Matt WynneBuilding real things on Cloudflare's edge — an AI retail platform, edge security and agents, documented as they ship.https://blog.mattwynne.solutions/I built an entire retail platform on Cloudflare's edge — here's the maphttps://blog.mattwynne.solutions/blog/01-edge-retail-platform/https://blog.mattwynne.solutions/blog/01-edge-retail-platform/Two Workers, one D1 database, twelve Cloudflare products. The architecture behind the Lumina retail demo, why it is built this way, and what each product actually does in it.Tue, 29 Sep 2026 09:00:00 GMTOversell-proof checkout: D1, anonymous carts and conditional updateshttps://blog.mattwynne.solutions/blog/02-d1-storefront-checkout/https://blog.mattwynne.solutions/blog/02-d1-storefront-checkout/How the Lumina demo does e-commerce on Workers + D1: HttpOnly cookie carts, stock validation at every step, and a conditional UPDATE that makes the checkout race safe — with compensation when a race is lost.Tue, 29 Sep 2026 09:10:00 GMTBot defense with Turnstile: one widget, three forms, honest failurehttps://blog.mattwynne.solutions/blog/03-turnstile-bot-defense/https://blog.mattwynne.solutions/blog/03-turnstile-bot-defense/Turnstile on signup, sign-in and checkout in the Lumina demo — the sitekey/secret split, the re-challenge UX pattern, rate limits behind it, and why test keys make local dev painless.Tue, 29 Sep 2026 09:20:00 GMTSemantic product search: Vectorize embeddings with a SQL safety nethttps://blog.mattwynne.solutions/blog/04-vectorize-semantic-search/https://blog.mattwynne.solutions/blog/04-vectorize-semantic-search/How the Lumina demo answers 'something elegant for a night out' with real products: Workers AI embeddings, a Vectorize index, D1 re-hydration for fresh stock, and an honest SQL fallback.Tue, 29 Sep 2026 09:30:00 GMTAI Gateway: model selection as configuration, not codehttps://blog.mattwynne.solutions/blog/05-ai-gateway-dynamic-routing/https://blog.mattwynne.solutions/blog/05-ai-gateway-dynamic-routing/The Lumina demo's free and paid chat tiers hit one AI Gateway dynamic route that picks the model per request from metadata — with a war story about the day the old mechanism was retired.Tue, 29 Sep 2026 09:40:00 GMTThe AI stylist: an agent loop with its own MCP tool serverhttps://blog.mattwynne.solutions/blog/06-ai-stylist-agent-mcp/https://blog.mattwynne.solutions/blog/06-ai-stylist-agent-mcp/How the Lumina demo's chat bot becomes an agent: an intent heuristic, a bounded tool loop over the MCP protocol, a purpose-built tool Worker, grounded answers with citations — and GenAI spans so you can watch it all in the dashboard.Tue, 29 Sep 2026 09:50:00 GMTGoverning agent tools with the MCP Server Portal (the flagship demo)https://blog.mattwynne.solutions/blog/07-mcp-portal-governance/https://blog.mattwynne.solutions/blog/07-mcp-portal-governance/Toggle a tool off in Cloudflare's MCP Server Portal and watch the AI agent lose the capability live. How the Lumina demo does governed tool access with Access service tokens, portal tool toggles and one control plane.Tue, 29 Sep 2026 10:00:00 GMTRealtime retail with Durable Objects: live viewers, stock broadcasts and atomic reservationshttps://blog.mattwynne.solutions/blog/08-durable-objects-realtime/https://blog.mattwynne.solutions/blog/08-durable-objects-realtime/One Durable Object coordinates WebSockets presence, live availability pushes and checkout reservations with an alarm-backed release — plus the D1-first design that keeps it honest.Tue, 29 Sep 2026 10:10:00 GMTProduct media on R2: validated uploads, immutable caching and AI-generated photoshttps://blog.mattwynne.solutions/blog/09-r2-media-ai-images/https://blog.mattwynne.solutions/blog/09-r2-media-ai-images/The Lumina demo's media pipeline: admin uploads validated by magic bytes, Worker-served images with immutable cache headers, and every catalog photo generated in-Worker by Workers AI.Tue, 29 Sep 2026 10:20:00 GMTProtecting the admin panel: Cloudflare Access SSO — and verifying the JWT inside the Workerhttps://blog.mattwynne.solutions/blog/10-access-admin-jwt/https://blog.mattwynne.solutions/blog/10-access-admin-jwt/How the Lumina demo gates /admin with Access SSO and fully verifies the Cf-Access-Jwt-Assertion in the Worker — including the war story of the authentication bypass that trusting the header's presence caused.Tue, 29 Sep 2026 10:30:00 GMTCustomer sign-in done properly: PBKDF2, D1 sessions — and a WAF rule that knows leaked passwordshttps://blog.mattwynne.solutions/blog/11-customer-login-leaked-credentials/https://blog.mattwynne.solutions/blog/11-customer-login-leaked-credentials/The Lumina demo's customer login: Turnstile-gated, rate-limited, PBKDF2-hashed roster, D1-backed sessions with hash-at-rest and rotation — plus the compromised-credential WAF rule that edge-blocks breached passwords, and the day it proved itself right.Tue, 29 Sep 2026 10:40:00 GMTA layered prompt firewall: edge WAF + AI Gateway Guardrails + DLPhttps://blog.mattwynne.solutions/blog/12-layered-prompt-firewall/https://blog.mattwynne.solutions/blog/12-layered-prompt-firewall/Before the Lumina demo's chat model runs, prompts pass two dashboard-configured screening layers — the zone WAF's AI Security for Apps rules and the AI Gateway's Guardrails + DLP. How the layers divide the work, and the response-side gap only the gateway can cover.Tue, 29 Sep 2026 10:50:00 GMTThe attack lab: proving what the edge blocks — on your own zonehttps://blog.mattwynne.solutions/blog/13-attack-lab-waf-ddos/https://blog.mattwynne.solutions/blog/13-attack-lab-waf-ddos/An admin-gated page that fires scanner probes, SQLi, XSS, path traversal, credential stuffing and a rate-limit burst at the Lumina demo from a real browser — plus a DDoS simulator that showed the managed ruleset catching marker traffic at 300 rps.Tue, 29 Sep 2026 11:00:00 GMTThe agent-ready storefront: one Worker, two audienceshttps://blog.mattwynne.solutions/blog/14-agent-ready-storefront/https://blog.mattwynne.solutions/blog/14-agent-ready-storefront/The Lumina demo serves humans a SPA and AI agents a crawlable information architecture — Content-Signal robots policy, a sitemap generated from D1, llms.txt, an OpenAPI contract, JSON-LD product pages and Markdown negotiation. Plus the crawler-validation story that needed GraphQL forensics.Tue, 29 Sep 2026 11:10:00 GMT