Task is the unit of work in rLLM: one problem instance — a single math row, a single sandboxed coding task — described as pure data. The Runner is the orchestrator that drives an AgentFlow on a Task, resolves the verifier from the Task itself, and writes rewards back. There is one code path for both data benchmarks (gsm8k-style) and sandbox benchmarks (Harbor-style).
The Task data model
Task is intentionally minimal. It says what the problem is and where its files live. It does not carry an evaluator reference, a sandbox handle, or a rendered prompt template — those are produced lazily by the Runner from on-disk config.
Instruction
instruction is what the agent sees in the user message. Three sources, in priority order:
instruction.md.tpl— a template in the dataset directory rendered with the row, supporting{{field}}placeholders. List-valued fields (e.g. MCQchoices) become a lettered block:(A) ...\n(B) ....instruction_field— a column name declared indataset.toml.instruction.md— a literal file (one per task directory; sandbox shape).
category = "vlm" in dataset.toml), the loader produces a list of OpenAI-style content blocks instead of a string, with images encoded as inline data URIs.
Metadata
metadata is the side channel between the dataset and the verifier:
- Data tasks: the source row (or the subset of fields named in
metadata_fields). This is where ground truth, MCQ choices, expected answer, etc. live. - Sandbox tasks: the parsed
task.toml, plus convenience keys lifted from common sections (workdir,agent_user,verifier_user,verifier_timeout,setup_commands, …).
task.metadata["ground_truth"]. A sandbox verifier uses task.task_dir to find its files.
Two physical shapes
A “benchmark” on disk is one of two shapes — both producelist[Task]:
1. Rows-with-shared-verifier (gsm8k-style)
data/<split>.jsonl becomes one Task. dataset_dir is the benchmark directory; sub_dir is None. The verifier is shared across all rows.
2. Task-per-directory (Harbor-style sandbox)
sub_dir is set, so task.task_dir resolves to the per-task directory and the verifier finds its files there. The Runner detects whether a sandbox is needed and provisions one.
Loading a benchmark
BenchmarkLoader autodetects the shape:
dataset.toml+data/<split>.jsonl→ simple/data dataset.dataset.toml+ subdirectories withtask.toml(or listed under[[tasks]]) → sandbox dataset.- Single
task.tomlat the root, or autodiscovered subdirectories withtask.toml→ still produces Tasks.
~/.rllm/datasets/<name>/, then load through the same path.
The Runner
rllm.runner.Runner runs a single Task end-to-end:
Read verifier config
Resolve the task’s verifier from
task.toml (per-task) or dataset.toml (shared). The [verifier] section names either an import_path (Python module) or a name (legacy reward-fn registry key).Provision sandbox if needed
If the task or AgentFlow requires a sandbox, build one from
task.task_dir/environment/ (Dockerfile, image, setup commands). Sandbox backends: docker, local, modal.Run the AgentFlow
Call
agent_flow.run(task, config) (or arun if defined) to produce an Episode with one or more Trajectories.Resolve and run the Evaluator
Build an evaluator from the verifier config: a Python
evaluate function for data tasks, or a shell-script runner for sandbox tasks. Pass it (task, episode) to get an EvalOutput.Running many tasks
run_dataset is the parallel front-end on top of Runner — it’s what rllm eval uses internally:
min(concurrency, agent_flow.max_concurrent). Sandboxed flows get a fresh per-task agent_flow copy so sandbox state doesn’t leak.
Why this split
Before this refactor, eval and training each had their own task abstraction, and sandbox tasks went through a different pipeline than data tasks. That split made it hard to share verifiers, mix shapes in one benchmark suite, or move a benchmark from “in-memory rows” to “on-disk task directories” without rewriting glue. The new model — pure-dataTask + a single Runner that reads verifier config off disk — means:
- Data tasks and sandbox tasks share the same Episode-producing pipeline.
- Verifiers travel with the dataset (in
dataset.toml/task.toml), not in agent code. - The CLI, training loop, and SDK all consume the same
TaskandRunner, so behaviour stays consistent across entry points.

