Videos BInpv7lGp1o
Your Agent Didn't Fail. Your Harness Did. — Vinoth Govindarajan, OpenAI
Scene timeline
46 shot(s).
keyframes kept every frame deduplicated
What was stored
- cues
- 259
- whisperx 259
- chunks
- 32
- from 259 cues
- keyframes
- 37
- kept of 46 captured
- frames with text
- 37
- 704 lines read
- chapters
- 11
- from the source metadata
- keyframe bytes
- 4.8 MB
- word timings on 259 cues
Provenance
| stage | state | model | started | took |
|---|---|---|---|---|
fetch |
done | — | 2026-08-09 22:03 | 0s |
stt |
done | — | 2026-08-09 05:28 | 23s |
chunk |
done | — | 2026-08-09 05:29 | 0s |
text_embed |
done | — | 2026-08-10 19:38 | 1s |
keyframe |
done | — | 2026-08-09 05:29 | 2m 19s |
ocr |
done | — | 2026-08-09 05:31 | 14s |
frame_embed |
done | — | 2026-08-10 19:38 | 6s |
Frames, and what the machine read
-
- AlEngineer0.96
- World's Fair0.97
-
- AlEngineer0.95
- World's Fair0.99
-
- LAB & PLATINUM SPONSORS0.99
- Amazon AGI Lab0.98
- ANTHROP\C1.00
- Google DeepMind1.00
- MINIMAX0.93
- OpenAI0.92
- Akamai1.00
- arize0.92
- aws1.00
- Braintrust bright data0.98
- B1.00
- Browserbase1.00
- docker1.00
- :neo4j0.90
- ORACLE1.00
- PayPal1.00
- qodo1.00
- reducto1.00
- Sonar1.00
- Makers of1.00
- togetherai1.00
- Unblocked1.00
- WorkOS1.00
- SonarQube1.00
-
- AlEngineer0.99
- World's Fair0.99
-
- OpenAI0.93
- AlEngineer0.99
- World's Fair0.96
- Your Agent Didn't Fail.1.00
- Your Harness Did.1.00
- PRESENTED·BY0.96
- Microsoft1.00
- Vinoth Govindarajan1.00
- Infrastructure1.00
- Engineering the future of Al0.99
- World's Fair0.97
-
- AlEngineer0.99
- World's Fair0.97
- PRESENTED·BY0.96
- The user saw the reply.1.00
- Microsoft1.00
- The system forgot it happened.0.99
- OpenAl0.97
- Engineering the future of Al0.99
- World'sFair1.00
-
- AlEngineer0.99
- Opening incident0.98
- World's Fair0.96
- PRESENTED BY0.97
- Support Assistant1.00
- Bot1.00
- Backend / memory store0.97
- A0.95
- NOT PERSISTED1.00
- Microsoft1.00
- Conversation: 9f3c2a1e1.00
- Remember the customer1.00
- asked for a refund on0.99
- order 4819.1.00
- User ID1.00
- u_7b9d2f4a1.00
- Session ID1.00
- sess_01HV9ZK31.00
- MISSING1.00
- Got it. I've recorded that1.00
- No record found.1.00
- and I'll remember it for0.99
- Last Turn1.00
- 11:31:021.00
- Nothing was persisted.1.00
- the next turn.1.00
- Durable Record1.00
- OpenAl0.95
- TRACK 1· JUNE 30, 20260.97
- World's Fair0.98
- Claws & Personal Agents1.00
-
- AlEngineer0.99
- Why this matters1.00
- World's Fair0.98
- PRESENTED BY0.95
- Microsoft1.00
- A crash gives1.00
- Silent success1.00
- 70.87
- Future context1.00
- you a boundary1.00
- gives you a lie1.00
- has a hole0.97
- Failure is explicit1.00
- The reply looks fine0.98
- Nothing looked broken1.00
- OpenAl0.97
- World's Fair0.96
- TRACK 1· JUNE 30, 20260.97
- Claws & Personal Agents0.99
-
- Hi, I'm Vinoth0.97
- AlEngineer0.99
- World's Fair0.97
- I bring a distributed-systems lens to agent infrastructure1.00
- PRESENTED BY0.96
- OpenAl0.95
- Apple, Uber1.00
- The Agent Stack0.99
- Microsoft1.00
- Core data1.00
- Previously, building1.00
- Systems writing1.00
- and Al infrastructure1.00
- distributed systems1.00
- on production agents1.00
- OpenAl0.96
- World's Fair0.97
- TRACK 1· JUNE 30,20260.95
- Claws & Personal Agents0.98
-
- AlEngineer0.99
- Three things to remember1.00
- Own the state0.98
- World'sFair1.00
- Who owns the truth?0.97
- Every failure mode in this talk reduces0.99
- to one of these boundaries1.00
- Order the mutation1.00
- Who committed first?1.00
- PRESENTED BY0.95
- Prove the action1.00
- Microsoft1.00
- Who can show what happened?1.00
- OpenAl0.96
- World's Fair0.94
- TRACK 1· JUNE 30, 20260.97
- Claws & Personal Agents0.99
-
- The model is the engine0.97
- AlEngineer0.99
- World'sFair1.00
- The harness is everything that lets the engine move safely in the real world0.99
- SPEED1.00
- LIMIT1.00
- 551.00
- Model1.00
- Dashboard1.00
- Black box1.00
- Observability1.00
- Run receipt1.00
- PRESENTED·BY0.96
- Microsoft1.00
- Brakes1.00
- Steering1.00
- Transmission1.00
- Road rules0.99
- Approval boundaries1.00
- State ownership1.00
- Tool routing1.00
- Policy1.00
- World's Fair1.00
- TRACK 1· JUNE 30,20260.93
- Claws & Personal Agents0.96
-
- Context is assembled, not remembered.1.00
- AlEngineer0.99
- World's Fair0.98
- Session transcript1.00
- 口1.00
- PRESENTED·BY0.95
- recent events1.00
- Working1.00
- Model1.00
- Response /0.98
- Persist new events1.00
- Session state1.00
- set1.00
- call1.00
- tool calls1.00
- + update receipt0.99
- Microsoft1.00
- scratchpad + metadata1.00
- Memory/summaries1.00
- A concise, relevant0.99
- Generate1.00
- Model output1.00
- Durably store0.99
- durable context1.00
- bundle of context0.96
- output1.00
- and actions1.00
- and advance1.00
- for this turn1.00
- the session1.00
- Policy + tools0.99
- available capabilities1.00
- The model only sees the working set the harness supplies0.99
- OpenAl0.97
- TRACK 1· JUNE 30,20260.95
- World's Fair1.00
- Claws & Personal Agents1.00
-
- Why old failures get sharper in agents?1.00
- AlEngineer0.97
- World'sFair1.00
- Familiar reliability bugs sit around a probabilistic planner1.00
- PRESENTED·BY0.95
- {f}0.98
- Dynamic1.00
- Probabilistic1.00
- More event0.98
- More action1.00
- Microsoft1.00
- plans1.00
- output1.00
- sources1.00
- surfaces1.00
- the next step is1.00
- the path may differ0.97
- users, tools, timers,0.98
- messages, files, APls,0.98
- chosen at runtime1.00
- between turns1.00
- webhooks, subagents0.98
- browsers, workflows0.97
- The agent setting makes them easier to trigger and harder to explain1.00
- OpenAl0.97
- TRACK 1·JUNE 30,20260.97
- World's Fair0.99
- Claws & Personal Agents0.99
-
- AlEngineer0.99
- World'sFair1.00
- FAILURE 1: STATE0.96
- PRESENTED·BY0.98
- Delivered is not remembered1.00
- Microsoft1.00
- The user sees success. The source of truth cannot replay it.1.00
- OpenAl0.96
- TRACK 1· JUNE 30,20260.95
- World'sFair1.00
- Claws & Personal Agents0.99
-
- AlEngineer0.99
- 目0.90
- FAILURE 1: STATE1.00
- World's Fair0.96
- The reply worked.1.00
- Replay broke.1.00
- openclaw / openclaw0.95
- Code1.00
- Issues 3.3k1.00
- Pull requests0.99
- 3.2k1.00
- Agents1.00
- Actions1.00
- More1.00
- PRESENTED BY0.96
- New issue0.97
- Microsoft1.00
- "Your turn was submitted."0.99
- User sees success1.00
- claude-cli backend skips runContextEngineMaintenance0.99
- — LCM/transcript persistence broken for all CLl-routed0.98
- Durable record1.00
- turns #815581.00
- Missing1.00
- ©Closed0.94
- #818690.99
- Delivery is not durable state.1.00
- rasimme opened on May 131.00
- Source: OpenClaw #815580.98
- OpenAl0.97
- TRACK 1· JUNE 30,20260.95
- World's Fair1.00
- Claws & Personal Agents1.00
-
- AlEngineer0.96
- 目0.96
- FAILURE1: STATE0.98
- World's Fair0.99
- By owner, I mean the system of record.0.99
- Storage tells you where bytes live. Ownership tells you who can reconstruct reality.1.00
- PRESENTED·BY0.95
- Microsoft1.00
- 日0.98
- Calendar event1.00
- Support status1.00
- Code change1.00
- Conversation turn0.97
- Calendar system1.00
- Ticketing system1.00
- Repository/workspace1.00
- Session transcript0.99
- OpenAl0.97
- TRACK 1· JUNE 30,20260.95
- World's Fair0.99
- Claws & Personal Agents0.98
-
- AlEngineer0.99
- 目0.96
- FAILURE 1: STATE0.97
- World's Fair0.97
- Reliable memory has three moves1.00
- If no owner can replay the fact, the system never truly remembered it0.99
- PRESENTED BY0.97
- Microsoft1.00
- 010.97
- 020.99
- 031.00
- Persist the turn1.00
- Name the owner1.00
- Make replay possible1.00
- Write every turn to durable1.00
- Define and document the1.00
- Capture inputs and events1.00
- storage as the source of truth0.99
- owner of record for the state0.99
- so state can be rebuilt0.99
- OpenAl0.98
- TRACK 1· JUNE 30,20260.94
- World's Fair0.99
- Claws & Personal Agents0.99
-
- AlEngineer0.99
- World'sFair1.00
- FAILURE 2: ORDER0.96
- PRESENTED·BY0.97
- Last writer wins is not1.00
- Microsoft1.00
- a consistency model1.00
- Two correct writes can still produce one wrong outcome0.99
- OpenAl0.96
- TRACK 1· JUNE 30,20260.96
- World'sFair1.00
- Claws & Personal Agents1.00
-
- AlEngineer0.99
- FAILURE 2: ORDER0.97
- World'sFair1.00
- openclaw / openclaw0.99
- Two writers.1.00
- Code1.00
- Issues 3.3k1.00
- Pull requests 3.2k0.97
- Agents1.00
- Actions1.00
- More1.00
- One stale snapshot.1.00
- New issue1.00
- C0.54
- PRESENTED BY0.94
- [Bug]: commitments store has no write serialization —0.99
- concurrent markCommitmentsStatus/1.00
- Microsoft1.00
- Load → mutate → save0.98
- markCommitmentsAttempted calls silently lose0.98
- dismiss/sent/attempt updates (data-loss class; can re-deliver1.00
- Two callers load the same old state.1.00
- Each changes a different record.0.99
- an already-sent commitment) #811450.99
- The second save silently erases the first.0.99
- Closed0.99
- 1#863260.93
- Missing boundary: one ordered commit path.0.99
- Labels1.00
- YB0y opened on May 120.99
- Contributor1.00
- Source: OpenClaw #81145 · PR #863260.97
- OpenAl0.97
- TRACK 1· JUNE 30, 20260.94
- World's Fair1.00
- Claws & Personal Agents0.99
-
- FAILURE 2: ORDER0.97
- AlEngineer0.99
- World'sFair1.00
- Serialize the mutation,1.00
- not the whole system1.00
- Serialize writes, detect stuck lanes,0.98
- PRESENTED BY0.95
- and acknowledges after commit1.00
- Session A1.00
- One active1.00
- Microsoft1.00
- lane1.00
- writer1.00
- Incoming1.00
- Global1.00
- →Session B0.99
- →One active0.97
- →State0.99
- events1.00
- throttle1.00
- lane1.00
- writer1.00
- commits1.00
- System-wide cap1.00
- Tools1.00
- Audit1.00
- Session C0.98
- One active1.00
- lane1.00
- writer1.00
- OpenAl0.97
- TRACK 1· JUNE 30, 20260.97
- World'sFair1.00
- Claws & Personal Agents0.99
Transcript
259 cues· 2,444 words· 14,109 chars
- 0:13 Thank you for choosing to spend this session with me.
- 0:16 My goal today is simple.
- 0:19 I want to convince you all that most of the agent failures are not model failures.
- 0:27 Those are harness failures.
- 0:29 So let's start with one production incident.
- 0:32 The user saw the reply.
- 0:34 The system forgot it happened.
- 0:36 This is the failure shape I want to start with.
- 0:39 Not a hallucination, not a crash, not a bad answer.
- 0:43 The user-visible edge looked healthy, while the durable record had a hole.
- 0:50 In this example, the user asked the agent to remember a refund for a customer.
- 0:58 The assistant said it recorded the fact for the next turn.
- 1:02 The interface looked normal, no red screen, no obvious failures.
- 1:06 But the next turn cannot reconcept the fact.
- 1:09 The user experienced success.
- 1:11 The system inherited incomplete reality.
- 1:16 Why this matters?
- 1:18 The crash is annoying, but at least it gives you a boundary.
- 1:22 You know something stopped.
- 1:24 You usually see an error.
- 1:26 You can often start from last known good point.
- 1:30 Silent success gives you a lie.
- 1:32 Delivery can succeed while the persistent fails.
- 1:36 The user has no reason to doubt the reply.
- 1:40 The operator has no obvious alarm.
- 1:43 The next turn can still sound confident because the model is coherent, but it is coherent over a broken history.
- 1:53 That is why agent reliability matters, and agent reliability cannot stop at model quality.
- 2:01 Hi, I'm Vinod.
- 2:04 core data and AI infrastructure at OpenAI.
- 2:07 Before that, I worked on distributed systems at Apple and Uber.
- 2:12 Outside of the work, I write the agent stack, where I try to explain how the production, AI, and data systems work under the hood.
- 2:20 I'm a daughter and mentor of OpenClaw, and this is not an OpenClaw product pitch.
- 2:25 This is a pure system design talk.
- 2:27 I'm using OpenClaw as a public case study because its issues, code, docs,
- 2:33 makes the harness around the agent unusually visible.
- 2:39 Here's the production contract for the talk.
- 2:41 A model proposes, the harness commits, and the receipts proceed.
- 2:46 The model may suggest a message, a tool, an edit, or a command, but model is not the production boundary.
- 2:54 The harness owns the state transition, the authority check, the ordered commit, and the receipt is the evidence that survives the turn.
- 3:02 OpenClaw is the case study, and the contract is the takeaway.
- 3:07 If you remember only three things from this talk, make it these.
- 3:10 Own the state, order the mutation, and prove the action.
- 3:16 A fact needs only one owner and one replay path.
- 3:19 Shared mutable state needs one ordered commit path.
- 3:22 And transcript is not the proof.
- 3:25 A transcript tells you what the agent said.
- 3:27 A receipt tells you what the system allowed, attempted, executed, and what the user visible edge confirmed.
- 3:37 To create a simple mental model, I created this car analogy of the harness.
- 3:42 The model is the engine.
- 3:44 It matters a lot.
loading
Chapters
- 0:00 Introduction: harness failures vs model failures
- 1:32 Delivery can succeed while the truth fails
- 2:46 A model proposes, the harness commits, the receipt proves
- 4:14 How events enter and state is rehydrated
- 5:48 Idempotency, locks, and ordering
- 7:22 Ownership: who persists the turn
- 8:28 Single writer lanes and overlapping writes
- 10:09 Time, deadlines, and cancellation
- 11:23 Approval drift and bounded authority
- 13:05 Internal success vs user-visible proof
- 14:08 The run receipt audit: five questions