smolvm vs Together AI Inference Endpoints

“This is the missing layer for anyone running AI agents that execute code. Docker containers have always been too porous for untrusted execution, and smolvm's sub-200ms coldstart means you can spin a fresh VM per agent turn without killing your latency budget. The AGENTS.md is a thoughtful touch — shows the authors actually understand the workflow.”

“The primitive here is straightforward: dedicated compute allocation for open-source model inference with a contractual latency floor — not shared, not burstable, not 'best effort.' The DX bet is that production teams want to stop babysitting p99 latency graphs and just get a number they can put in their SLA doc. That's the right call. The moment of truth is when you point your production traffic at a dedicated endpoint and your tail latencies actually hold — and unlike shared inference pools, dedicated allocation means you're not racing your neighbors for GPU cycles. The weekend alternative (spinning your own vLLM on a reserved A100 instance) is absolutely real, but the SLA contract and the managed ops overhead is what you're paying for here. I'd want to see the actual SLA remediation terms before fully committing, but the core infrastructure bet is sound.”

“At v0.5.18 this is still early software and the docs are sparse. libkrun has its own surface area of bugs, and running microVMs at agent-loop speed on macOS introduces a whole class of Apple Hypervisor Framework edge cases. I'd wait for v1.0 and a production case study before betting real workloads on this.”

“Direct competitors are AWS Bedrock reserved throughput, Azure AI model deployments, and Fireworks AI — all of whom have been selling dedicated inference with latency guarantees for months. The specific scenario where Together breaks down is enterprise procurement: 'contact sales' pricing on the SLA tier means zero self-serve for the teams who need this most, and procurement cycles kill momentum. What kills this in 12 months is not a competitor — it's Llama 4 and Mistral becoming first-class citizens on hyperscaler managed services, at which point Together's open-source model advantage shrinks to a thin margin play. What earns the ship is that sub-100ms as a *contractual* commitment, not a marketing claim, is genuinely differentiated right now — if the remediation terms have teeth, this is real infrastructure.”

“Every autonomous agent that executes code needs a proper sandbox — not a polite request for the agent to be careful. smolvm represents the infrastructure layer that makes truly autonomous code execution safe enough to deploy at scale. This kind of primitive is foundational for the agentic software era.”

“The thesis here is falsifiable: in 2-3 years, production AI applications will be built predominantly on open-source models, and the infrastructure layer that wins will be the one that offers hyperscaler-grade reliability guarantees without hyperscaler lock-in. For that to pay off, open-source model quality has to keep closing the gap with closed frontier models — which it's doing — and enterprises have to accept that running on third-party managed infrastructure for open-source is preferable to self-hosting, which is less certain. The second-order effect that matters: if contractual SLAs normalize for open-source inference, it removes the last credible objection enterprises have to not using GPT-4 or Claude — the 'we need guaranteed uptime and a contract' objection disappears. Together is on-time to this trend, not early, which means execution is everything and first-mover advantage is already gone.”

“For anyone building AI tools that touch code, smolvm means you can let your AI actually run things without fear. That unlocks a whole category of 'show me the output' UX patterns that weren't safe before. Less time explaining sandboxing to users, more time shipping features.”

“The buyer is clear — it's the ML infrastructure lead at a Series B+ company running open-source models in production — but the pricing architecture is not. 'Contact sales' for SLA tiers means Together is pricing this as an enterprise deal when the natural motion of developer-led AI tooling is self-serve with expansion. The moat question is real: Together's defensibility here is operational expertise running open-source models at scale, but that's a people moat, not a product moat. The moment Llama 4 gets native optimized inference on any hyperscaler with an SLA, Together has to compete on price alone. The business survives if they use dedicated endpoints as a wedge into enterprise contracts with broader platform consumption — but I don't see evidence that's the strategy, and a single product with contact-sales pricing is a services business dressed as a SaaS.”