Cloudflare published detailed figures from its internal AI engineering rollout — and the most-cited number, a near-doubling of weekly merge requests, is also the one that requires the most careful reading.
What follows is analysis of figures a company published about itself. It is not investment advice, and it predicts nothing about adoption, engineering output or the tools market.
What Happened
On April 20, 2026, Cloudflare published a detailed post on its engineering blog describing the rollout of its internal AI coding stack. The figures — confirmed against the blog itself — cover eleven months of deployment across a company of roughly 6,100 employees. Tools named include OpenCode and Windsurf, frontier models from OpenAI, Anthropic, and Google, and Workers AI for open-source inference including Kimi K2.5 on security workloads. This is a company reporting publicly on its own internal operations; the numbers below are Cloudflare’s own.
The adoption curve is the cleanest part of the data. Cloudflare reports 3,683 active users against a stated ~6,100 employee base — which works out to about 60.4%, matching the 60% company-wide figure the post states. The parts agree with the whole, which is rarer than it sounds: most adoption percentages published without their numerator and denominator are unauditable, and most never supply the inputs needed to check them. This one does, and the check clears.
The headline figure is the merge-request count. The four-week rolling average of merge requests climbed from roughly 5,600 per week to over 8,700, with one week reaching 10,952 — described by Cloudflare as a level the company has “never seen” in a quarter-to-quarter increase. Cloudflare reports this as a count. It does not claim a productivity gain, and nothing below suggests otherwise.

The Structural Read
The Harness Theory lens is the right one here. Cloudflare is not building foundational AI models — it is harnessing them across its existing engineering organization, deploying frontier models from OpenAI, Anthropic, and Google alongside its own Workers AI infrastructure for open-source inference. The question Harness Theory asks is not “did you adopt AI?” but “what does the adoption actually change in the system?” And here, the data is carefully bounded in ways worth unpacking.
A merge request is an event in a version-control system of record. It increments when a change is necessary, when it is redundant, and when it is reverted the following week — and nothing in the count distinguishes those cases. That is precisely why the count is easy to produce: it was already instrumented. The measurable thing and the meaningful thing came apart, and the measurable one won because it required no additional inference. Throughput and value are different quantities, and only one of them is cheap to count.
The direction of the gap is not knowable from the figure either. A near-doubling of merge requests is consistent with substantially more work being completed. It is equally consistent with the same work arriving in smaller, more granular pieces — a well-documented effect of AI-assisted authoring, where the natural unit of a change shrinks. Both produce the same chart. Neither reading is the correct one without additional data that the post does not contain.
Cloudflare Engineering Blog — April 20, 2026
“We’ve never seen a quarter-to-quarter increase in merge requests to this degree.”
Structural Property
The Constraint Relocation Problem
When one stage of a pipeline accelerates, the binding constraint relocates to the next stage that did not. Authoring is the stage AI-assisted coding tools directly address. Whether the review stage — which sits immediately downstream — kept pace with a near-doubled authoring throughput is simply not known from what Cloudflare published: no review-latency figure, no reviewer headcount, and no merge-request size distribution appear in the post. That is an absence in the data, not an asserted problem. It is also the exact question any organization running a similar deployment should be asking about its own pipeline.
The adoption split — 93% across R&D against 60% company-wide — is informative in its own right. It locates the penetration in the function where the tooling fits rather than collapsing both populations into a single blended number. That decision reflects either disciplined reporting or organizational reality, probably both. Either way, the distinction matters: a 60% company-wide figure that included a 93% R&D spike and a much lower non-R&D base would mean something quite different from a uniform 60%. Cloudflare shows you the seam.
Adoption Breakdown — Cloudflare, April 2026
3,683 active users of ~6,100 employees. The parts agree with the whole — numerator and denominator both published.
Three Implications
IMPLICATION 1 — THE ADOPTION AUDIT STANDARD
Cloudflare’s adoption disclosure sets a quiet benchmark. Publishing a percentage with its numerator and denominator — 3,683 of ~6,100, yielding 60.4% — makes the figure auditable in one division. Most enterprise AI adoption claims cannot survive that check because they never supply the inputs. Organizations evaluating vendor or peer claims should ask for both numbers before citing either.
IMPLICATION 2 — THROUGHPUT METRICS NEED A DOWNSTREAM COMPANION
Any organization reporting an AI-driven increase in authoring throughput — merge requests, pull requests, tickets closed — is measuring the stage that got faster. The useful companion metric is what happened to the stage immediately downstream: review latency, defect rate, revert frequency. Without it, the throughput figure is real but incomplete. That is not a criticism of Cloudflare, which reported accurately; it is a design consideration for any team building its own measurement framework.
IMPLICATION 3 — TOKEN VOLUME IS AN INPUT MEASURE, NOT AN OUTPUT MEASURE
241 billion tokens through AI Gateway and 52 billion on Workers AI over thirty days are notable figures for understanding infrastructure load and platform utilization. They are consumption measures — they record what was spent, not what was obtained. Treating token volume as a proxy for value or productivity adds an inference the data does not support. The same applies to request counts. Both are useful for capacity planning; neither is a substitute for outcome measurement.
91,000+ executives read Business Engineer for the AI strategy frameworks cited by ChatGPT, Claude, and Perplexity.
Every figure above is Cloudflare’s own, published on its engineering blog on 20 April 2026. These are a company’s numbers about itself. Cloudflare reports a merge-request count and does not claim a productivity gain, and nothing above suggests it overclaimed or implied more than it wrote. The distinction drawn above is about what a count of changes can and cannot measure, not about how the company described its own results. No defect, incident, rollback or revert rate, no review latency or reviewer headcount, and no merge-request size or complexity data is published alongside the figures, so whether review kept pace with authoring is not knowable from what is available. That is an absence in the published data and not a problem asserted here. Merge requests are not converted into productivity, value, velocity or time saved anywhere above, and the token and request counts are not divided by users, by days or by each other — no per-user or per-day figure is published and the distribution is unknown. The split between agent-authored and human-authored changes, any revenue, cost or time-saved figure, any comparison with another company and any account of what the tokens were spent on are not established and do not appear. Nothing above predicts adoption, engineering output or the tools market, and nothing above is investment advice.
Sources: blog.cloudflare.com · u1









