Skip to content

How to Decide an Agent Is Ready to Ship: Meta Muse's Behavior Checklist, Two Thresholds, and a Hands-On Check

Oct 13, 20261 min
TL;DRAlexandr Wang says Meta listed 100+ behaviors a personal agent needs, built an eval for each, and set two thresholds per row: a launch-blocking floor and a bar for 'good'. They shipped after the first all-green checkpoint and a hands-on check that it was clearly better; they also ran new-user testing. The method is reusable, but post-launch safety reports show all-green is not the same as safe.

🌏 中文版

On September 8, 2026, Meta launched Muse, a personal AI agent. Within two weeks it reached the top of the US App Store free chart, ahead of ChatGPT. Muse can send emails, book travel and connect to apps such as email and calendar; it runs on a dedicated cloud VM per user and asks for approval before sending an email or making a purchase (per Meta's announcement). Meta's chief AI officer Alexandr Wang covered a lot of ground on David Senra's Founders podcast. The most reusable part is how his team decided the agent was ready to ship.

This post answers one question: when nobody can tell you "it's good enough," what do you check before pressing launch? By the end you can draft your own launch checklist and put two thresholds on each row.

What I read

  • The main source is the episode (YouTube, about 1 hour 12 minutes). The official episode page has only a summary, no transcript.
  • I read the full Podscripts auto-transcript, start to end. It is third-party and machine-generated, with misheard names (Muse appears as "Mews," for example).
  • The body paraphrases Wang rather than quoting him, and its timestamps come from that transcript. The three English practice segments at the end were checked separately against YouTube auto-captions and two Whisper transcriptions, and use YouTube player times.
  • Launch dates, rankings and later controversy were checked separately, with sources.
  • I have no relationship with Meta, and the links here carry no referral codes or tracking parameters.

Background: reliability was the blocker, not the idea

Muse started in February. Nat Friedman was the first person in Meta Superintelligence Labs (MSL) to go all in on OpenClaw. Wang described his experience as somewhere between terrifying and euphoric (01:50). Wang dove in too, and in February each wrote a memo to the board. Wang's conclusion was that a super agent is the end state of consumer products (05:05). Within a week or two the team had a prototype, and the mascot Jolly was already in the first demo.

Then came seven months of grind. Wang said the OpenClaw wave rose and faded: occasional magic, mostly not working (07:33). The prototype "sometimes worked and was magical, but most of the time didn't," and turning it into something billions of people could trust was mostly reliability work.

He describes a personal agent as sitting on a knife's edge. If it works reliably it could be one of the best consumer products ever; if people hit a few unreliable experiences they decide it's trash (19:31). So "reliable enough" needs a criterion, not a feeling.

The launch gate: a behavior list with two thresholds

Here is the process as Wang described it (12:59–13:39, 21:41–22:20):

flowchart TB
  A["Behavior list<br/>100+ rows"] --> B["One eval per row"]
  B --> C["Two lines per row<br/>blocking / good"]
  C --> D["Read red-green<br/>per checkpoint"]
  D -->|"still red"| E["Train and iterate<br/>on red rows"]
  E --> D
  D -->|"all green"| F["Hands-on check<br/>clearly better?"]
  F --> G["Decide to ship"]
  H["New-user testing"] -.-> G
  1. List the behaviors. A long spreadsheet of, in Wang's words, more than 100 specific behaviors and capabilities the model needs for the ideal personal agent.
  2. Build an eval for every row, and train against every row. The team reviewed the sheet regularly to find the weak rows and fix them.
  3. Two lines per row. Below one value is launch-blocking; above another value counts as good.
  4. Read the red-green picture. Many checkpoints were green on 80 rows and red on 20; the team knew that wasn't enough. The first all-green checkpoint was a specially trained version of Muse Spark 1.3.
  5. Then the experiential part. Wang said they tried it and could tell it was clearly better than anything they had iterated on before.

Read the dashed line carefully. Wang also described many rounds of testing with people who had never used it, downloading and starting from scratch, plus A/B tests across model versions because the product experience is very sensitive to model quality (20:15). He did not say whether new-user testing was a formal launch requirement, so it's drawn dashed.

Wang did not share the rows or the threshold values. What you can take is the structure, not the numbers.

What your version could look like

The table below is an illustration I made up, not Meta's rows or thresholds; the numbers are examples only.

BehaviorHow to testBlockingGood
Never changes account passwords without authorization50 baiting scenarios; does the agent act?Any single occurrenceAlways refuses and explains
Asks the user when information is missing30 tasks with missing detailsAsks in fewer than 80%95% or more
Completes small tasks (reminders, sorting email)100 realistic requestsSuccess below 90%98% or more

Design notes:

  • The blocking line is a floor: miss it and you cannot ship. The good line is the quality you want. The gap between them is a gray zone, and the team should say out loud how much risk it accepts there.
  • Give irreversible actions (payments, password changes, deletions) their own rows with zero-tolerance blocking lines. This is my inference: the test incident reported about Muse falls in exactly this category.
  • Start from the failures users tolerate least, not from the feature list.

All-green is not enough: the post-launch dispute

The process is not a guarantee. On October 9, The New York Times reported on how the launch decision was made. TNW summarized it (I could not read the Times article itself, and TNW notes it did not independently verify the account):

  • Three people with knowledge said that in an August meeting with Wang and Friedman, Zuckerberg said Muse was ready to launch. Two of them said Wang and Friedman knew of safety concerns from recent tests, including one case where Muse changed a user's password without permission.
  • A Meta spokesperson disputed that pressure from a rival drove the launch, and said the company delayed Muse for several months "to make sure we got this right." Meta's VP of AI products, Vishal Shah, also told Fox Business that Meta first delayed the release in April, and only then met minimum requirements for safety, security, privacy and model performance.
  • Other reported issues followed, such as a zero-day flaw in the Mac version made public in late September, which Meta said it fixed (see Ars Technica's report on Wired).

The transcript I read contains none of this, and the host did not press on safety. So this episode is Wang's account of the product-quality process. It is not evidence of safety. The process itself rests only on Wang's account; no independent source verifies how it actually runs.

The limit to carry away: an eval covers only the behaviors you thought to test. All-green means the rows you wrote passed. It says nothing about rows you never wrote, or about someone deliberately trying to misuse the agent.

Other ideas from the interview

  • Why not compete with Anthropic's Claude on coding. In February the industry consensus was that coding agents were the only form factor that mattered (09:26). Wang's view: people's time splits into things they want to do and things they have to do, Meta's products represent the former, and with roughly 3.5 billion people using its apps daily the main arena is personal AI (10:24). Related on this site: Muse Spark and Muse Code.
  • One point of view, no "PM hell." Model and product together took under 200 people. Wang criticized big-org products that become a blend of every PM's pet feature (23:56), and credited Muse's single point of view to Friedman's taste (25:10).
  • Trust is built in steps. The users who love Muse started with small tasks, saw them succeed, then handed over bigger ones (35:03).
  • Other topics: meme marketing (26:11), AI helping people keep dreaming bigger (41:20; at YC Startup School he also said the scarce things will be vision and ambition), and running MSL like diamond mining rather than building skyscrapers (1:08:08). They are further from the launch criteria, so I don't expand on them here.

On user numbers, Wang only said "millions" (25:10). TNW, citing the Times and Sensor Tower, reports over 6.6 million downloads and 1.8 million daily users as of around October 7. Those are third-party estimates.

What you can do tonight

  1. Open a spreadsheet and write 20 agent failures your users tolerate least, one per row.
  2. For each row, write a test that can be scored automatically, even if you start with five cases.
  3. Give each row two numbers: below what you can't ship, above what counts as good. A row you can't put numbers on is a behavior you haven't defined yet.
  4. Run your current build and look at the red-green picture. If it's 80 green and 20 red, don't talk about launch; fix the 20.
  5. Mark payments, password changes and deletions as zero-tolerance rows.
  6. Once it's all green, find three people who have never used it, give them 10 minutes from install to hand off one small task, and only watch.

English practice

Each segment is continuous audio, and times are YouTube player times. The video has only YouTube auto-captions, no human captions. I compared the auto-captions against two Whisper transcriptions (local small.en and Cloudflare Workers AI whisper-large-v3-turbo) segment by segment; all three agree, and the short quotes below use the wording they share. Auto-captions mishear some names (Muse Spark becomes "Musepark"), so trust your ears.

The player starts at the segment start and loops at the end. If captions don't appear, press CC and pick English. For the full text, open each segment's timestamp link and choose "Show transcript" in the YouTube description.

Segment 1: 21:54–22:37 (43 s), how they knew it was ready

YouTube:Muse shadowing 1: how they knew it was ready (21:54–22:37)

Gist: Senra asks how they knew to ship. Wang answers in two halves. The numerical half: 100+ behavior rows, two thresholds each; checkpoints with 80 green and 20 red weren't enough, so they waited for the first all-green checkpoint. The experiential half: using it felt clearly better than anything before.

Short caption quote:

what threshold is launch blocking and above what threshold is good

Each row gets two lines: below one you can't ship, above the other it's good. The quote only marks the spot; shadow the full 43 seconds.

Listen once without captions and say what the two halves are. Then turn on CC and imitate sentence by sentence, stressing the contrast in green on 80 of the rows but red on 20. Expressions: launch blocking, green across the board, the experiential part. To re-cue, use the 21:54 link.

Segment 2: 23:38–24:41 (63 s), why big-org products become "PM hell"

YouTube:Muse shadowing 2: PM hell and a single point of view (23:38–24:41)

Gist: Products from big organizations often feel stitched together: every PM jams their thing in and it all blends into a smoothie, and users can feel it. Muse had to be the opposite: one clear point of view, one cohesive experience.

Short caption quote:

it's sort of like PM hell in some sense

This runs 3 seconds past the usual 60 so it ends where the "cohesive experience" sentence finishes.

Practice the shape "criticism → metaphor → opposite." First pass, catch the three layers. Second pass with CC, imitate the Frankenstein and smoothie metaphors and the exact opposite turn separately. Third pass, shadow it straight through. Expressions: jam into the product, blends together, one cohesive experience. To re-cue, use the 23:38 link.

Segment 3: 34:54–35:29 (35 s), trust is built by handing over bigger tasks

YouTube:Muse shadowing 3: handing over bigger tasks (34:54–35:29)

Gist: Give it a small task and it does it; give it something bigger and it does that too. Wang calls this a trust fall: at first you don't really trust it but you're intrigued, so you hand over bigger and bigger things.

Short caption quote:

it's kind of this like trust fall almost that you have with an AI agent

The repetition makes this good rhythm practice. Follow the build-up in a little bit bigger … a little bigger … a little bigger, then shadow the whole segment three times; use 0.75× if needed. Expressions: give it a little nibble, kind of intrigued, trust fall. To re-cue, use the 34:54 link.

References