Frequently asked questions
Direct answers about synthetic data environments, sandbox fill, and agent evaluation. For production governance and policy enforcement, see the enterprise section.
What does Astroturfed do?+
Astroturfed provides realistic synthetic data environments for developing and validating AI agents against enterprise systems like HubSpot, Gmail, Calendar, and Salesforce. You generate tenant-scoped business worlds, fill vendor sandboxes via OAuth, run evaluation scenarios, and observe every broker invoke through live trace streams — all without production PII.
How is a synthetic environment different from a traditional staging environment?+
Traditional staging environments typically share production data or contain incomplete system topology. Astroturfed generates faithful business objects, workflows, and edge cases from scratch — companies, employees, activity history, and CRM records — delivered alongside live action streaming and scenario-based evaluation harnesses.
Can we connect real vendor systems during evaluation?+
Yes. Mode 1 fill pushes synthetic companies into vendor-provided OAuth sandboxes (HubSpot, Salesforce, and others). Tokens are vaulted per tenant with refresh automation. Default templates exclude personally identifiable information entirely until your team explicitly opts into higher-fidelity mirrors.
How do I observe what my agent is doing during a run?+
Every broker invoke is attributed and streamed over SSE in real time. Filter traces by provider, action, agent, or external trace root to replay a full evaluation session. Traces can be exported as JSON or CSV for offline review and fine-tuning datasets.
How does OAuth work for CRM sandboxes?+
You authorize Astroturfed against a vendor sandbox using standard OAuth flows. Access and refresh tokens are stored in a per-tenant vault — never exposed to the model context window. Fill pipelines are idempotent and open an external trace root so every downstream action stays correlated.
Does Astroturfed integrate with our existing identity provider?+
Yes. Role bindings from Okta, Microsoft Entra ID, or Google Workspace control which engineers can access synthetic environments, run scenario packs, and view trace streams within your tenant.