Engineering Insights

Granite 4.1 LLMs: How They’re Built

Building the compute infrastructure for the Intelligence Age

OpenAI scales Stargate to build the compute infrastructure powering AGI, adding new data center capacity to meet growing AI demand.

Fragments: April 29

Chris Parsons has updated his guide on using AI to code. This is his third update, what I like about it is that he gives a lot of concrete information about how he uses AI, with sufficient detail that we can learn from him. His advice also resonates with the better advice I’ve seen out there, so the article makes a good overview of the state of using AI for software development. I wrote the previous version of this post in March 2025, updated it once in August, and it has been linked from almost

Cybersecurity in the Intelligence Age

OpenAI outlines a five-part action plan for strengthening cybersecurity in the Intelligence Age, focused on democratizing AI-powered cyber defense and protecting critical systems.

Digital Experience Monitoring - Digital experience tests to authenticated resources and enhanced configuration

Digital experience tests now support testing applications protected by Cloudflare Access or third-party authentication. All authentication secrets are managed via Cloudflare Secret Store. Digital experience tests also have enhanced configuration options including: New HTTP methods (DELETE, PATCH, POST, PUT) Secret Store headers, custom plain text headers, and custom request bodies Advanced settings: follow redirects, response bodies, response headers, and allow untrusted certificates

Cloudflare Fundamentals - Instant Bank Payments via Link

You can now pay for Cloudflare services directly from your bank account using Instant Bank Payments via Link. What changed Link now supports bank account payments in addition to cards. If you have a bank account saved in Link, it appears as a payment option at checkout. If not, you can connect one during the checkout flow. How to use it During checkout, select your bank account from your saved Link payment methods. Confirm the payment. After your first Link authentication, your bank account is

Gateway - Gateway Authorization Proxy and hosted PAC files are now generally available

The Gateway Authorization Proxy and hosted PAC files are now generally available for all plan types. Authorization proxy endpoints add an identity-aware option alongside the existing source IP proxy endpoints, using Cloudflare Access authentication to verify who a user is before applying Gateway filtering — without installing the Cloudflare One Client. Cloudflare-hosted PAC files let you create and distribute PAC files directly from Cloudflare One on Cloudflare's global network. These features a

Hyperdrive - Hyperdrive support for private databases with Workers VPC

You can now connect Hyperdrive to a private database through a Workers VPC service. This is the recommended way to connect Hyperdrive to a private database that is not exposed to the public Internet. When creating a Hyperdrive configuration in the Cloudflare dashboard, choose Connect to private database and then Workers VPC. From there, you can select an existing VPC service or create a new one inline by picking a Cloudflare Tunnel and entering your origin host and TCP port. You can also create