A self-evolving
computer-use agent
system.
Planner decides the next thought, GUI action, or delegated code task. Grounder turns visual intent into precise interaction. Coder executes bounded work inside the disposable guest. ARM verifies the resulting desktop state and sends evidence-backed feedback into the next episode.
Chrome · task state verified
GIMP · ARM checkpoint
Self-evolution turns one run into a checked feedback loop.
Instead of spending the entire inference budget on independent candidates, ARM checks what actually happened on the desktop and makes the next episode better informed.
Bounded episodes
The Actor works for a fixed number of steps, then yields control for verification.
Evidence-backed checks
ARM evaluates a task checklist against the current GUI and recorded trajectory.
Feedback that changes action
Failed checks become context for the next episode. Success or infeasible ends the loop.
Actions move forward.
Evidence loops back.
The Actor adds the requested Profit formulas and stops because the GUI looks correct. ARM checks the saved workbook, catches the missing save, and returns one concrete instruction: save before finishing.
The workbook starts without the requested result.
Measured across models, environments, and inference budgets.
Two Actor families ↗
View source values
Self-Evolve results ↗
View source values
GUI becomes stronger with code.
Near-BoN performance at roughly one-third the rollouts.
Sequential feedback spends compute after seeing the real outcome, rather than before it.
73.7% success
View chart data and rounding note
The source contains minor annotations such as 469/73.8 and 495/73.7. This page uses the rounded comparison ≈470/73.7.
High recall, with false positives explaining much of the remaining gap.
One control plane.
Disposable workers at scale.
GADE CUA Evolve separates orchestration, model inference, and desktop execution. Batch shards can scale horizontally across runner hosts while each OSWorld task receives an isolated Ubuntu VM, trajectory recorder, and guaranteed cleanup path.
One controlled exit,
not one EIP per worker.
Workers stay on private addresses. Required HTTP(S) traffic crosses a hardened Squid gateway with source ACLs, destination policy, logs, and rate limits.
Squid is egress only; runners reach TCP 5000/9222 directly over the VPC.Shard the queue.
Keep tasks isolated.
External schedulers distribute deterministic batch shards across runner hosts. Each task receives one disposable VM and an independent cleanup boundary.
Capacity follows the lowest ECS, subnet, model-QPS, proxy, and budget quota.Build, verify,
sanitize, then scale.
The guide pins the OSWorld checkout and Ubuntu image, verifies checksums, provisions Coder dependencies, and documents both deployment topologies.
Read the hosted infra guide View Markdown sourceOperator deployment pattern. The pinned OSWorld dependency remains unmodified; private-address lifecycle and proxy policy belong to the infrastructure layer.
Watch the agent act—and ARM decide.
Two real improvement cases from the attached runs: Ubuntu cases are labeled OSWorld; Windows cases are labeled Windows Agent Arena. In both, ARM catches a plausible-looking failure and changes the next episode.