Training agents in simulated worlds
Before an agent is trusted to act for a real person, it should have lived through thousands of hard situations where nobody real could get hurt. That is what large simulations are for, and also where they stop.
5 October 2026 · 7…
Why train agents this way
An agent that is loyal…
An agent that is loyal on its own might still collude, hoard resources, or mislead when thousands interact; a simulated world lets agents fail safely where no real person can be harmed.
Inspect technical derivation & primary-source evidence ▾
You cannot find that out safely by trial and error with real people. A mistake in a real negotiation, a real benefit claim or a real medical choice lands on a real person. A simulated world lets agents fail where failure is cheap. It lets us watch what they do when the rules are tight, when other agents are hostile, and when cheating would pay.
There is a second reason. Agents are getting more capable quickly. If each new generation is deployed straight to people, we learn about its failures from harm. A sandbox gives us somewhere to look first.
What the sandbox looks like
Inside an air-gapped world built…
Inside an air-gapped world built from synthetic profiles, compute-bounded agents negotiate, defend against scams, and manage shared resources without any connection to real accounts.
Inspect technical derivation & primary-source evidence ▾
Inside the world we set problems that real life will throw at them: a shared resource that runs out if everyone takes too much; a scam agent offering a deal that looks good and isn't; a public rule that helps most people but harms a few; a request from another agent to share information its person never agreed to share. The sandbox is cut off from the outside. Nothing an agent does inside it reaches a real service, a real account or a real person.
Others have built useful pieces of this already. Concordia, from Google DeepMind, is an open framework for building societies of language-model agents that act in a simulated world run by a game master. GovSim put language-model agents in charge of a shared resource and found that most failed to sustain it over time, which is exactly the kind of failure we would want to catch early. Work on virtual agent economies argues for building deliberate, permeable-or-sealed sandbox economies for agents instead of letting one emerge by accident.
What we would reward
Rather than rewarding confident-sounding prose…
Rather than rewarding confident-sounding prose, we use reinforcement learning from verifiable rewards checked deterministically against the sandbox execution log: transparency, honesty, coordination, and keeping people safe.
Inspect technical derivation & primary-source evidence ▾
- Transparency. Did the agent's logged reasons match what it actually did? Did it disclose what it was asked to disclose?
- Honest communication. Were its statements to its person and to other agents true, according to the world's own record?
- Coordination. Did the group reach outcomes that were good for the people involved, such as a commons that lasted or a deal that held, without any agent breaking its limits?
- Keeping people safe. Did the simulated people come through unharmed: not defrauded, not manipulated, not left worse off by a choice made in their name?
In our design, a personal agent pays a cost when its person is harmed, so it has a lasting stake in that person doing well. The sandbox is where we can test whether that stake changes behaviour, and whether agents find ways to dodge it.
Screening, not deciding—and defences we build in
A simulation can recommend dropping…
A simulation can recommend dropping a bad policy or running a small pilot, but simulated people never vote and never replace real human consent.
Inspect technical derivation & primary-source evidence ▾
Fidelity is a real question, not a solved one. Researchers built agents grounded in interviews with more than a thousand real people that reproduced many of those people's survey answers with notable accuracy. Other work has found that simulated groups tend to flatten real diversity and shift with small changes in wording or model version.
Defences & next steps
Several independent simulations built on different models and rules are run on the same question, reporting disagreement as uncertainty rather than averaging it away. Checks and rewards are rotated by independent teams, and every sandbox lesson must be confirmed against small real pilots.