← All AI Engineer talks

AI Engineer World's Fair 2026

Emulated: The data for fully autonomous software engineers and companies

Read the talk

Training agents to own infrastructure beyond the code diff

Reliable infrastructure agents need environments that expose deployment failures, customer context, and cloud operations—not just the source code they must change.

From a talk by Joseph Wang and Sid

Before you start: Familiarity with containers, distributed services, and rolling deployments will help; no reinforcement-learning implementation experience is required.

Why can an agent write the application but struggle with its infrastructure?

What would it take for an agent to operate mission-critical infrastructure with little supervision—and keep making sound architectural decisions over years? That question motivates Emulated, the data lab Joseph Wang and Sid introduce through their backgrounds in network infrastructure, distributed databases, and sandboxes. Longer autonomy requires more than completing a larger programming assignment: it requires understanding the consequences of changing a running system.

The immediate puzzle is the difference between application work and infrastructure reasoning. An agent can be proficient at the application layer while struggling with database mechanisms such as multiversion concurrency control, or MVCC, where mistakes can threaten data integrity. Sid connects this concern to a recent DynamoDB failure. That attribution needs a qualification: if he means the October 2025 disruption, AWS’s incident account identifies a DNS-management race that emptied an endpoint record, rather than database-engine MVCC corruption.

The proposed capability gap is a data gap. Joseph’s premise is that richer, higher-quality data can teach capabilities missing from current models. His stronger assertion—that adding high-quality data never causes capability regression—is a motivating thesis, not a universal guarantee established here. The practical question is what experience an agent needs in order to learn infrastructure ownership.

Black slide with large white text reading “The model capability gap is data gap,” with two presenters visible at the lower left.
The model capability gap is data gap.
0:150:37
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

0:15 · section reference included

Expand the task from a repository to a company

The benchmark landscape provides a starting point: SWE-bench Pro, Terminal-Bench, FrontierCode, and a work named DeepSWE appear in the discussion. Joseph illustrates the prevailing task shape as 50–100 agent turns producing a pull request of a couple thousand lines. This is his characterization, not a measured result across those benchmarks. Nor does repository editing fully describe every named benchmark: Terminal-Bench includes broader terminal workflows, and FrontierCode evaluates mergeability, including scope and quality. The useful distinction is between completing a bounded assignment and owning what happens afterward.

A human team does substantial work outside the patch. Product managers talk to customers to discover what is wrong. Engineers compare approaches, test performance, and remain responsible for the infrastructure over months or years. Emulated’s response is to put the working context of software companies into containerized environments: projects, incidents, and customer conversations become part of what the agent must interpret.

The environment must also expose consequences that source code alone cannot show. Network failures between nodes, data corruption, and clock skew force the agent to reason about distributed behavior. Cluster orchestration introduces sequencing decisions; live traffic makes the operational blast radius of those decisions matter. The task becomes longer and more complex because the agent must manage the system surrounding its change, not merely produce the change itself.

Dark slide with three text columns headed Unspecified, Open-ended, and Complex beneath “How do we close the gap?”
“How do we close the gap?” groups the challenges into Unspecified, Open-ended, and Complex.
2:453:05
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

2:45 · section reference included

Follow an etcd change into a running cluster

The concrete example is an etcd consensus cluster supporting a production service. In the environment diagram, the etcd source code occupies one small part of a larger system. The agent’s assignment extends through the surrounding organizational evidence, deployment machinery, cluster members, and monitoring.

The workflow proceeds through several dependent stages:

  1. Read the operational history. Tickets, projects, and postmortems describe previous failures and customer reactions. Some records are stale, so the agent must incorporate imperfect context when deciding what to change.
  2. Make the change and start a rolling deployment. Producing the code is an intermediate step. Deployment systems can contain conflicts or fail themselves.
  3. Migrate from old hardware to new hardware. Unexpected problems emerge during execution, requiring decisions based on the current system rather than only the initial plan.
  4. Keep the service available. Failing nodes and stale, deprecated nodes coexist with live traffic. The agent must observe and monitor the service throughout the operation, because an unsafe action can affect active users.

This is the infrastructure task end to end: historical context informs a change, and the change must survive deployment into a system that cannot simply stop serving traffic.

Architecture diagram linking a Service Discovery App and etcd gRPC proxy to Live Voters, with adjacent Plant, Promote-Ready Learners, and Stale Member groups; Knowledge Tools, etcd source code, and Prometheus/Grafana complete the diagram.
An etcd environment connects service traffic, cluster members, knowledge tools, source code, and monitoring.
4:354:49
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

4:35 · section reference included

How far can one sandbox go?

The etcd environment runs inside a single-node sandbox, even though it simulates a distributed cluster. It can include flapping nodes that repeatedly become unavailable, lagging learners, live traffic, and the operational problems surrounding a deployment. Requiring multiple deployments instead of one extends the task horizon without changing that basic architecture.

This fits the containerized task model Joseph associates with standard post-training workflows and Harbor. His description of the ecosystem as uniformly single-sandbox is a characterization, not a constraint established for every Harbor environment or training pipeline. The narrower concern is fidelity: deterministic simulation can introduce network failures, but the speakers argue that it does not capture everything involved in building a cloud-scale service.

To see where the boundary appears, imagine building a service at AWS, GCP, or Azure—or an infrastructure product such as Datadog, Vercel, or Supabase. The starting point may be a useful piece of software. Turning it into something customers can reliably provision and operate introduces a different class of work.

6:246:41
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

6:24 · section reference included

Build outward from software to a cloud service

Begin with software that serves one customer well, perhaps on a developer’s machine. For an NLB-like service, that software is a load balancer; for a Lambda-like service, it is a serverless runtime. The next requirement is somewhere to run it. Resource provisioning is the first concrete pressure on the single-node sandbox: how faithfully can that sandbox represent allocating hosts through something like EC2 or Cloud Run?

Provisioning extends beyond a host to VPCs, subnets, and security groups. Customers then need an API through which they can request the service or delete resources they no longer want. Enterprise customers add requirements around throttling, authentication, and authorization, with CloudTrail-style auditability in the AWS example. Each layer adds behavior the agent must understand and maintain; finishing the original software does not finish the service.

Updates introduce the next layer: a deployment component must roll new software out and roll it back when something goes wrong. It must manage versions and make deployments gradual enough to limit blast radius. A correct new version is not sufficient if the process of introducing it disrupts the service.

The surrounding operational machinery continues to grow:

  • Health monitoring: account for network partitions when interpreting the state of the service.
  • Host communication: deliver configuration changes while the system is running.
  • Customer connectivity: manage DNS and certificates so customers can reach their endpoints.
  • Service administration: track resources and potential fraud, then provide admin consoles, telemetry, and billing.

These are connected responsibilities of operating the same product, rather than independent programming exercises. An environment intended to teach ownership needs to make their interactions visible.

8:008:11
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

8:00 · section reference included

Move the environment onto real infrastructure

Beyond a certain level of complexity, the proposed next step is an environment that provisions real infrastructure: a multi-node sandbox with access to actual cloud resources. The distinction is about what the environment can do, not just how many simulated processes it contains.

EnvironmentWhat it exposesBoundary raised in the talk
Single-node simulationCluster behavior, failures, traffic, repeated deploymentsFidelity of cloud provisioning and service operations
Multi-node sandbox with real resourcesActual infrastructure and resource provisioningNew demands on post-training infrastructure

The first can already support substantial operational work. The second is intended to extend the space of tasks into building and managing the infrastructure itself.

Changing the sandbox also changes the post-training pipeline around it. Joseph briefly suggests putting a post-training pipeline inside the sandbox, making model training itself part of the environment and opening possibilities for recursive self-improvement. These are proposed directions; the presentation does not supply a detailed pipeline design or demonstrate a self-improvement result.

10:3610:58
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

10:36 · section reference included

Real resources still leave training constraints

The practical difficulty begins before the agent takes its first meaningful action. Joseph says initializing an entire stack like AWS Lambda can take hours. This concerns full-stack initialization, not an individual function’s cold-start latency, and no specific configuration or timing study is supplied. The engineering question is how an environment with that startup cost fits into a post-training rollout.

Resource cost and efficient management remain additional constraints. Access to real cloud resources also does not eliminate the simulation-to-reality gap: an environment still needs representative live customer traffic, and some failures appear only at sufficient scale. Real machines provide one kind of fidelity; the workloads and operating conditions determine whether the agent encounters the problems it is supposed to learn to handle.

12:0912:20
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

12:09 · section reference included

From infrastructure ownership to broader company workflows

The first audience question asks for Emulated’s primary goal. Joseph frames it as a response to how contrived and low-fidelity many emulations of real work remain. The ambition is to make agents capable of owning complex systems and, eventually, entire companies by giving them much more faithful environments in which to learn. Full-fidelity emulation and company autonomy are the intended destination, not capabilities established by the etcd example.

The next question asks whether this work is confined to infrastructure and DevOps or extends to broader reinforcement-learning environments and digital twins. Joseph acknowledges that many valuable workflows are not infrastructure-related. Starting with infrastructure is a choice of initial domain, for two reasons. First, the founders’ own expertise helps them judge what makes specialized training data realistic and useful.

Second, infrastructure companies often have comparatively clear customer requirements, which makes company simulation easier to specify. In the Modal example, users want a GPU sandbox with low latency and low cost, and they do not want a training run to fail halfway through. Those needs give the environment a clearer problem statement than a company still searching for product-market fit.

Sid closes with the proposed path beyond that initial domain: go deep enough in infrastructure to learn how to construct demanding, realistic environments, then explore which lessons transfer to other kinds of work. The strategy is depth first, followed by broader application; transfer remains something to investigate rather than a demonstrated outcome.

13:2213:26
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

13:22 · section reference included

Resources

From the talk

  • The company's overview of RL environments for production infrastructure engineering.

  • SWE-Bench ProPaper2:45

    A benchmark of complex software engineering tasks drawn from maintained repositories.

  • Cognition's benchmark for code mergeability, including correctness, scope and maintainability.

  • Terminal-based agent benchmarks with task examples spanning engineering, administration and machine learning.

  • Definitions of Harbor tasks, datasets, agents and container environments.

Read the complete timestamped transcript
  1. 0:00

    [upbeat music] So I appreciate the intro.

  2. 0:15

    Uh, my name is Joseph, and this is my co-founder, Sid. Emulated is a data lab focused on increasing the reliability and autonomy of AI agents. And if you've been an AI engineer, and you've watched the talks, seen the tracks, then there's probably one takeaway that all the talks have in common, and it's that we're headed towards a

  3. 0:37

    future where agents are able to perform useful work over longer and longer horizons with little to no supervision. So today, we're gonna answer some of the questions of what this means for the data and model layers.

  4. 0:52

    Uh, we're gonna touch on some pretty cool things, uh, so look out for them, um, like how to simulate a company within a sandbox or sandboxes for multi-node systems and distributed clusters.

  5. 1:04

    Um, and if we have a little bit of time, we'll also go into some of the work that we're doing with post-training pipelines and how these new types of sandboxes are affecting post-training infra as well.

  6. 1:17

    So where Sid and I come from, um, our backgrounds are in network infra, distributed databases, and sandbox infra, and these are all areas where the workloads are mission-critical. Um, we all saw a couple months ago that, uh, when do- something like DynamoDB goes down, so does us-east-one and half the internet. [chuckles]

  7. 1:39

    Um, and working on these systems, we saw a model capability gap when it came to operating and building these systems as scale, [REDACTED:username] scale, and thinking about, uh, the consequences of architecture and sys-system design over the course of years.

  8. 1:55

    Yeah, so it led to a pretty, uh, natural question, right? For such mission-critical services, why is it that my model or my agent is so proficient [REDACTED:username] handling the application layer but is-- struggles when it comes to reasoning through infrastructure complexities?

  9. 2:12

    For example, things like MVCC on a database engine, which can lead to corruption issues, which is one of-- which was one of the roots of the DynamoDB failure a few months ago.

  10. 2:23

    Yeah. So like with everything in NML, uh, the gap in models is usually a gap in data. Models typically are only as good [REDACTED:username]-- as data is. Um, and to really highlight this point, right, model capability has never, uh, regressed whenever you introduce more high-quality data.

  11. 2:45

    Um, so with that being said, what is the data gap then? What does data look like right now, and how is this influencing the model capability gap here? So if you look [REDACTED:username] any of the frontier or recent benchmarks, like SWE-bench Pro, Terminal-Bench, or something like Frontier-Code and DeepSwe,

  12. 3:05

    um, the tasks only operate within the code base. Uh, the agent is given a pretty large, uh, task, uh, and over the course of fifty to one hundred turns produces a couple-thousand-line PR.

  13. 3:22

    Um, but it doesn't do all of the work that a human does. It doesn't do, uh, what a PM does with talking to customers, understanding their problems. What an engineer does with trying out different approaches, performing-- performance testing them, um, and owning the underlying infra for the code base over the course of not just months, but years.

  14. 3:44

    And this is really the gap that we're closing. We've taken software engineering companies, and we've put them into containerized environments. So this includes, uh, include like organizational context, like projects, incidents, customer conversations.

  15. 4:01

    Uh, the agent also has to deal with issues that only appear [REDACTED:username] scale, like network failures between distributed nodes, data corruption, and clock skew. And through all this, we also want the agents to reason about orchestrating through distributed clusters and also thinking about things like operational blast radius while solving live traffic.

  16. 4:21

    And the result is that the tasks that these agents have to complete or we want the agents to learn is that environments are far more complex and long horizon than a simple code diff.

  17. 4:35

    So let's just-- let's bring a picture into the mix because it tends to make things more interesting. Uh, here's an example we've built of an etcd consensus cluster that a typical production service might rely on.

  18. 4:49

    So an early environment, uh, might, uh-- tended to operate and work primarily on that little blue square entitled etcd source code in the bottom right there. But a lot of the fun and the model capability gap that results from it is really in everything that surrounds it.

  19. 5:08

    So you s- you start with the tickets, projects, postmortems. What are the train wrecks? Why did they happen? How did customers feel about them? And oftentimes, those aren't necessarily up to date.

  20. 5:21

    Um, the agent has to incorporate all that when it's reasoning through the actual change that current environments have it make. After it makes that change, uh, you need to kick, kick off rolling deployments.

  21. 5:35

    Those deployment systems can oftentimes be complicated, have conflicts, may not work. Um, and all through that, when you're finally migrating off of-- from old hi-hardware onto new hardware, um, you run into unforeseen problems which you did not sort of-- that, that, that the agent has to reason through in real-time, just like a, a human would, right?

  22. 5:58

    You have, um- Failing nodes. You have stale deprecated nodes. And while all of this is happening, the service can't go down because there is a blast radius to serving live traffic.

  23. 6:12

    You have to observe and monitor your service. All of these components in, in, in the system is really, uh, what sort of exemplifies, like, a full end-to-end infrastructure task.

  24. 6:24

    So what Sid is describing here is an environment in a single-node sandbox where we're simulating, uh, a distributed cluster with multiple nodes, flapping nodes, lagging learners, um, in a single sandbox, and you can get pretty far with this, right?

  25. 6:41

    Like, you can see that there's live traffic, there's a lot of operational issues that a real engineer would have to deal with, and you can make this pretty long horizon by just, say, doing multiple deployments instead of just one.

  26. 6:54

    But really what we're seeing is that this is not enough. Uh, this fits into standard post-training pipelines in the sense that a standard post-training pipeline is kinda boring. Uh, it's kinda homogenous.

  27. 7:06

    You know, everything just runs Harbor. Everything is a single sandbox, containerized. But real infrastructure, uh, doesn't work like this. Uh, this isn't how real companies run, and, uh, even though you can use something like deterministic simulation to simulate network failures, it doesn't represent what you might run into if you're building an AWS scale

  28. 7:31

    service. So I did see, I think, a couple people [REDACTED:username] AWS, somebody had Viceroy open on their laptop. Um, fun times. Um, but let's imagine here that we are all AWS engineers, or GCP engineers, Azure too, no shade, right?

  29. 7:47

    Um, and we are building a cloud service. Um, it can also be some infrastructure service like Datadog, Vercel, Supabase. Uh, all of these services run into the same problems.

  30. 8:00

    You start off with a shiny piece of software, and this piece of software can serve a single customer pretty well. Um, maybe it's running on your machine. If you're working for NLB, this would be a load balancer, right?

  31. 8:11

    If you're working for AWS Lambda, it'd be some sort of serverless runtime. But, uh, it needs to actually run somewhere. So if you're an infrastructure engineer, next step is you get into resource provisioning.

  32. 8:25

    Um, and this is already where the single-node sandbox starts breaking down. How do you provision resources within a single sandbox? You can't exactly simulate something like EC2 or s- Cloud Run, right?

  33. 8:37

    Um, so you get into this host provisioning. Uh, it also includes provisioning of other resources like VPCs, subnets, security groups. Um, and you need to expose this through some sort of API because your customers are gonna wanna do things like, "Oh, give me this shiny piece of software," or, "I don't want it anymore.

  34. 8:57

    It costs too much. I'm going bankrupt. Delete it, please." Um, and so you're gonna need some sort of front-end API. And if you have enterprise-grade customers who really care about quality, then you're gonna have to meet certain bars like throttling, authentication, authorization.

  35. 9:15

    You can't really, like, go without these things, right? Uh, if you're AWS, then that's CloudTrail too. Um, and then beyond this, uh, software is living. People forget this all the time, especially, like, investors, right?

  36. 9:30

    Like, they'll be like, "Oh, you wrote it. You're done." Um, but

  37. 9:34

    software is living, and you probably need some sort of software deployment component as well. Uh, something whenever you have an update to roll out, roll it out, um, and God forbid something goes wrong, roll it back.

  38. 9:48

    Uh, you need to manage all the different versions and make sure deployments are gradual to limit your blast radius. And we're just kind of getting started with this. There's all sorts of things that you need to think about, like health monitoring with awareness for network partitions, uh, and then how do you communicate with your host so you

  39. 10:05

    can change configs on the fly? Um, maybe your customer actually wants to call your endpoint, so you need DNS and cert management. And then, you know, your service grows a bunch.

  40. 10:17

    You need to keep track of all your resources, what's going on, fraud and stuff. Then you need admin consoles, uh, telemetry, billing if you're making money, um, all sorts of things.

  41. 10:29

    And with all of this ... I think there's, like, one more slide for-

  42. 10:32

    Yeah

  43. 10:32

    ... was it scheduling? Yeah. Um ...

  44. 10:36

    I think the point is fairly clear [REDACTED:username] this point. Beyond, beyond a certain threshold, there is a critical mass [REDACTED:username] which sandboxing on a single node, uh, can only get you so far, and that's why we envision the, the future being, going towards a world where environments do provision real infrastructure.

  45. 10:58

    Yeah. So what this is is, um, a multi-node sandbox

  46. 11:04

    with access to real infra, real cloud resources. Uh, we kinda put a cloud in box, so cloud box could be another name for this. Um, and as you can imagine, changing the sandbox type so drastically here affects post-training pipelines as well which, um, I think we might be running a little bit low on time, so we won't

  47. 11:24

    get, like, too much into it. Um, but yeah, like, uh, one really cool thing too is, like, you can put a post-training pipeline in the sandbox, um, and there's some cool stuff with model training and RSI that you can get into there.

  48. 11:38

    Um, so, you know, then this begs the question, uh, this is all cool stuff, Joseph. Uh, thank you, Sid, for speaking. Why are you leaking all of this alpha, right? [laughs]

  49. 11:50

    Why are you, like, telling all your organizational secrets and telling everybody, like, oh, okay, you know, how do you build a system like this? Um, it's because, uh, we're really interested in these challenges here.

  50. 12:02

    We think they're very fun. Uh, um- You know, we think they're really cool. We think that you guys are cool people, uh, or maybe I'm just lying. Who knows?

  51. 12:09

    Uh, and we wanna share these challenges with you, uh, in case you're interested in working on them as well. As you can imagine, there's a lot of different problems that we haven't touched on here.

  52. 12:20

    Like for example, sc- spinning up the entire stack for something like AWS Lambda takes hours. [laughs] Um, how do you fit that into a post-training rollout? Uh, and then there's cost as well.

  53. 12:31

    How do you efficiently manage this? How do you make sure the sim-to-real gap, even with real resources, it still exists, right? You still have to have live customer traffic.

  54. 12:41

    You still have to have, uh, problems that only appear [REDACTED:username] a certain scale. So, you know, if you're a distributed systems engineer, um, you know, if you know this stuff, if you've trained models before, um, if you think that this stuff is cool, uh, then, you know, we'd love to talk.

  55. 12:58

    Uh, we'd love to talk, uh, kinda like see where your opinions are, uh, hear what you've worked on. Maybe that's like, oh, Kubernetes, and you have, like, opinions. Well, everybody has, like, opinions on, like, auto-scaling and rolling deployments and whatever, but, like, really niche opinions, right?

  56. 13:13

    Like [REDACTED:username] CD. Um, yeah, we'd love to talk to you and hear what you have.

  57. 13:21

    Thank you. Yep.

  58. 13:22

    Um, what's your, like, primary goal with Emulated?

  59. 13:26

    Yeah. Um, that touches into why it's called Emulated in the first place, right? Uh, the real world is very, very complex. Um, and how we, as a industry, emulate the real world is incredibly contrived and low fidelity.

  60. 13:41

    So Emulated's goal is really how do you make these agents own systems like this, um, maybe beyond systems, entire companies, by emulating the real world with full fidelity.

  61. 13:56

    Yeah, go ahead.

  62. 13:57

    Next question is, um, are you pr- predominantly focused on, like, infra and, um, DevOps, containers, you know,

  63. 14:08

    um, effectively hardware kind of related stuff? Or are you also looking [REDACTED:username], like, full RL environments, like a digital twin?

  64. 14:19

    You know.

  65. 14:19

    Yeah, of course. Like, the question is, like, you know, infra is really cool. Um, in 2026, all of a sudden infra's come back, and it's very sexy. Everybody wants to work on it, right?

  66. 14:28

    But there's other types of RL environments as well. Um, there is, uh, other workflows that you really wanna capture that aren't necessarily infra related. Uh, so the reason why we're starting with infra is, um, there's a couple.

  67. 14:45

    One-- The first, most important one is it speaks to our background the most. Um, we think that domain expertise is something that informs how high quality your data can be, uh, especially with the boutique nature of data nowadays.

  68. 14:58

    Um, and the second is that when we're simulating full companies, infra is the easiest approach. Uh, if you think about, like, any infra company out there, whether it be Supabase or Modal, uh, or any dev tools company,

  69. 15:12

    the problem statement is pretty clear. Uh, engineers kind of know what they want. If you are working for Modal, you know that your users want a GPU sandbox, very low latency, very low cost.

  70. 15:25

    You don't wanna h- fail halfway through your training run. Um, that's what you care about. So the problem statement becomes much easier, whereas if you are, you know, a company in the YC Summer 2026 batch, you're probably still trying to find product market fit, right?

  71. 15:41

    Yeah. [REDACTED:username] the same time, there's also lessons learned that going really vertical on a single domain like infrastructure do translate into other horizontal domains. So we're also, um, exploring going deep into one and scaling out that way.

  72. 15:59

    All right. Uh, really appreciate it. Uh, appreciate the questions. Um, we'll probably step out, and we can, like, take a couple more, uh, outside just to make sure the next speaker has room.

  73. 16:10

    Um, yeah, uh, thank you guys for listening.

  74. 16:13

    Appreciate it. [audience applauding] [upbeat music]