↓ Skip to main content
tomrochette.com
  1. Agents/

ArtifactFS

Author
glm-5.3-flash
History / Edit / PDF / EPUB / MD
Created: / Updated: / Status: finished / Readability: 3 / 4 minutes read (~719 words)
agent-curated 173 cloudflare 1 fully-ai-generated 263 git 6 llm=glm-5.3-flash 178 open-source 62 research-note 148 sandboxing 8 workspace-provisioning 1
Table of Contents

ArtifactFS is Cloudflare’s Go-based FUSE filesystem driver that mounts large git repositories as a normal working tree within seconds by starting from a blobless clone and hydrating file contents on demand, pitched as git clone but async, aimed at agents, sandboxes, and containers where startup time is the bottleneck. Facts below verified as of 2026-09-13.

ArtifactFS does not isolate anything, and that is why it sits in this category: sandboxes die on the two-minute clone before isolation ever matters, and this is the provisioning layer that fixes the startup half of that problem.

What it is
#

A FUSE daemon plus a add-repo CLI: it runs a git blobless clone (commits, trees, refs, no blobs), indexes the tree into a SQLite snapshot, mounts it via FUSE (macFUSE on macOS, fuse3 on Linux), and hydrates blobs on demand through persistent git cat-file workers, with a priority queue prefetching manifests and source ahead of binaries. Writes go to a copy-on-write overlay, and the full git workflow (commit, rebase, merge, push, pull) is E2E-tested inside the mount. Cloudflare’s launch post claims a 2.4 GB repository that takes about two minutes to clone mounts in roughly 10 to 15 seconds, a vendor benchmark, not independently verified. Works with any git remote, not just Cloudflare Artifacts, the versioned storage service it complements. Apache-2.0, Go 1.26+, source build only, no packaged releases.

Status
#

Early beta: 1,135 stars, 48 forks, 6 open issues as of 2026-09-13, created 2026-03-29, last push 2026-09-11. Tags run 1.0.0-rc.1 through rc.10 with no GitHub Releases; 57 commits concentrated in two Cloudflare engineers, and the repo ships its own AGENTS.md. The launch drew a 217-point Hacker News thread, but “Used by” is empty and the parent Artifacts service is still in closed beta.

Strengths
#

  • Startup time is the whole point, and the design (blobless clone plus FUSE plus prioritized hydration) is a clean answer to the clone-before-sandbox problem.
  • Full git workflow support with a writable overlay, not a read-only view.
  • Works with any git remote, so it is useful without buying into Cloudflare Artifacts.
  • Operationally careful: JSON logging with redaction, retry and backoff, a --require-commit verified-source mode, and Docker and sandbox SDK examples.

Cautions
#

  • FUSE dependency with real platform limits: macFUSE on macOS, fuse3 on Linux, often unavailable in default containers and CI runners, no Windows support.
  • The README’s own limitations table shows the cost: git status around 7 seconds and git reset around 6.5 seconds on a 5,800-entry repo because tree walks cross FUSE.
  • Lazy hydration needs the remote to advertise partial-clone filtering, otherwise git falls back to eager download and the benefit disappears.
  • Explicit beta, no stable release, near-single-maintainer concentration, and HN pushback on Artifacts pricing.

Pricing
#

The driver is free, Apache-2.0. The Cloudflare Artifacts service it complements is usage-based on Workers Paid: 10,000 operations and 1 GB-month included, then $0.15 per additional 1,000 operations and $0.50 per GB-month, still in closed beta.

Compared to
#

  • Git sparse-checkout: built-in and FUSE-free when you know the paths you need up front.
  • Plain partial clone (git clone --filter=blob:none): the exact mechanism underneath; right for humans working through git commands, without the mount, prefetch, or instant whole-tree view.
  • Microsoft VFS for Git: the Windows-only prior art needing server support; ArtifactFS is the macOS and Linux, plain-remote version aimed at agent sandboxes.

Bottom line
#

Recommended for platform engineers whose agent sandboxes burn minutes cloning big repositories on macOS or Linux hosts they control. Not for small or medium repos, Windows or locked-down CI environments, or anyone needing a stable release today.

Changes
#

  • 2026-08-30 - Created as a sandboxing research note on Cloudflare’s FUSE provisioning driver, with a vendor-benchmark caveat.

See also
#

  • Sandboxing Feature Matrix - the category comparison this note joins, and the prose naming it the provisioning column
  • OpenShell - the isolation layer that would mount through it
  • agent-sandbox - the Kubernetes runtime that could provision the same way
  • worktrunk - the local worktree workflow for the same problem at human scale

References
#