Collective Intelligence NetworkResearch & design project
← All notes Agent training

Training agents in simulated worlds

Before an agent is trusted to act for a real person, it should have lived through thousands of hard situations where nobody real could get hurt. That is what large simulations are for, and also where they stop.

5 October 2026 · 7…

5 October 2026 · 7 min read · Our current thinking, open to correction

LEGACY FAILURE: UNTESTED LIVE DEPLOYMENT Trial-and-Error on Real People & Commons Rewarding Surface Confidence & Sycophancy Agents collude, deplete commons (GovSim), or hide errors Simulation Treated as Consent Synthetic polls used to bypass real human pilots CIN MECHANISM: SEALED SANDBOX + VERIFIABLE RL Air-Gapped Adversarial Worlds & Human Pilot Gate 4 Code-Checked Verifiable Rewards Log transparency · Truthful claims · Commons durability · Safety Screens Ideas Only · Never Votes or Decides Multi-model ensemble disagreement reported; real people decide
Simulations expose collusion, commons depletion, and reward gaming in an air-gapped world using synthetic profiles, screening candidates before real humans decide in a live pilot.
Interactive D3.js v7 Mechanism & Impact Explorer
Initializing D3.js v7 Mechanism & Impact Explorer (simulations)...

Why train agents this way

An agent that is loyal…

An agent that is loyal on its own might still collude, hoard resources, or mislead when thousands interact; a simulated world lets agents fail safely where no real person can be harmed.

Inspect technical derivation & primary-source evidence ▾

You cannot find that out safely by trial and error with real people. A mistake in a real negotiation, a real benefit claim or a real medical choice lands on a real person. A simulated world lets agents fail where failure is cheap. It lets us watch what they do when the rules are tight, when other agents are hostile, and when cheating would pay.

There is a second reason. Agents are getting more capable quickly. If each new generation is deployed straight to people, we learn about its failures from harm. A sandbox gives us somewhere to look first.

What the sandbox looks like

Inside an air-gapped world built…

Inside an air-gapped world built from synthetic profiles, compute-bounded agents negotiate, defend against scams, and manage shared resources without any connection to real accounts.

Inspect technical derivation & primary-source evidence ▾

Inside the world we set problems that real life will throw at them: a shared resource that runs out if everyone takes too much; a scam agent offering a deal that looks good and isn't; a public rule that helps most people but harms a few; a request from another agent to share information its person never agreed to share. The sandbox is cut off from the outside. Nothing an agent does inside it reaches a real service, a real account or a real person.

Others have built useful pieces of this already. Concordia, from Google DeepMind, is an open framework for building societies of language-model agents that act in a simulated world run by a game master. GovSim put language-model agents in charge of a shared resource and found that most failed to sustain it over time, which is exactly the kind of failure we would want to catch early. Work on virtual agent economies argues for building deliberate, permeable-or-sealed sandbox economies for agents instead of letting one emerge by accident.

What we would reward

Rather than rewarding confident-sounding prose…

Rather than rewarding confident-sounding prose, we use reinforcement learning from verifiable rewards checked deterministically against the sandbox execution log: transparency, honesty, coordination, and keeping people safe.

Inspect technical derivation & primary-source evidence ▾
  • Transparency. Did the agent's logged reasons match what it actually did? Did it disclose what it was asked to disclose?
  • Honest communication. Were its statements to its person and to other agents true, according to the world's own record?
  • Coordination. Did the group reach outcomes that were good for the people involved, such as a commons that lasted or a deal that held, without any agent breaking its limits?
  • Keeping people safe. Did the simulated people come through unharmed: not defrauded, not manipulated, not left worse off by a choice made in their name?

In our design, a personal agent pays a cost when its person is harmed, so it has a lasting stake in that person doing well. The sandbox is where we can test whether that stake changes behaviour, and whether agents find ways to dodge it.

Sandbox world agents act Checks score the record Reward or penalty verifiable only agents update findings Screen ideas drop or keep Real pilot people decide Real decision by simulation alone never
The training loop runs entirely inside the sandbox. What it teaches us can help choose which ideas are worth a real pilot, where real people decide.

Screening, not deciding—and defences we build in

A simulation can recommend dropping…

A simulation can recommend dropping a bad policy or running a small pilot, but simulated people never vote and never replace real human consent.

Inspect technical derivation & primary-source evidence ▾

Fidelity is a real question, not a solved one. Researchers built agents grounded in interviews with more than a thousand real people that reproduced many of those people's survey answers with notable accuracy. Other work has found that simulated groups tend to flatten real diversity and shift with small changes in wording or model version.

Defences & next steps

Several independent simulations built on different models and rules are run on the same question, reporting disagreement as uncertainty rather than averaging it away. Checks and rewards are rotated by independent teams, and every sandbox lesson must be confirmed against small real pilots.