smolvm vs Together AI Serverless Fine-Tuning

“This is the missing layer for anyone running AI agents that execute code. Docker containers have always been too porous for untrusted execution, and smolvm's sub-200ms coldstart means you can spin a fresh VM per agent turn without killing your latency budget. The AGENTS.md is a thoughtful touch — shows the authors actually understand the workflow.”

“The primitive here is clean: managed LoRA fine-tuning as a job queue, with the adapter automatically wired to a serverless inference endpoint on completion. That's a real workflow, not a demo. The DX bet is that developers would rather hand over infrastructure in exchange for less control over training hyperparameters — and for most teams shipping a product-specific classifier or instruction-tuned model, that's the right call. The moment of truth is uploading a JSONL file and hitting train; if that works without CUDA debugging, they've already beaten the weekend alternative. My one gripe: 'one-click deploy' is marketing language for what is actually a reasonable default routing step — call it what it is in the docs and I'm fully in.”

“At v0.5.18 this is still early software and the docs are sparse. libkrun has its own surface area of bugs, and running microVMs at agent-loop speed on macOS introduces a whole class of Apple Hypervisor Framework edge cases. I'd wait for v1.0 and a production case study before betting real workloads on this.”

“Direct competitors are Modal, Replicate, and AWS SageMaker JumpStart — all of which do managed fine-tuning with varying degrees of pain. Together's actual edge is their model catalog and the fact that the inference endpoint uses the same LoRA adapter without a cold-deploy step, which is a genuine workflow improvement over 'train elsewhere, deploy somewhere else.' Where this breaks: teams that need reproducible training runs with custom loss functions, or anyone wanting to fine-tune on proprietary architectures not in Together's catalog. The 12-month killer is Fireworks AI or Groq shipping identical functionality and undercutting on inference price — but until that happens, the integration between training and serving is doing real work here.”

“Every autonomous agent that executes code needs a proper sandbox — not a polite request for the agent to be careful. smolvm represents the infrastructure layer that makes truly autonomous code execution safe enough to deploy at scale. This kind of primitive is foundational for the agentic software era.”

“The thesis this product bets on: by 2027, the majority of production LLM deployments will use fine-tuned open-weight models rather than general-purpose API calls, because task-specific models are cheaper per token at quality parity. That bet is riding the trend of open-weight model quality catching closed-model quality on narrow tasks — and that trend line is real, measurable, and accelerating. The second-order effect that matters is power redistribution: if fine-tuning becomes a 20-minute self-serve operation, model customization stops being a moat for AI-native companies and becomes a commodity expectation. The teams that lose are the ones selling 'we fine-tuned on your data' as a differentiator; the teams that win are the ones who now get that capability for free and compete on something else. Together is on-time to this trend, not early — but being on-time with solid execution in infrastructure is often enough.”

“For anyone building AI tools that touch code, smolvm means you can let your AI actually run things without fear. That unlocks a whole category of 'show me the output' UX patterns that weren't safe before. Less time explaining sandboxing to users, more time shipping features.”

“The buyer is a startup ML engineer or a growth-stage company's platform team who can't justify a dedicated MLOps hire — this comes from the product or engineering budget, not a separate AI infrastructure line item. Pricing on consumption is correct; it aligns cost with usage and avoids the 'we trained once and now pay a monthly seat fee' problem that kills adoption. The moat question is the real one: Together's defensibility is the combination of model selection breadth plus the training-to-serving pipeline being a single product surface, which creates workflow lock-in even if per-token prices converge. The risk is that Hugging Face Inference Endpoints or AWS close this gap within 18 months, but right now Together is charging a reasonable premium for genuine convenience — that's a viable business.”