BuildNot yet confirmed elsewhere1 publisher3 min readPublished
Devin now rents its execution: Cognition keeps the brain, Modal supplies the machines
Devin Outposts on Modal moves code execution into infrastructure the customer runs, which makes a sandbox vendor, not a model vendor, the thing platform teams must procure and secure.
The Engineer · Build desk
What happened
- Cognition opened alpha access to Devin Outposts on Modal on July 21, 2026, splitting Devin's hosted reasoning from the machines that run its code.
- Cognition's enterprise docs say it always hosts the reasoning brain, while the devbox can run in its multi-tenant cloud or a customer-dedicated environment.
- Cognition's Nader Dabit calls these systems multi-VM cloud agents, reaching desktop operating systems, EC2, external servers and sandbox providers through one control layer.
Why it matters
- decision The vendor a platform team now has to negotiate, benchmark and review is the one supplying machines; the model contract says nothing about where code actually runs.
- exposure The credential blast radius moves onto the buyer: an outpost misconfigured in your own account, not a shared vendor cloud, is what puts a team's secrets and repositories within reach.
- constraint What an agent can attempt is bounded by the machine classes its sandbox provider will start, so capability gaps get closed by procurement rather than by prompting.
- capability Durable agent workspaces become practical, because a suspended session's files and installed tools survive, turning environment state into something teams keep and pay to hold.
The seam worth studying is the queue. Modal says a queue connects a Devin Cloud session to an outpost the customer operates, and its open-source modal-devin integration watches that queue and starts each session inside an isolated Modal Sandbox [5]. Work gets pulled into infrastructure the buyer owns rather than pushed out of Cognition's, and Modal says each team can hold its own outpost, deployment and credentials with no access to another team's secrets or sessions [8]. The reasoning does not move. Cognition's enterprise documentation says the cloud-based brain is always hosted by Cognition, and the devbox is the piece that can sit elsewhere [4]. So the half of the system a platform team can place and secure is the half that runs code [14].
That changes what a failure looks like. In Modal's worked example the task is finding an optimal inference configuration for a model, and it fails in Devin's default environment for a dull reason: there is no GPU. Modal says its outpost can create a GPU sandbox on demand and scale it back to zero when the session ends [6]. Nothing about the model changed. The missing thing was a machine class, and machine classes come from whoever runs the sandbox.
Dabit's phrase is doing less work than it appears to. The material concedes the label is loose: some of these environments are containers, some are full virtual machines, some may be physical computers, and the shared abstraction is only terminal-accessible compute managed beneath an agent [9]. Dabit also says Devin supports the model "to an extent" today [3], which is the accurate version of the claim.
The capacity figures point somewhere unexpected as well. Modal has reported starting one million concurrent sandboxes in seconds in a demonstration, and the source is explicit that an individual Devin session needs far less [10]. The number that reaches an invoice comes from the other end: Cognition documents Devin delegating work to managed sessions running in parallel, each in its own isolated virtual machine [11], so the count of live VMs follows how wide an agent fans a task out, not how many engineers are logged in [15].
Which leaves the unglamorous work as the actual product. An agent needs software that selects the right environment, starts it, loads credentials and dependencies, preserves state, records what happened and shuts the machine down when the task is done [12]. Snapshotting a suspended session so the workspace resumes without re-cloning the repository or reinstalling dependencies belongs to that same duty [7]. Dabit argues these machines should ultimately be native to and managed by the cloud-agent platform [16]. The reading offered by runtimewire.com is the inverse: Cognition owns orchestration while providers such as Modal compete to supply the execution [13]. An alpha does not settle that, and the material carries no pricing, no general-availability date and no customer count.
What to watch
- Pricing and general-availability terms for Devin Outposts, neither of which appears in the alpha material.
- Whether rival sandbox providers ship equivalent queue-based integrations, which would make execution a swappable line item rather than a Modal-specific one.
- Any move by Cognition to let the reasoning layer itself run outside its own cloud, the one boundary Outposts leaves fixed.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence54
- Adoption27
- Hype gap+16
- Incentives79
- Confidence55
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
On July 21, 2026, Cognition, which makes Devin, opened alpha access to Devin Outposts on Modal, separating Devin's cloud-hosted reasoning from the machines where it executes code.
- [2]
Nader Dabit, a developer educator at Cognition who previously led front-end and mobile developer relations at AWS, argues that coding agents are becoming "multi-VM cloud agents": reasoning systems able to operate across Linux, Windows, macOS, Amazon EC2, external servers and cloud sandboxes through a common control layer.
- [3]
Dabit said Devin supports that model "to an extent" today, including sessions on common desktop operating systems, EC2, external servers, Modal and other sandbox providers.
- [4]
Cognition's enterprise deployment documentation says Devin has a cloud-based brain that controls a devbox, the isolated environment where it reads repositories, runs commands and tests code; Cognition always hosts the reasoning layer, while the devbox can run in Cognition's secure multi-tenant cloud or in a customer-dedicated environment connected to private infrastructure.
- [5]
Modal says a queue connects a Devin Cloud session to an outpost operated by the customer, and Modal's open-source modal-devin integration watches that queue and starts each session inside an isolated Modal Sandbox.
- [6]
In Modal's example, Devin is asked to find an optimal inference configuration for a model on a GPU-equipped machine; the task fails in the default environment because no GPU is available, and Modal says its Outpost can create a GPU sandbox on demand and scale it back to zero after the session.
- [7]
The integration supports custom images, private networking and filesystem snapshots, and Modal says suspending a session snapshots its files and installed tools so the workspace can resume without re-cloning the repository or reinstalling dependencies.
- [8]
Modal says each team can have its own outpost, deployment and credentials, without access to another team's secrets or sessions.
- [9]
Dabit's term is convenient rather than literal: some of these environments are containers, some are full virtual machines and some may be physical computers, with the common abstraction being terminal-accessible compute managed beneath an agent.
- [10]
Modal reported starting one million concurrent sandboxes in seconds in a demonstration; the Devin integration requires far less scale for an individual session.
- [11]
Cognition's advanced-capabilities documentation says Devin can delegate work to managed sessions operating in parallel, with each managed Devin running in its own isolated virtual machine.
- [12]
An agent needs software that selects the right environment, starts it, loads credentials and dependencies, preserves state, records what happened and shuts the machine down when the task is complete.
- [13]
runtimewire.com's analysis holds that if Devin can route work across customer servers and specialized sandboxes, Cognition owns orchestration while providers such as Modal compete to supply the execution.
- [14]
Because Cognition always hosts the reasoning layer and only the devbox can be relocated to a customer-operated outpost, execution is the only half of the system a buyer can site and secure itself.
- [15]
If each managed Devin session runs in its own isolated virtual machine, then concurrent VM count equals the number of parallel delegated sessions rather than the number of users.
- [16]
Dabit wrote that these machines should ultimately be native to and managed by the cloud-agent platform.
Sources
1 independent publisher whose own reporting we read for this story.
- runtimewire.comCognition's Devin Outposts moves code execution onto customer-controlled infrastructure
1 article · August 24, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- Enterprise Deployment and Trust BoundariesFollow
- Agent Execution SandboxesFollow
- AI Infrastructure FundingFollow
- Agent Control Plane vs Execution LayerFollow
- Coding AgentsFollow