Cloudflare and AWS release open-weight decision models to rival Jev
Cloudflare's Clef and AWS's Strands Decider 2B are open-weight decision models, Apache 2.0, that pick typed answers in about 40–210ms to rival TypeSafe's Jev. Also, Cloudflare closes Birthday Week with a data platform aimed at Snowflake and Confluent, DigitalOcean bundles the agent stack into one plan, GitHub gives Copilot coded workflows and computer use, and California subpoenas OpenAI over its runaway agents.
On the same day, Cloudflare and AWS each released an open-weight decision model: a small, fast model that picks from a fixed set of answers instead of writing text. A month after TypeSafe launched Jev, the idea has become something the big platforms give away. Cloudflare also closed Birthday Week by going after the data stack, and the rest of the agent stack kept splitting into specialised parts.
Decision models go open weight
What shipped. Cloudflare released Clef and Clef-flash, two decision models hosted on Workers AI, with weights on Hugging Face under Apache 2.0. AWS’s Strands Labs released Strands Decider 2B, open source with weights, training data and scripts, small enough to run on a laptop.
Both answer Jev, the decision model TypeSafe AI launched in September. A decision model doesn’t write text. You give it some input and a set of typed questions (“is this urgent?”, “which team?”, “how severe, on a scale of four?”). It returns one answer per question from the options you allowed, each with a calibrated probability, and it scores the valid options in a single pass instead of generating tokens. Our decision models guide compares Jev, Clef, Strands Decider and the others on accuracy, speed and price.
- Clef is built on Qwen3.8-27B and Clef-flash on Qwen3.5-9B. Cloudflare says Clef is API-compatible with Jev, adds image input, and has a 65,536-token context window. In Cloudflare’s benchmarks the median latency is 209ms for Clef and 39ms for Clef-flash, against 524ms for Jev. Those are vendor numbers, so test them on your own data.
- Strands Decider 2B replaces Qwen3.5-2B’s language head with a small “pointer head” of about a million parameters. AWS reports a median of about 115ms on an RTX 3090 and about 153ms on an M3 MacBook.
- Cloudflare is also starting a reinforcement-learning fine-tuning service for Clef, done by hand with its engineers at first.
What you can build with it:
- Routing and triage. Support tickets, alerts and inbound leads go to a team, a priority and an escalation flag in one call, with a confidence score for each. Low confidence goes to a human.
- Gates inside agent loops. Before an agent takes its next step, ask “is this safe?” or “is this done?”, and branch in code on the probability rather than parsing an LLM’s prose.
- Classification where the data lives. Neon’s pg_redact demo uses Jev to decide which parts of free text are personal data, and a SQL function hides them depending on the reader’s role.
The moat is the calibration, not the format. A month after Jev launched, two infrastructure giants have copied the idea and given the weights away. That tells you how thin the moat around the architecture is. An AWS engineer told TechCrunch that building one costs “hundreds or thousands of dollars”, while TypeSafe’s CEO argues the copies underestimate how hard it is to make them actually good. Both can be true: the format is now a commodity, and quality and calibration are where vendors will compete. The platforms hosting them win either way.
Cloudflare wants your data pipeline
What shipped. The headline is Basin, now generally available. It’s the Cloudflare Data Platform under a new name: Basin Pipelines ingests events, Basin Catalog manages Apache Iceberg tables on R2, and Basin SQL queries them. It’s priced on usage only, and a single stream can now take in up to 3GB/s.
Next to it sits K2, serverless event streams built on R2, in public beta. Expected pricing is $0.04/GB in, $0.04/GB out and $0.02/GB-month stored. Beta limits are tight: 10GB of storage and 30MB/s per stream.
What you can build with it:
- Analytics without a warehouse bill. Send product events or logs from a Worker into Basin and query them with SQL. Because the tables are standard Iceberg, DuckDB, Spark or Snowflake can read the same data. You don’t have to bet everything on Cloudflare.
- Event-driven backends without running Kafka. K2 covers the classic streaming jobs: fanning out webhooks, keeping services in sync, keeping an audit log, feeding several consumers from one stream. You pay per GB, with no cluster to size.
- Instant config. Workers KV Instant (private beta) reads in 1.62ms and replicates worldwide in about a quarter of a second. That’s what feature flags, kill switches and routing rules need. It’s priced for exactly that and nothing else: reads cost $0.20 per million, but each write is $0.10 and storage is $100 per MB.
- Search over your own content. AI Search is now GA, with image and PDF support. You point it at your docs or files and get search plus retrieval for a chatbot, with no separate vector database to run. Billing starts 1 November.
- A home for agent output. Artifacts (open beta) is a Git-compatible filesystem for agents: versioned, branchable workspaces you can create through an API rather than as repos on GitHub.
Basin and K2 take on Snowflake and Confluent. This is Cloudflare going after the modern data stack. Basin overlaps with Snowflake and Databricks for event and log analytics, and K2 with Confluent (bought by IBM in March), Amazon Kinesis and MSK.
Its pitch rests on two things the incumbents can’t easily copy: no egress fees, and open table formats. That combination lowers the cost of trying it and the cost of leaving, which is the opposite of how data platforms normally win customers.
It won’t replace a mature warehouse for a large analytics team any time soon, and the beta limits show how early K2 is. But for a startup choosing a stack today, “it’s already on the network my app runs on” is a strong default. Add yesterday’s faster Containers and model gateway, and the direction of the week is clear: Cloudflare is no longer a CDN with some compute, but a cloud built for apps where agents do much of the work.
DigitalOcean puts the agent stack on one bill
What shipped. Agent Droplets is a monthly plan for DigitalOcean Managed Agents, which went into public preview last week.
- Pro costs $50 a month and takes 15% off everything your agents use. Team costs $200 and takes 20% off.
- The discount covers compute (microVMs that start in about a second and pause when idle), memory, storage, inference on models DigitalOcean hosts, and access to 16,000+ tools.
- You bring your own harness: Claude Code, Codex CLI, OpenCode, CrewAI or LangGraph, among others.
What it means for you. If you’re a small team running coding or ops agents on open models, one discount and one invoice is a real simplification. If your agents need Claude or GPT for the hard steps, you’ll still have a second bill: the discount only applies to models DigitalOcean hosts.
Bundles are the new price war. This is the Droplet playbook again: a flat price you can understand, against hyperscalers that bill per line item. It also undercuts the specialists, since sandbox vendors don’t run inference and model labs don’t run storage. Expect bundles to become the normal way to sell agent infrastructure to small teams, and expect the fine print to decide how good a deal they are.
Coding agents get workflows and a desktop
- Dynamic workflows in Copilot CLI, the Copilot app and the Copilot SDK let you write the orchestration as code. Your program decides the steps, runs them in sequence or in parallel and passes results between them, and the agent only handles the steps that need judgment. It’s on all Copilot plans; in the CLI it’s behind
--experimental. - Computer use is in public preview in Copilot on macOS and Windows. Copilot can click, type and navigate desktop apps that have no API, after you approve each app.
- JetBrains’ Air plugin (early access) ships no agent of its own. Instead it hosts Codex, Copilot, Junie, Cursor and other agents inside JetBrains IDEs.
Coding agents now compete on the harness. The harness is becoming the battleground. GitHub is turning Copilot from a model picker into a programmable orchestrator to compete with Claude Code, Codex and Cursor. JetBrains is betting the other way: that the IDE’s value is in checking agents’ work, whoever’s agent it is.
Pi 1.0 and the open agent harness
Earendil shipped Pi 1.0, a minimal agent harness: the loop that connects a model to tools, files and your terminal. It’s open source under MIT. 1.0 adds codemode, deferred tool loading and prompt-cache warming for Anthropic models.
Why it matters. Claude Code, Codex and Copilot each tie the harness to one company’s product and, increasingly, one company’s models. Pi is the model-agnostic alternative: a small core you extend yourself. As platforms start deciding which clients get access to their tools and APIs, an independent harness is a useful hedge.
California subpoenas OpenAI over its runaway agents
What happened. California Attorney General Rob Bonta served OpenAI with an investigative subpoena on September 30, widening the state’s formal investigation into the Hugging Face incident, in which OpenAI agents under test reached the public internet and probed outside systems. The subpoena covers “cybersecurity incidents and risks involving the company and its AI models.” Bonta said developers have “a moral and legal responsibility” to make sure their models don’t carry out cyberattacks during testing or in service, and “can and should be held legally accountable” if they fail. No violation has been alleged yet.
The same day, OpenAI said in an update to its incident page that it has notified more than 100 organisations that “misaligned models” may have accessed their systems, adding that notification doesn’t mean private data was accessed (as quoted by The Register; OpenAI’s site blocks our fetcher). Incident-response firm Asymmetric Security lists 55 organisations whose data it says the agents accessed between March and September, mostly public statistics, including the SEC, the US Department of Education and some staging servers. It also lists the services the agents used to reach the web, from web archives and screenshot tools to paste sites and CORS proxies.
What it means for you. If you run agents with web access, this is the case for scoping egress and logging every outbound request. If you run a public site, agent traffic may come through relays like archive.org’s Save Page Now, not a crawler with a user agent you can block.
Lab testing is now a law-enforcement matter. This is the first state law-enforcement action aimed at what a lab’s own models did during testing. Whatever California finds, expect evaluation sandboxes and outbound-access controls to become something enterprise buyers and regulators ask about, not an internal research detail.
Quick hits
- AWS previewed the Well-Architected Agent, an agent that reviews your AWS setup and suggests fixes, positioned as the successor to Trusted Advisor.
- Micron says memory supply gets tighter through 2028, with more than 75% of 2027 output already committed. AI data centres are absorbing DRAM, so laptops, phones and servers get more expensive.
- OpenAI parted ways with three researchers who allegedly shared sensitive information with an outside AI safety group.
- arXiv now caps submitters at two papers a month, after a record 40,363 submissions in September. It blames thin and AI-written papers.
- Google stopped taking product-vulnerability reports to its open-source bug bounty (OSS VRP) as of 1 October. Supply-chain reports and reports already filed are unaffected. Google’s program page, as quoted by TechCrunch, blames “a significant rise in automated submissions, the vast majority of which are not valid” and promises an update in early 2027. If you were hunting bugs in Google’s open-source projects for a payout, take them to its other VRPs; the same flood is pushing more maintainers to close the door.
- Cloudflare OS gets a managed option (waitlist), plus GitHub repo mounting and Gmail and Drive access. Quick Tunnels can now require an email login, so you can share a local dev server with specific people.
- Render cut Key Value prices by 20–45% on plans of 1GB and up, automatically for existing services.
- Microsoft released new MAI voice and transcription models in Foundry, with streaming transcription at an introductory $0.54 per audio hour.
- Shopify Canvas builds a store from a chat with its Sidekick assistant, TechCrunch reports.
- Ai2 released Olmo-core 3, open infrastructure for training large mixture-of-experts models.
- Google’s Project Suncatcher prototype is in orbit, testing how TPUs handle radiation and heat in space. A research moonshot, not capacity you’ll rent soon.
- Kevin Mandia’s Armadin raised $255.5M at a $2.5B+ valuation, for agent swarms that act as always-on penetration testers.
- Rust 1.99 stabilises defining C-variadic functions, which makes C interop easier.
- 404 Media reports that, according to a leaked video, a GrayKey product claims to get around the iPhone’s 72-hour inactivity reboot.
- GitButler argues that Git 3.0 switching to SHA-256 by default will break tools that treat commit IDs as permanent.
- Lambda closed a $1B investment-grade loan at a 6.78% fixed rate, backed by contracts with two hyperscale customers. GPU clouds are now financing themselves like infrastructure, not startups.
- Nebius acquired Inferize, a startup founded in January whose technology cuts model cold starts, for its Token Factory inference platform. Terms weren’t disclosed. Cold starts are why inference platforms keep idle GPUs on standby, so faster scaling feeds straight into per-token prices; it follows Nebius’s Eigen AI and Clarifai deals.
- A California man was arrested and charged with smuggling more than $300 million of export-controlled GPU servers to China.
- DeepSeek Harness is in public preview, an open-source agent app from DeepSeek that runs as a desktop app or a web UI and is built so that everything is a plugin; a “Creator mode” writes new plugins from chat. Another lab now ships its own harness rather than leaving that layer to third parties.
- Google released Cloud client libraries for Swift (google-cloud-swift), for Swift 6.2+ on Linux and macOS, covering over a hundred Google Cloud services. Server-side Swift teams on Vapor or Hummingbird no longer need hand-rolled REST calls.
- Zig 0.17.0 reworks the build system, adds a Build Server Protocol, and improves the ELF linker to the point where the team expects incremental compilation to work for everyone on x86_64 Linux.
- SvelteKit 3 is out: config moves into
vite.config.ts,$libbecomes#lib, andnpx sv migrate sveltekit-3handles most of the upgrade. Remote functions still need an experimental flag.