Agents Need Worlds, Not Just Tools.
Most agent systems can call tools. That is useful. It is also not enough. A tool lets an agent act. A world lets an agent understand what the action changes.
Most agent systems can call tools.
That is useful. It is also not enough.
A tool lets an agent act. A world lets an agent understand what the action changes.
That distinction is starting to matter more. A lot of recent agent work is no longer just asking whether a model can answer a question or complete a task in isolation. It is asking whether an agent can operate inside an environment where actions change state, consequences appear later, and the world pushes back.
That is the shift I care about.
A static task asks:
Can the model produce the right answer?
A world asks a harder question:
Given the current state, the available actions, and the constraints of the environment, can the agent choose an action whose consequences remain good after the world changes?
That is a different standard.
The point is not that every benchmark must become a full simulation. The point is that agents meant to do long-running work need to be tested against consequences, not just completions.
The convergence signal
This is why Qwen-AgentWorld is interesting.
The paper frames a world model as something that predicts environment dynamics from current observations and actions. That is a useful definition because it moves the centre of gravity from “can the agent call a tool?” to “can the agent anticipate what happens after it acts?”
Qwen-AgentWorld is not the only signal. Agent-World, Terminal-World, MobileWorld and related work all point in the same direction: more realistic environments, longer horizons, state transitions, agent skills, external tools, MCP-style interfaces, and evaluation beyond one-shot prompt completion.
There is also a market signal. Patronus AI's recent "digital worlds" positioning for stress-testing agents, and Antimetal's use of "world model" language for coding and infrastructure agents, suggest that the language is moving from research papers into product categories.
I read that less as validation of any one company and more as evidence that the problem shape is becoming obvious:
Agents need environments where mistakes compound, consequences can be observed, and claims can be tested.
That does not mean everyone is building the same thing. A terminal world, a mobile world, a coding-agent infrastructure world, and an enterprise operating world are different substrates.
But they share one important idea: the agent is no longer being judged only on the next answer. It is being judged on what happens after its action enters a stateful environment.
Why organisations need worlds
Most real organisational decisions are not one-shot answers.
Do we cut cost now and risk lower resilience later?
Do we hire ahead of demand or wait until the need is obvious?
Do we prioritise cash, availability, security, compliance, growth, or optionality?
Do we react to a weak signal, or wait for confirmation and risk being late?
These are not just reasoning questions. They are state-transition questions.
The quality of the decision is only partly visible when the decision is made. The rest appears later, after budgets move, after headcount changes, after services degrade or recover, after a scenario shock arrives, after a missed dependency becomes visible, or after a constraint starts to bind.
That is why I think agent-run organisations need simulated worlds.
Not because simulations are perfect. They are not.
But because they make the consequence loop explicit.
A useful organisational world should be able to represent, at minimum:
- roles and authority
- services and dependencies
- teams and ownership
- budgets and constraints
- vendors and regions
- incidents and shocks
- policies and trade-offs
- actions that change state
- outcomes that can be compared with baselines
That is a different object from a chatbot with tools.
It is closer to a decision surface.
Tool use is not world understanding
Tool access is an important step. It lets an agent do things.
But tool access does not automatically answer the harder questions:
- What depends on this service?
- Which team owns the degraded system?
- What is the blast radius of this change?
- Which constraint is violated?
- What second-order effect appears two steps later?
- Did the decision improve the outcome or merely move the risk?
- Can the decision be replayed and compared against a baseline?
A tool can execute an action. A world can show why the action mattered.
That distinction becomes more important as agents move from narrow tasks into workflows with memory, dependencies and consequences.
Deterministic worlds and learned world models are complements
A learned world model and a deterministic simulation kernel solve different parts of the problem.
A learned world model can approximate environment behaviour. It can be used as a planner, predictor, evaluator, or cheap simulator. That is powerful because it can scale beyond direct execution of every possible environment interaction.
A deterministic kernel gives you something different: a source of truth.
Given the same state, same action, same seed, same version, and same rules, it should produce the same outcome. That matters when you want replay, audit, regression testing, and evidence you can inspect.
For the kind of agent simulation I am exploring, the kernel should remain authoritative.
The learned model should not be the thing that mutates the world. It should be a shadow model that tries to predict the world, explain the world, or choose actions inside the world.
That gives a clean pattern:
agent proposes an action
learned model predicts what will happen
kernel executes the actual transition
experiment ledger records the difference
The delta becomes useful.
If a model consistently predicts the wrong consequences, it may not understand the environment. If it predicts the transition well but chooses bad actions, the weakness is policy, not world understanding. If it predicts and chooses well in one substrate but fails after the substrate changes, we learn something about generalisation.
That separation matters.
The transition record is the artefact
The most important artefact in this style of work is not a screenshot or a leaderboard row.
It is the transition record.
A transition record should say, at minimum:
state_t
available_actions_t
action_t
validation_t
resolver_output_t
state_delta_t
observation_t_plus_1
score_delta_t
later_outcome
provenance
The provenance is not decoration. It is what makes the record useful later.
Which world version?
Which scenario?
Which seed?
Which model?
Which prompt or policy?
Which action schema?
Which kernel version?
Which substrate was frozen?
Which claims are safe, and which have been superseded?
Without that, a dataset of agent interactions becomes a pile of anecdotes.
With it, the same run can support evaluation, regression testing, imitation learning, reward modelling, and research claims. Or it can tell you that a claim should be retracted.
The important point is that the record should survive the demo. A useful benchmark is not just something you can watch. It is something you can replay.
Why benchmark first, train later
It is tempting to jump straight to training.
If we can produce state-action-outcome traces, why not fine-tune a model immediately?
The answer is that the world has to be worth learning.
A model trained on an unstable or poorly validated substrate may become very good at imitating today’s mistakes. It may learn a temporary scoring artefact, a broken observation surface, or a calibration quirk. It may look impressive while simply overfitting the current harness.
So the safer sequence is:
1. build the deterministic environment
2. define compact observations and valid actions
3. record transitions with provenance
4. benchmark zero-shot and heuristic policies
5. freeze and validate the substrate
6. then train models against the transition corpus
That is slower than a demo.
But it is the difference between claiming that an agent is smart and showing what it actually understood about the world it acted in.
What this means for Arena
Arena is not trying to be a universal language world model.
The narrower thesis is that agent-run organisations need environments where organisational decisions have consequences: budgets move, services degrade, headcount changes, constraints bind, shocks arrive, and policies interact over time.
That is a different domain from terminal, web, Android, software-engineering, or infrastructure-autofix environments.
The interesting question is not whether an agent can complete a task in isolation. It is whether it can operate through an organisational decision surface over time.
That requires a different kind of world:
- one where agents act through explicit roles and permissions;
- one where observations are bounded;
- one where actions are validated before they affect state;
- one where resolvers, not agents, decide what mutates the world;
- one where outcomes are replayable;
- one where a simple baseline can be compared against an LLM policy on the same substrate.
That is why I keep coming back to the same design principle:
Agents influence the simulation.
Resolvers decide the simulation.
The kernel mutates the simulation.
Audit records explain the simulation.
If that boundary holds, the transition traces become much more valuable.
They are not just logs. They are the evidence layer for agent evaluation.
What this does not claim
This is important.
This post is not claiming that Arena has solved agentic organisations.
It is not claiming that a transition-corpus training dataset has shipped.
It is not claiming that learned world models should replace deterministic simulation kernels.
It is not claiming that every agent benchmark needs a full organisation simulator.
The claim is narrower:
The next useful agent benchmarks will not just ask whether agents can use tools. They will ask whether agents understand the consequences of actions inside structured worlds.
Qwen-AgentWorld is a strong signal in that direction. So are the broader environment-synthesis and agent-world efforts now appearing around terminal agents, mobile agents, MCP-style tools, infrastructure agents and digital-world stress testing.
For Arena, the opportunity is to explore the organisational version of the same broader pattern: deterministic enterprise and economy worlds, replayable transitions, and agents that can be compared against baselines under the same rules.
That does not require claiming that the work is already done.
It requires building the evidence boundary carefully enough that later claims can survive contact with reality.
That is the work.
In the follow-up, I'll show what this looks like in my own prototypes: EADS as the enterprise world model and Arena as the mission gym.
References
- Zuo, Y. et al. "Qwen-AgentWorld: Language World Models for General Agents" (arXiv:2606.24597) · code
- "Agent-World: Scaling Real-World Environment Synthesis for Evolving General Agent Intelligence" (arXiv:2604.18292)
- "Terminal-World: Scaling Terminal-Agent Environments via Agent Skills" (arXiv:2605.20876)
- "MobileWorld: Benchmarking Autonomous Mobile Agents in Agent-User Interactive and MCP-Augmented Environments" (arXiv:2512.19432)
- "Patronus AI lands $50M to build digital worlds that stress-test AI agents", TechCrunch
- Iyer, S. & Roy, T. "Building a Unified Model of Software Systems", Antimetal