and observability form the agent runtime—not the prompt alone.

ISSUE
26 / 32
FIRST PUBLISHED
SOURCE CHECKED
Archive integrity

The edition month is a curriculum position. This article was first published on 2026-08-10 and is not presented as a historical release or past activity.

01 / DECISION

When this primitive earns a place

Use an Agent when a durable actor must retain scoped state, communicate over time, and call bounded tools.

02 / ARCHITECTURE

Build the smallest defensible path

Bind identity to an authenticated principal, minimize durable state, schema every tool, require approval for consequential actions, and make runs recoverable.

  1. 01Name the contract

    Use an Agent when a durable actor must retain scoped state, communicate over time, and call bounded tools.

  2. 02Add one primitive

    Bind identity to an authenticated principal, minimize durable state, schema every tool, require approval for consequential actions, and make runs recoverable.

  3. 03Capture failure evidence

    Replay a run, revoke a tool, reject malformed arguments, interrupt and resume execution, and inspect a redacted action trace.

03 / REPRODUCE

Evidence before confidence

Replay a run, revoke a tool, reject malformed arguments, interrupt and resume execution, and inspect a redacted action trace.

npm create cloudflare@latest -- --framework=agents

04 / BOUNDARY

The production boundary

An agent must not inherit ambient authority. Model intent is not authorization, and memory is not a trusted source of truth.

05 / FIRST-PARTY SOURCES

Keep first-party sources authoritative

Product behavior, limits, pricing, and availability can change. Re-check these sources before acting.

01 / SOURCECloudflare Agentshttps://developers.cloudflare.com/agents/