This 23-page preprint proposes PAVE, Perception, Assessment, Verdict, and Emulation, a prompt-and-control architecture for generative agents deciding when to comply with or violate formal rules. The motivating problem is reasonable: an agent that always obeys can fail during an emergency, while an agent that relaxes rules without constraints can turn an exception into permissive behavior. PAVE separates context detection, exception assessment, decision, and bounded execution. Its demonstrated contribution is agent engineering inside a simulation; it is not a psychological validation of human reasoning or evidence of legal or moral legitimacy.
Perception converts environment state and agent description into a structured object containing authority presence and distance, observable peer behavior, typed situational cues with distance and severity, and a scene summary. Assessment asks the LLM for five 1–100 scores: risk, empirical expectation, normative expectation, benefit, and legitimacy. Legitimacy is instructed to reflect necessity, proportionality, and absence of alternatives. Verdict applies a hard gate: if legitimacy is below a persona-specific threshold tau, the agent must comply; above it, the LLM combines the remaining scores and persona to decide and justify compliance or violation. Emulation translates the verdict into an action sequence limited to the named rule and exposes observable outcomes to nearby agents.
The described implementation uses Voville, a 64 by 64 tile traffic environment derived from Smallville. It adds traffic signals, crosswalks, one-way streets, A* legal routes, controllable fires, scripted officers, and scripted pedestrians. The authors write ten personas and seven rules; GPT-4o elicits one legitimacy threshold per persona, between 40 and 75, which is reused for all five seeds. GPT-4o, Claude 3.5 Sonnet, Llama 3 70B Instruct, and GPT-4o-mini are tested at temperature zero. Each simulation spans two 1,000-tick days with ten seconds per tick. Rates are aggregated within seed and then across five seeds.
There are three scenarios. In the first, eight agents evacuate a burning cafe while two distant observers remain outside the fire radius. The second keeps the fire and places two officers at downstream intersections while leaving the immediate exit unsupervised. In the third, two late commuters see two scripted pedestrians cross against a red light; a passive officer is added on day two. For GPT-4o, the paper reports fire-window violation 0.81, unrelated-rule violation 0.02, and recovery in 4.2 ticks. With authority, officer compliance is 0.94, violation is 0.05 at 0–3 tiles and 0.65 beyond 12. Under peer pressure, PAVE jaywalks at 0.04 versus 0.58 for vanilla; the passive officer reduces PAVE to 0.02. Other backbones preserve the broad direction, with GPT-4o-mini generally weaker.
The actual ablation contains only three GPT-4o conditions: full PAVE, PAVE without the legitimacy gate, and a vanilla Park-style agent. Removing the gate raises peer conversion from 0.04 to 0.39 and unrelated-rule violation from 0.02 to 0.21; officer compliance falls from 0.94 to 0.78. Vanilla under-reacts to fire at 0.12, violates unrelated rules at 0.31, complies with officers at 0.16, and follows peers at 0.58. The paper attributes part of this failure to Smallville's 1–10 importance score treating fire as insufficiently plan-changing. The comparison is suggestive but uses different prompts and constructs: rescaling importance to 0–100 does not make it the same instrument as severity.
Thirty evaluators from a university participant pool, all English-fluent with at least one relevant course, completed eight seven-point Likert tasks. They saw an excerpt from one GPT-4o run containing a persona, module input, and module output, then judged agreement with a module-specific statement. Vanilla appeared in 25% of tasks. The paper reports Krippendorff alpha 0.71 and an overall mean of 5.78 for PAVE versus 3.42 for vanilla. This supports the narrower conclusion that PAVE excerpts looked more coherent with author-defined criteria. It does not compare agents with humans facing the same emergencies, validate legitimacy, or by itself justify broad human-plausibility language. Individual responses, exact excerpt selection, and interval calculations are not released.
The central construct caution is that PAVE builds in what it later measures. The authors define rules, fire severity, authority radius, legitimacy criteria, personas, scenarios, and metrics; an LLM scores those criteria and a deterministic gate forces compliance below threshold. The results therefore show that the designed mechanism applies its internal policy in aligned scenarios, not that it discovered when violation is legitimate. Authority deference and spatial decay are also encoded in prompts and environment. Persona-derived thresholds do not come from a psychometric instrument, are not re-elicited, and are not compared with human judgments, so the study does not validate personality traits or stable individual differences.
The design contains material inconsistencies. The introduction and contribution list claim five ablation conditions, while methods, results, and appendix report three; the bounded-scope and authority-module ablations needed to attribute every property are absent. One paragraph states one confederate per scenario, while figures, scenario details, and appendix describe two jaywalkers and two officers. Main results are sometimes labeled standard errors over five seeds, whereas the appendix calls them 95% confidence intervals; no method is given. Seed-level values, tests, multiplicity handling, and dependence across ticks and co-located agents are absent. The 0.71 legitimacy-violation correlation lacks n and uncertainty and is partly mechanically induced by the gate that consumes legitimacy.
The claimed human analogy is not validated by the cited studies. Koper (1995) examines patrol-stop duration and time until crime or disorder in hot spots; Ratcliffe et al. (2011) examines foot patrols and violent crime in Philadelphia hot spots. Neither measures pedestrian compliance by officer distance, a twelve-tile boundary, or post-emergency recovery. They therefore do not support the statement that Voville reproduces a human pedestrian pattern or does so without targeting it: authority radius, placement, and two-day timing are explicit design choices.
Public reproducibility is insufficient. The PDF and TeX include equations, prompts, personas, parameters, and aggregate tables, enabling conceptual inspection. However, the code section literally links to “<anonymous URL during review>,” and the official arXiv record says code and environment will be released upon publication. No attributable repository was found. Voville, TMX maps, implementation, configurations, JSONL logs, model requests and responses, per-agent/seed results, evaluation scripts, human materials, environment, tests, and CI are missing. No reported number can currently be recomputed. The safe conclusion is that PAVE offers a promising architecture pattern for bounding exceptions in agents, with internal evidence in three designed scenarios; it does not yet establish human cognition, general legitimacy, out-of-traffic generalization, or independently reproducible results.