SYSTEM Cited by 2 sources

workerd¶

workerd is Cloudflare's open-source JavaScript / WebAssembly runtime — the same runtime that powers Cloudflare Workers in production. Written in C++, built on V8 + Cap'n Proto, built with Bazel.

Role on this wiki¶

Named in Cloudflare's 2026-04-01 EmDash launch post as the open-source runtime under Workers. Cloudflare's claim:

"EmDash is different: it's built to run on serverless platforms, and make the most out of the v8 isolate architecture of Cloudflare's open source runtime workerd."

The key property EmDash depends on: "on an incoming request, the Workers runtime instantly spins up an isolate to execute code and serve a response. It scales back down to zero if there are no requests. And it only bills for CPU time." — i.e. scale-to-zero at the isolate tier rather than the VM or container tier.

Substrate for capability-based sandboxing¶

workerd is the runtime substrate under Dynamic Workers — Cloudflare's per-request-isolate variant. Dynamic Workers' no-ambient- authority posture (globalOutbound: null) is enforced at the workerd boundary, not at a policy layer on top. This is why EmDash can isolate third-party plugins credibly: every plugin gets a fresh workerd isolate, spawned in milliseconds, with capabilities bound from its manifest. See concepts/capability-based-sandbox.

Portability¶

workerd is fully open-source (Apache 2.0) and can be embedded outside Cloudflare — enables customers to run Workers code on their own infrastructure, and third-party products (EmDash is an early example) to ship a "deploys to Workers or any Node.js server" portability story without Cloudflare-specific lock-in.

Modern WebAssembly Exception Handling (2025-06)¶

workerd v1.20250620.0 (2025-06-19) shipped support for the modern variant of the WebAssembly Exception Handling proposal — the exnref-based successor to the legacy variant. This is the Wasm primitive that lets wasm-bindgen compile Rust panics into catchable try / catch_all blocks so Rust-on-Wasm code running as a Rust Worker can recover from a panic without the Wasm instance being poisoned (see concepts/panic-unwind and concepts/sandbox-poisoning). workerd's early shipment of modern EH made it a lead engine in the matrix alongside V8 13.8.1 / Chrome 138 / Firefox 131 / Safari 18.4; the laggard was Node.js 24 LTS, which Cloudflare backported modern EH to so the Rust ecosystem could adopt it as the default.

Seen in¶

sources/2026-04-01-cloudflare-emdash-wordpress-spiritual-successor — canonical wiki instance as EmDash's scale-to-zero + capability-sandbox runtime.
sources/2026-04-22-cloudflare-making-rust-workers-reliable-panic-and-abort-recovery-in-wasm-bindgen — Rust-Workers-reliability instance. workerd v1.20250620.0's modern-EH support is what unblocks concepts/panic-unwind on wasm32-unknown-unknown for production Cloudflare Workers.

systems/cloudflare-workers — the Cloudflare-hosted production deployment of workerd.
systems/v8-javascript-engine — the isolate engine workerd embeds.
systems/dynamic-workers — the per-request-isolate variant layered on workerd.
systems/emdash — a CMS built to run on workerd.
systems/wasm-bindgen — Rust↔JS binding generator whose panic=unwind + abort-recovery machinery depends on workerd's modern-EH support.
systems/workers-rs — Cloudflare's Rust SDK on workerd.
systems/webassembly — runtime substrate.
concepts/scale-to-zero — the runtime economic model workerd enables.
concepts/serverless-compute — the broader model.
concepts/capability-based-sandbox — security posture workerd enforces at the boundary.
concepts/webassembly-exception-handling — the Wasm proposal workerd ships support for.
companies/cloudflare — author.