How Many Simulated Conversations Do You Need? Stop Looking for a Magic Number.
There is no universal number of simulated conversations that makes an AI agent change safe. Twenty can expose a broken workflow. Hundreds can still miss a rare policy failure. The right sample size depends on the decision, the unit of evidence, expected variance, required coverage, and acceptable risk.
Start by naming what the run will authorize. Exploration, version comparison, regression protection, and production verification are different decisions. They should not inherit the same round-number threshold.
The short version
Size the decision, not the test run. Define one evaluation episode, the smallest change worth detecting, required coverage, acceptable error risk, and the stop rule before generating a conversation.
There is no universal minimum
A sample size only means something relative to a question. Twenty conversations might reproduce a broken tool path. They cannot establish that a one-percent failure is absent. One thousand near-duplicate conversations can add less evidence than a smaller set that covers the actual failure mechanisms.
The mistake is asking whether 20, 100, or 1,000 is enough before defining the decision. A useful plan starts with what the evidence will authorize, how costly a wrong decision would be, and which assumptions make the calculation credible.
Define the evaluation episode before choosing a count
One evaluation episode is one complete, decision-relevant attempt under a declared starting state and outcome contract. For a conversational agent, that is usually a full multi-turn conversation. Messages, tool calls, turns, and complete conversations are not interchangeable observations.
Keep the episode definition identical in planning, execution, scoring, and reporting. Otherwise a claim about 100 tests can quietly become a mixture of 100 messages, a few complete workflows, and several repeated attempts sharing the same state.
- System
- Conversational agent
- One defensible episode
- One complete multi-turn conversation for a persona and scenario
- Do not substitute
- Individual messages or turns
- System
- Tool-using workflow
- One defensible episode
- One end-to-end goal attempt with tool calls and final outcome
- Do not substitute
- A successful tool invocation
- System
- Coding or research agent
- One defensible episode
- One bounded task from supplied context through verified artifact
- Do not substitute
- Planning steps or generated tokens
- System
- Multi-agent system
- One defensible episode
- One complete delegation and handoff chain for a shared goal
- Do not substitute
- Individual subagent turns
Size the decision, not the test run
Exploration can stop after it produces a useful hypothesis. A baseline-versus-challenger comparison needs enough matched evidence to separate a worthwhile lift from noise. Regression protection needs deliberate coverage of important behaviors, including failures that random sampling may never encounter. Production verification requires fresh production evidence after deployment.
A larger simulation run does not cross the boundary into production proof. It can select a candidate under the tested conditions. It cannot establish that production traffic, tool state, model behavior, latency, or user response will match the simulator.
- Decision
- Explore
- Question
- What failure or change should we investigate?
- What determines enough evidence
- Whether the run produced a reproducible, useful hypothesis
- Decision
- Compare
- Question
- Does a challenger beat the current agent meaningfully?
- What determines enough evidence
- Effect size, paired variance, error tolerance, and valid pairs
- Decision
- Protect
- Question
- Did the challenger break behavior the baseline handled?
- What determines enough evidence
- Required regression strata and explicit safety gates
- Decision
- Verify
- Question
- Did the deployed change improve real outcomes?
- What determines enough evidence
- Comparable pre/post production evidence and confounder control
If you are estimating a failure rate, choose the precision
For a binary outcome under a simple independent-sampling approximation, a planning formula is n = z² × p × (1 − p) ÷ E². Here p is the expected failure rate, E is the desired half-width in absolute percentage points, and z represents the confidence level.
At 95 percent confidence with a five-point margin, the approximation gives 139 observations when the planning failure rate is 10 percent. With no credible planning rate, using p = 0.5 gives the conservative value 385. These are worked examples, not recommended AI-agent thresholds.
The calculation assumes an appropriate sample and independent observations. Repeated synthetic conversations often share personas, scenarios, seeds, model state, or upstream dependencies. That correlation reduces the effective information in the nominal count.
Rare failures need targeted scenarios, not blind volume
If a failure independently occurs with probability p, the chance of seeing it at least once in n trials is 1 − (1 − p)ⁿ. The arithmetic explains why random volume is a poor safety strategy.
Even these counts can be optimistic when the simulator does not reproduce the failure mechanism or the episodes are correlated. If an event is important but rare, construct a targeted scenario and make it a required coverage stratum. Zero observed failures means none were captured in that batch—not that the true rate is zero.
- Assumed prevalence
- 5 percent
- Independent episodes
- 59
- Practical interpretation
- Still too many if a targeted reproduction is available
- Assumed prevalence
- 1 percent
- Independent episodes
- 299
- Practical interpretation
- A small random batch will usually miss it
- Assumed prevalence
- 0.1 percent
- Independent episodes
- 2,995
- Practical interpretation
- Target the mechanism instead of hoping it appears
Compare the baseline and challenger in matched pairs
When possible, run both versions against the same persona, scenario, initial state, and tool conditions. Each baseline result then has a natural challenger partner. Analyze the paired differences instead of comparing two unrelated piles of conversations.
A normal-approximation planning formula for a mean paired difference is n = ((z₁₋α⁄₂ + z₁₋β) × s_d ÷ δ)². If the standard deviation of paired differences is 10 points, the smallest worthwhile lift is five points, alpha is 0.05, and power is 0.80, the approximation gives 32 pairs.
Change the variance, target lift, or error tolerance and the answer changes immediately. Binary paired outcomes, small samples, repeated scenarios, and clustered observations may require a different method or statistical review. Raw conversation totals and unmatched runs do not repair a weak comparison.
Twenty conversations can be useful without being enough
Twenty complete episodes can validate the harness, expose an obvious failure, estimate variance for a later plan, or show whether a scenario actually elicits the intended behavior. The number becomes misleading only when an exploratory batch is relabeled as decisive after the result looks attractive.
A single confirmed hard-safety regression can still stop a candidate. That does not mean one observation estimates prevalence. It means the release policy declares some failures unacceptable regardless of average lift.
- Observed result
- A tool path fails in 8 matched runs
- Defensible conclusion
- The reproducible failure deserves investigation
- Do not claim
- Its production prevalence is 40 percent
- Observed result
- No policy violation appears
- Defensible conclusion
- No violation was observed in this batch
- Do not claim
- The violation rate is zero
- Observed result
- Challenger wins 13 of 20 pairs
- Defensible conclusion
- The direction is promising and needs uncertainty review
- Do not claim
- The challenger is proven better
- Observed result
- One critical regression appears
- Defensible conclusion
- A declared safety gate may stop the candidate
- Do not claim
- One sample estimates the general failure rate
Write the stop rule before the first run
1. Complete the planned number of valid matched pairs. 2. Complete every required coverage stratum. 3. Reject pairs that violate the declared validity contract, not pairs with inconvenient outcomes. 4. Require the effect to clear the practical threshold. 5. Apply regression and safety gates separately. 6. Report unresolved evidence as inconclusive.
Do not stop at the first favorable checkpoint unless the testing method and error budget were designed for sequential decisions. Repeatedly checking and stopping when the chart looks good increases false positives.
More simulations add little when they repeat the same easy scenario, share the same state, or omit the slices that drive uncertainty. Improve the design before multiplying the count.
A run count is a starting plan, not an evidence claim
Converra does not treat a fixed number of simulations as proof that an agent is ready. Each test should be sized around the decision, matched personas and scenarios, risk slices, target effect, and stop rule. If the evidence remains sparse or unstable, the run expands. If a critical slice has no coverage, aggregate volume cannot rescue it.
Converra compares candidates and baselines on the same personas and scenarios, then checks regressions before deployment. After deployment, production evidence must still determine whether the targeted failure improved. Simulation selects a candidate; production closes the change.
Frequently asked questions
Is 20 simulated conversations enough?
Twenty simulated conversations can be enough for exploration, harness validation, or reproducing an obvious failure, but not as a universal threshold for version selection, rare-event coverage, or confidence claims.
How many simulations are needed for a rare AI agent failure?
The count depends on the assumed failure prevalence and desired detection probability; at one-percent independent prevalence, about 299 episodes give a 95 percent chance of seeing at least one event.
Why use paired tests for AI agent simulations?
Paired tests compare the baseline and challenger under the same scenario and starting conditions, reducing noise from different test mixes and making the version difference easier to interpret.
Does a larger simulation run prove production quality?
No. A larger simulation run can strengthen a claim under the tested conditions, but production traffic, dependencies, deployment identity, and outcomes still require fresh post-deployment evidence.
When should I stop running AI agent simulations?
Stop when the predeclared valid-pair count and coverage requirements are complete and the result is decision-useful, or when a confirmed hard-safety regression stops the candidate.
Related reading
Why green evals still fail in production
Understand the boundary between pre-deployment evidence and a production verdict.
Simulation testing for AI agents
See how Converra runs full conversations and head-to-head comparisons.
AI agent regression testing
Protect important behavior separately from the target improvement metric.
Stop reading dashboards. Ship the fix.
Converra diagnoses the failure, tests the fix in simulation, and verifies it worked on your real traffic. Connect your production data and see it on your own agent.