Speaker Notes

Devin’s 80% Moment: Background Agents, 7x PRs, & End of Hand-Held Coding — Walden Yan & Cole Murray

Background coding agents like Devin change software engineering by enabling asynchronous PR generation, robust out-of-the-box security boundaries, and automated memory management, but require strict guardrails to prevent codebase regression.

Latent Space · 1:09:33 · YouTube ↗

Podcast episode · 2 hosts + 2 guests  Advanced · architecture and trade-offs of background agents

Highlights

7 clips · 10 min of 70 min
    • Running the agent brain outside the sandbox prevents accidental secret exfiltration.
    • Out-of-the-box architectures trade state management complexity for a cleaner security boundary.
    • The sandbox acts strictly as the hands operated via tool calls from an external control plane.
    • Automated testing overindexes on basic computer use coordinate clicking instead of orchestration challenges.
    • End-to-end testing requires orchestrating multiple frontier models alongside deep codebase context.
    • Successfully verifying changes often involves handling feature flags, admin states, and multi-service coordination.
    • Most operational memories should be auto-generated through user corrections rather than manual documentation.
    • Retrieval systems must selectively fetch relevant context to avoid exploding the model's context window.
    • Temporal pruning and memory editing are necessary to keep agent instructions accurate over time.
    • Automatic memory generation via agent prompts avoids forcing users to write large docs.
    • Storing too many memories causes context bloat and difficult retrieval problems.
    • Systems need mechanisms to edit or update outdated memories dynamically.
    • Multi-agent swarm communications often devolve into chaotic interactions.
    • Practical day-to-day productivity relies on a single engine breaking down work.
    • Isolating sub-tasks into separate machines prevents state conflicts.
    • Unaudited AI code causes codebases to regress to the pattern of the worst engineer.
    • Scheduled cleanups and strict module boundaries are essential to stop sprawl.
    • Hard contracts between components must be signed off by humans or architects.
    • Standard VM snapshots are slow because they duplicate entire disks.
    • Building incremental file systems stores only the diff relative to base disks.
    • This optimization drastically shaves down agent spin-up and boot times.
    • SRE auto-triage using agents connected to production logs saves immense manual effort.
    • Non-engineers like PMs can prompt agents directly via Slack for quick bug fixes.
    • Expanding agent access shifts code modification outside traditional engineering bounds.

Questions this video answers

8 · every answer cites the moment it was said
01 Should I run the agent inside the sandbox or out of it? 3 sources · 12:09

Running the agent inside the sandbox simplifies state management because everything is localized, but it creates serious security risks because secrets must live in the box where the unpredictable AI can exfiltrate them. An out-of-the-box architecture separates the brain from the machine, using a worker control plane to operate the sandbox via tool calls, which secures your secrets despite adding architectural complexity.

02 Why use full VMs instead of Docker containers for agent sandboxes? 3 sources · 17:35

Full VMs are necessary because Docker containers are not true security boundaries and running applications inside Docker introduces nested configuration issues. Full VMs support complex testing workflows, running full applications, and even nested virtualization for Android emulators. However, you can still use Docker for your infrastructure setup since developers are already familiar with it.

03 How do background agents handle end-to-end application testing? 3 sources · 21:32

Testing is a complex problem-solving challenge rather than simple computer use because it requires orchestrating multiple services, managing correct code versions, and triggering specific features. Agents need full codebase context to understand how to run applications together, handle admin states, or use feature flags. In some cases, systems even require orchestrating different frontier models together to solve these end-to-end tasks.

04 How do you handle agent memory and long-term state persistence? 3 sources · 30:55

Agent memory remains a challenging and largely unsolved retrieval and generation problem because you want the system to learn preferences over time without flooding the context with useless information. Systems like Devin use auto-generated knowledge items where users can quickly approve or reject learned preferences, and agents can update or prune memories when things change. Alternatively, teams explore file-system-based approaches to let agents navigate their own persistent context.

05 Why do production systems prefer single-agent isolation over multi-agent swarms? 2 sources · 39:54

Multi-agent swarms often result in a chaotic world with high conflict potential. Practical usage still relies on a single engine that segregates work so each developer agent operates in isolation on its own machine. While sub-agents work well for scoped tool calls, full multi-agent collaboration creates architectural complexity.

06 Why is a custom file system format necessary for running fast agent virtual machines? 2 sources · 49:39

Standard virtual machines often use network file systems like S3, making operations like grepping extremely slow due to constant network calls. To solve this, developers build incremental file storage formats where saving and rebooting use work proportional only to the file system diff. This drastically shaves down boot-up times.

07 How do you prevent AI-generated code slop and regressions in your codebase? 2 sources · 54:36

AI models often use workaround patterns like getattr or forced backwards compatibility imports to prevent execution failures, leading to codebase regression. Teams can combat this by implementing strict lint rules using tools like Semgrep to catch patterns such as untyped tuples. Regular human code review and architectural boundaries also keep sprawl in check.

08 What are the most common production use cases for cloud coding agents outside of writing code? 2 sources · 1:02:46

Beyond standard feature engineering, cloud agents are heavily used for automated SRE error triage by ingesting production logs and generating initial pull requests. Non-technical teams like product managers and customer support also use them to fix quick bugs or gather full context directly through chat interfaces. Additionally, continuous security reviews serve as primary workflows.

Section-by-section summary

13 parts

Background agents reached true autonomy

Improved model capabilities in late 2025 shifted developer workflows from hand-holding to autonomous background agents. Companies are seeing massive productivity leaps, with automated pull request percentages surging while engineering headcount remains stable.

Open-sourcing background agent infrastructure

Open Inspect was created to solve visibility and context-sharing friction found in chat-based developer workflows. Open-sourcing the project allowed engineering teams to fork and customize the core cloud agent architecture for their specific needs.

Out-of-the-box harness architecture secures secrets

Running the agent control plane outside the sandbox prevents accidental exfiltration of sensitive enterprise credentials. While out-of-the-box architectures introduce state management complexity, they provide a much safer security boundary than in-box setups.

Full VMs outperform containers for testing

Full virtual machines are necessary instead of Docker containers to avoid nested Docker performance issues and security limitations. Setting up a reliable local developer environment naturally translates into a working sandbox setup for background agents.

Testing is orchestration, not just computer use

Automated testing goes far beyond coordinate clicking, requiring complex orchestration across front-end and back-end services. Frontier models must often be combined and supplied with deep codebase context to successfully trigger features and verify changes.

Custom integrations surpass standard MCP limits

While Model Context Protocols provide basic connectivity, enterprise workflows require ad-hoc integrations like custom webhooks and Slack bots. Owning critical integrations allows teams to optimize natural agent communication and prevent notification spam.

Managing agent memory and long-term state

Reliable memory retrieval and generation remains an unsolved challenge for agents without exploding context windows. Future architectures are exploring file-system-like memory structures and autonomous background agents that maintain their own operational docs.

Harness architecture: in-box versus out-of-box

Integrating bot webhooks and central control planes requires careful architectural decisions about where execution harnesses live. While out-of-box harnesses decouple secrets from sandboxes, in-box setups make spawning sub-agents significantly easier.

Single-agent isolation beats chaotic multi-agent swarms

Autonomous agent workflows remain most practical when structured as a single engine delegating isolated tasks rather than chaotic multi-agent swarms. Giving agents separate execution boxes minimizes state conflicts and prevents coordination gridlock.

Preventing codebase decay and AI slop at scale

Unchecked AI-generated code causes codebases to regress by cementing poor patterns across repetitive blocks. Strict module boundaries, scheduled cleanups, and human-enforced contracts help contain sprawl and duplication.

Low-level file system optimizations for fast VM spinning

Virtual machines running network file systems suffer from high latency during file searches and grepping operations. Implementing custom block-level diff file systems allows rapid VM spin-ups by storing only incremental changes.

Anti-patterns in AI-generated code and how to lint them

Language models frequently resort to reward-hacking patterns like attribute checks and backwards-compatibility import hacks to avoid runtime failures. Teams can catch and eliminate these anti-patterns by enforcing specialized linting rules.

Production use cases for background agents beyond engineering

Background agents excel as first responders for SRE alert auto-triage by gathering production log context and opening pull requests. Non-technical roles like product managers can also leverage Slack-integrated agents for bug fixes and basic feature requests.

0:00 / 1:09:33
k play/pause · f fullscreen · m mute
n next · p previous clip · t highlights/full
< > slower/faster · / search what was said
  • Context engineering2× · first 1:42

    A thoughtful approach to building agents that upgrades from basic model wrapping or prompt engineering.

  • Model Context Protocol6× · first 17:03

    A protocol for connecting agents with external systems, tools, and integrations.

  • Block Diff File Storage Format1× · first 50:10

    A custom file system format that incrementally saves changes to speed up VM boot times.

  • Semgrep1× · first 57:10

    A static analysis tool used to lint and catch anti-patterns in codebases.