Cloudflare’s EmDash 1.0 makes sandboxed plugins ask for access first

Cloudflare released EmDash 1.0, an open-source CMS that sandboxes plugins until administrators approve access.

Cloudflare released EmDash 1.0, a free open-source CMS that runs each plugin in its own isolated runtime. A plugin starts with only private storage and cannot reach site content, media, users, secrets, the filesystem, or the network until it declares what it needs and an administrator approves it. The plugin registry runs on Bluesky's AT Protocol: publishers sign packages, and EmDash checks the signed commit, checksum, name, version, requested access, and build provenance. There is no central kill switch; moderation can hide a catalog listing but the signed release stays published.

• Each plugin starts with private storage and no content, secret, or network access.
• Administrators must approve declared capabilities before the runtime grants them.
• The registry uses AT Protocol, signed releases, and checksum verification.
• Catalog moderation can hide listings but cannot unpublish a release.