{"schema_version":"onlylabs.public_signal.v1","title":"Cloudflare (Workers AI) Writing: A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","description":"Cloudflare (Workers AI) writing signal with public source context, captured evidence pages, related signals, and category-scoped analysis context.","url":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a","json_url":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a/signal.json","generated_at":"2026-07-26T18:47:06.391Z","evidence_latest_fetched_at":"2026-07-14T20:03:19.977303+00:00","signal_first_seen_at":"2026-07-14T20:01:57.603947+00:00","org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud","category_label":"Neocloud","dossier_url":"https://onlylabs.fyi/labs/cloudflare","dossier_json_url":"https://onlylabs.fyi/labs/cloudflare/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a","signal_json":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a/signal.json","source":"https://blog.cloudflare.com/dnssec-nta-ede-33/","lab_dossier":"https://onlylabs.fyi/labs/cloudflare","lab_dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis":"https://onlylabs.fyi/analysis/cloudflare","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","category":"https://onlylabs.fyi/neoclouds","category_json":"https://onlylabs.fyi/neoclouds.json","category_feed":"https://onlylabs.fyi/neoclouds/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","topic":"https://onlylabs.fyi/topics/talking","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","data_business":null},"answer_pack":{"answer":"Cloudflare (Workers AI) published A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","signal_desk":"talking","source_context":{"source_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","source_host":"blog.cloudflare.com","occurred_at":"2026-07-03T00:00:00.000Z","first_seen_at":"2026-07-14T20:01:57.603947+00:00","date_source":"page.visible_date","context":null},"context_markers":[{"label":"Lab","value":"Cloudflare (Workers AI)","source":"signal"},{"label":"Signal desk","value":"talking","source":"signal"},{"label":"Source host","value":"blog.cloudflare.com","source":"source"},{"label":"Author","value":"Sebastiaan Neuteboom","source":"source"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/dnssec-nta-ede-33/"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-07-14T20:03:19.977303+00:00"},"data_business":{"matches":false,"lanes":[],"matched_terms":[],"score":null,"reason":null},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a/signal.json","dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","data_radar_json":null,"opportunities_json":null},"analysis_playbook":{"objective":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","evidence_focus":["post title","source URL","captured page text","HN traction","linked model or paper references","publication date"],"extraction_questions":["Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Which writing reframes a recent release, model, hiring wave, or policy stance?","Which posts mention data, evals, infrastructure, safety, or deployment workflows?"],"signal_questions":["What public theme, launch framing, or research direction does this writing signal expose?","Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Do the 6 related writing signals show a repeated pattern?"],"output_fields":["org","theme","public_framing","traction","evidence_url"],"data_business_relevance":"Data-business lane extraction is scoped to frontier labs; for this category, keep conclusions tied to category-specific strategy, source evidence, and follow-up questions.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a/signal.json","required":true},{"label":"source","url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/cloudflare/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","required":true},{"label":"topic_signals_json","url":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","required":false},{"label":"data_radar_json","url":null,"required":false}],"expected_output":["one-paragraph source-grounded interpretation","category-specific implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Cloudflare (Workers AI)'s writing signal \"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed\" for neocloud strategy."},"semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","text":"Cloudflare (Workers AI) published A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"is classified as","object":"writing signal","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed is classified as writing signal."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"belongs to","object":"talking desk","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed belongs to talking desk."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has evidence coverage","object":"1 captured evidence page","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has evidence coverage 1 captured evidence page."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has captured page count","object":"1","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has captured page count 1."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has readable page count","object":"1","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has readable page count 1."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has related signal count","object":"6","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has related signal count 6."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has analysis playbook objective","object":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has analysis playbook objective Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has source host","object":"blog.cloudflare.com","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has source host blog.cloudflare.com."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has lab","object":"Cloudflare (Workers AI)","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has lab Cloudflare (Workers AI)."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has signal desk","object":"talking","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has signal desk talking."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has source host","object":"blog.cloudflare.com","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has source host blog.cloudflare.com."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has author","object":"Sebastiaan Neuteboom","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has author Sebastiaan Neuteboom."}]},"intelligence":{"signal_desk":"talking","answer":"Cloudflare (Workers AI) published A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","text":"Cloudflare (Workers AI) published A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"is classified as","object":"writing signal","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed is classified as writing signal."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"belongs to","object":"talking desk","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed belongs to talking desk."},{"subject":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","predicate":"has evidence coverage","object":"1 captured evidence page","text":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed has evidence coverage 1 captured evidence page."}]},"signal":{"id":"8e784e92-5402-4c7f-a4a4-145b4c70cb2a","url":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a","json_url":"https://onlylabs.fyi/signals/8e784e92-5402-4c7f-a4a4-145b4c70cb2a/signal.json","source_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","title":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","summary":"Cloudflare (Workers AI) published a writing signal. onlylabs watches public writing for research themes, product direction, and model-launch context.","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-03T00:00:00.000Z","first_seen_at":"2026-07-14T20:01:57.603947+00:00","date_source":"page.visible_date","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/dnssec-nta-ede-33/"]},"facets":{},"traction":{"github_stars":null,"hn_points":2,"hn_comments":0,"hn_story_id":"48910259","hf_downloads":null,"hf_likes":null},"data_radar":null},"primary_evidence_page":{"is_primary":true,"source_match":true,"url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","final_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","title":"A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed","http_status":200,"content_type":"text/html","capture_method":"plain","fetched_at":"2026-07-14T20:03:19.977303+00:00","bytes":272964,"raw_path":"1bddb3b0171fce2cc7bda3b524400d7acfe49cca43d8a1ac23270c3da8c5b63d.html","content_hash":"cd4739e27f9bfcc974425a558997bb91a952d93b09660ea5d5cc69aff7940e30","excerpt_chars":1200,"truncated":true,"excerpt":"A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed Sebastiaan Neuteboom 6 min read On July 3, 2026, the Albanian communications authority (AKEP), the operator of the .AL country-code top-level domain (TLD) of Albania, attempted a DNSSEC key rollover. Something went wrong, resulting in DNSSEC validation failures. Any validating DNS resolver receiving these signatures was required by the DNSSEC specification to reject them and return errors to clients. That includes 1.1.1.1 , the public DNS resolver operated by Cloudflare. The .AL TLD is the online home of Albanian government services, banks, and media; it ranks #191 on Cloudflare Radar's TLD ranking . Anyone trying to visit those sites, using a validating resolver, found them unreachable during the incident. The failure had the potential to affect every .AL domain, regardless of where it was hosted or which authoritative nameservers served it. Just two months earlier, a similar incident struck .DE , the TLD of Germany. As we described in our blog post on the incident , our response was to install a..."},"evidence_pages":[],"related_signals":[{"id":"8433910b-07df-406e-a199-545ba526f8c1","url":"https://onlylabs.fyi/signals/8433910b-07df-406e-a199-545ba526f8c1","source_url":"https://blog.cloudflare.com/bgp-origin-attribute/","title":"BGP ORIGIN attribute manipulation and its impact on the Internet","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-24T17:25:28+00:00","first_seen_at":"2026-07-24T20:01:45.082832+00:00","date_source":"rss.item_date"},{"id":"bf597c51-3dff-40f3-9bc2-d58928fa300b","url":"https://onlylabs.fyi/signals/bf597c51-3dff-40f3-9bc2-d58928fa300b","source_url":"https://blog.cloudflare.com/introducing-cache-response-rules/","title":"Introducing Cache Response Rules","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-23T18:40:38+00:00","first_seen_at":"2026-07-23T20:00:53.126521+00:00","date_source":"rss.item_date"},{"id":"97532084-6b5a-4e52-986b-833a10f0906a","url":"https://onlylabs.fyi/signals/97532084-6b5a-4e52-986b-833a10f0906a","source_url":"https://blog.cloudflare.com/2026-world-cup-internet-traffic/","title":"How the 2026 World Cup affected Internet traffic","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-21T12:59:40+00:00","first_seen_at":"2026-07-21T16:01:52.100409+00:00","date_source":"rss.item_date"},{"id":"8784bbc8-bfad-4089-be86-f1f55fea926f","url":"https://onlylabs.fyi/signals/8784bbc8-bfad-4089-be86-f1f55fea926f","source_url":"https://blog.cloudflare.com/internal-dns/","title":"Cloudflare Internal DNS is now generally available","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-20T20:59:31+00:00","first_seen_at":"2026-07-21T00:00:52.007427+00:00","date_source":"rss.item_date"},{"id":"0f6e86f7-8bf1-4b42-ab66-df39a5088bc9","url":"https://onlylabs.fyi/signals/0f6e86f7-8bf1-4b42-ab66-df39a5088bc9","source_url":"https://blog.cloudflare.com/wordpress-vulnerabilities/","title":"Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities ","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-17T21:30:43+00:00","first_seen_at":"2026-07-18T00:01:49.007072+00:00","date_source":"rss.item_date"},{"id":"902add5d-8f38-430a-b717-6fe1230e5bce","url":"https://onlylabs.fyi/signals/902add5d-8f38-430a-b717-6fe1230e5bce","source_url":"https://blog.cloudflare.com/introducing-precursor/","title":"Introducing Precursor: detecting agentic behavior with continuous client-side signals","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-07-13T13:00:00+00:00","first_seen_at":"2026-07-13T16:00:52.208989+00:00","date_source":"rss.item_date"}]}