Cloudflare has shipped four Workers roles at three scopes to all customers, so an agent's API token can now carry one of them for a single application. Resource-level control for D1, R2 and KV is still a plan.
Reality
- Evidence62
- Adoption30
- Hype gap+10
- Incentives80
- Confidence58
The Worker in this FastAPI pattern authorizes requests itself from a KV copy of the session, so a role change lands only when the origin's invalidation write does, and the 3600-second cap is the only other bound.
Reality
- Evidence58
- Adoption10
- Hype gap+45
- Incentives35
- Confidence62
An edge-hosted product search rewrote its prompt from "translate this query" to "name the product a seller would list". Haiku beat Sonnet once every search became an inference call.
Reality
- Evidence34
- Adoption16
- Hype gap+18
- Incentives62
- Confidence38
A Cloudflare Workers audit log duplicated conversations for three separate reasons at once, so every partial fix left the symptom intact. The real lesson is about verification, not dedup.
Reality
- Evidence46
- Adoption17
- Hype gap+9
- Incentives63
- Confidence38
A Cloudflare Worker walkthrough puts the whole bridge in one file, and the load-bearing part is four key-value writes, not the API calls.
Reality
- Evidence57
- Adoption
- Insufficient
- Hype gap+8
- Incentives62
- Confidence54