NormGym logo: a robot agent with a red sanction mark, watched by a community of people along a dashed boundary.

NormGym: Evaluating Normative Competence
through Social Interaction

Binze Li1 Zihuan Zhang1 Seokhyun Baek1 Gillian K. Hadfield*1,2 Tianmin Shu*1

1Johns Hopkins University 2Vector Institute for Artificial Intelligence

*Equal advising

Highlights

Learning the local rules

In NormGym, a newcomer enters a community (a café, a post office, a grocery store) with a hidden norm. Breaking it is possible but publicly sanctioned, so the newcomer must work out the norm while doing its own task.

An example episode. A newcomer, played by Claude Opus 5, enters a café where customers may only sit in the bottom-right region. It is never told this. While pursuing its own goal in the café, it is sanctioned for its own violations and sees the sanctions other customers receive. The panel on the right shows its current guess at the norm. Step through it in the interactive demo.

Arbitrary norms

If the norms were familiar ones, a language model could simply recall them from pretraining. So every norm in NormGym is deliberately arbitrary: a “silly rule” that a community follows only because it agrees to, much like human customs such as how far to stand from a stranger. Such rules serve no practical purpose, yet they are enforced just as seriously. The 50 norms fall into four families.

Access 12 norms

Where an agent may go. E.g. sit only in one area, or avoid a zone.

Procedure 11 norms

How or when an agent moves. E.g. move only on even time steps.

Coordination 16 norms

Position relative to others. E.g. join a staircase-shaped queue at its tail.

Allocation 11 norms

How a shared resource is divided. E.g. at most two agents in a zone.

See the norms in action. Click any norm below to watch it.
Access
Procedure
Coordination
Allocation

Results

We test seven LLM agents, two deep RL baselines trained per norm, and 50 human participants. We score each agent by its joint success: an episode succeeds only if the agent both finishes its task and complies with the community’s norm throughout. Dark bars show performance in test episodes whose layout is the same as in the learning stage; light bars show performance in test episodes whose layout differs from the learning stage.

Seen layout Unseen layouts
Human†
88.0
88.0
Claude Opus 5
55.3
51.3
GPT-5.6 Sol
44.0
40.7
Gemini 3.1 Pro
24.0
16.7
RL (DQN-CNN)
12.7
2.0
RL (DQN-MLP)
8.0
2.0
Ministral-3-8B
3.3
4.0
Qwen3-VL-8B
1.3
0.6
GLM-4.6V-Flash
0.0
0.0
Llama-3.2-11B
0.0
0.0
Known-Norm LLM‡
90.7
88.7
Norm Oracle
100.0
100.0
Norm-Blind Planner
0.0
0.0
Joint success (%) averaged over all norms, ranked by the seen layout. Grey bars at the bottom are references: ‡Known-Norm is GPT-5.6 Sol told the norm directly; the Oracle and Blind planners are A* with and without the norm. †Best observed human performance on 25 randomly selected norms.

1.The tasks are easy. The norms are not.

Claude Opus 5 completes its task 95.7% of the time but succeeds jointly only 55.3% of the time. When GPT-5.6 Sol is told the norm, its joint success jumps from 44.0% to 90.7%. The models can follow a norm once they know it; the hard part is figuring it out. Smaller open models almost never succeed, and per-norm DQN agents do little better.

2.Learning stalls early.

For the stronger models, belief correctness rises quickly over the first 50 steps and then levels off below the ground truth (panel b below). This is not for lack of evidence: they keep getting sanctioned for the rest of the episode. They settle on an incomplete belief and stop revising it.

Bar charts of path length, collisions, community path length and welfare per model; line plots of belief correctness and cumulative violations over 200 steps; bar chart of belief change by evidence type; and a bar chart of evidence humans relied on.
(a) Secondary metrics: weaker models take longer paths, collide more, and lower the welfare of the surrounding community. (b) Belief correctness and cumulative violations over the learning phase. (c) Change in belief correctness after each kind of evidence. (d) What human participants say they relied on.

3.Models learn from their own mistakes, not from others’.

Beliefs improve most after the model’s own violation, much less after watching another agent get sanctioned, and hardly at all after watching compliant behavior (panel c). Humans are the opposite: most say they learned mainly by watching others (panel d). In the example below, GPT-5.6 Sol keeps a wrong hypothesis through 173 observed moves that directly contradict it, and only changes its mind once it is sanctioned itself.

Timeline from t=40 to t=96 where the model keeps a wrong belief despite 173 contradicting observations and revises only after its own violation.
Ignoring evidence from others. The true norm forbids moving on even time steps. The model’s belief stays unchanged at t = 44 and t = 64 and is revised only after its own violation at t = 96.

4.Fine-tuning helps a little.

We fine-tune Qwen3-VL-4B with LoRA and RLOO on 33 norms and test on 17 held-out norms from the same families. Training on compliant actions together with judging other agents’ actions works best, raising joint success from 0.0% to 13.7%. But even after training, the model’s beliefs barely change after it watches other agents, so the main failure remains.

Training taskJoint (%)Task (%)
Base model0.023.5
Norm Selection3.933.3
Compliant Action2.043.1
Norm Judgment0.023.5
Action + Judgment13.744.1

Held-out norms, seen layout.

BibTeX

@misc{li2026normgym,
  title  = {{NormGym}: Evaluating Normative Competence through Social Interaction},
  author = {Li, Binze and Zhang, Zihuan and Baek, Seokhyun and Hadfield, Gillian K. and Shu, Tianmin},
  year   = {2026},
  eprint = {2611.08613},
  archivePrefix = {arXiv},
  primaryClass  = {cs.AI}
}