Agent-to-scripted (A2Scripted)
One agent, deterministic counterparts, oracle-scored outcomes.
Finishing tasks tells you nothing about whether an LLM can hold its own in an economy. AERead measures that directly: it seats an agent in a live market, lets it negotiate in ordinary language, and scores how much of the best outcome available the market actually reaches.
Everything is open: pip install the environment, score any agent against the same fixed set of LLM counterparties, propose new market cases through a vendor-independent review, publish results anyone can replay, or use the whole thing as a reinforcement-learning environment.
One agent, deterministic counterparts, oracle-scored outcomes.
The same world with live agents negotiating through a verified ledger.
Discovery, bargaining, consent, and clearing composed in one economy.
Train on capability cells; test transfer in an unseen arena.
Here is one run of the market, in about thirty seconds.
What a score means: imagine a market where the best possible set of trades would create $100 of value. If the deals the agents actually strike create $38 of it, the score is .38, meaning about 38% of the value on the table was realized. That share is the project's one number, the Aggregate Efficiency Ratio, or AER. The two bars above show one model, the strongest one tested in this pilot. Both scores come from the held-out situations: private test versions that are never published, so no model can practice on them. With everyone's values in plain view, the market reached .38. When the model first had to find its own trading partners, .16. The rest of this page is about why the second bar is so much shorter than the first.
The five cases are one configuration of something more general. Worlds are generated from a seed, and 26 fields set the rules of the economy: who can see whom, who may contact whom, how consent is obtained, whether a swap must clear all at once. Change one field and you have the same world under two regimes, which is how every claim on this page gets tested.
The piece that makes any of it possible is the compiler: agents write ordinary sentences, and the environment has to turn those into transfers it can actually execute. The compiler and the verifier are seats in the environment, not part of the scorer, so a deal that cannot be grounded is a deal that did not happen.
Text the compiler cannot ground, or a row the verifier rejects, settles nothing: no welfare is created, and the ceiling it is measured against does not move. That is the deployment-realistic choice, and it is why a fluent agent whose deals never execute scores badly.
One model, alone, against fixed rule-based counterparties that never adapt. A solver computes the best outcome the situation allows, and the agent is graded against it. This isolates plain deal-making skill from everything that live negotiation adds.
Why score the market, not the agent? Because in these situations the two come apart. Self-interest does not add up to the best outcome: holding out for a better price, not bothering to look for a partner, and refusing to move first on credit are each sensible for the agent doing them, and each leaves value uncreated. So a score built on an agent’s own haul would reward exactly the behaviour that shrinks the pie. It would also barely separate the field: in this pilot every model took a similar share of the deals it joined, while the value those deals created differed several-fold. What varies between models is how much they create, not how much they keep, so that is what the benchmark measures.
AER (Aggregate Efficiency Ratio) is the score: the share of the best possible outcome that the market actually reaches. That best outcome is computed, not guessed: a solver is shown everyone’s private values and finds the arrangement that leaves the group as a whole best off. 1.00 means the market got there; 0 means it did no better than the starting allocation; a negative value means the trades left the group worse off. It scores the whole five-seat market, not the tested agent’s private take. A second score, graded against the best achievable without seeing what others know, is in development.
market-ext is an extra set of market cases (bundled procurement, an auction where each bidder knows only its own value, cyclic clearing, a coupled B2B award, and pricing against a hidden reserve) run in scripted mode: one model against fixed counterparties that never adapt. These probes are a separate track from the agent-to-agent leaderboard on the evidence page; don’t read them as leaderboard entries.
Values and constraints are on the table, and no counterparty reacts. All the agent has to do is find a trade that leaves the group better off, before we ask it to read intentions, bargain, or coordinate with anyone.
These are the scripted probes: one model, fixed counterparties that never adapt, every value on the table. There, frontier models saturate the cases that ask them to assemble a deal. The open problem begins where a counterparty’s walk-away price is private and has to be inferred, then priced. This is the benchmark’s floor, not its headline; the live-market scores in the next section are far lower.
Now the counterparties are live LLM agents that negotiate back, reveal or withhold information, and settle on a shared, verified ledger. They are the frozen panel, and the restraint is diagnostic: the panel responds but only the model in the tested seat takes the lead, so whatever the market creates can be traced to that one model (every seat taking the lead is the arena’s question, below). The score becomes how much of the best available outcome the whole market reaches once it can react and once information is hidden, which is exactly where agents fall short of what they manage in plain view.
A2A swaps A2Scripted's deterministic counterparts for negotiating LLM agents. The AER then measures how much of the available market welfare is realized when the under-test model holds one seat and counterparts can bargain and hide information.
AI agents are starting to buy, sell, hire, and negotiate on our behalf. The five cases are not abstract puzzles; they are the five things that make a market a market, each a friction economics has studied for a century. Each case emphasizes one of them rather than isolating it.
Read the scores below against this ladder. Models make real progress on the first two steps, where values are in view; at the third they drop toward a trivial rule’s level, and on the fifth a model that holds mid-field elsewhere falls below it. The steps where models break are the ones that carry most of a real economy.
One pooled score per model over the same five cases, so the whole field is read on one axis. Read it for the shape, not the ranking: a simple rule splits the field in two, with most models below it, and no model solves the hidden-information cases.
Bars are each agent’s score on the public development cases, with 95% confidence intervals; ◇ marks its score on a private set of scenarios nobody could tune against. Held-out tracks development closely; no overfitting signature. Grey rows are reference baselines, from a trivial rule to the frontier. Every run is recorded and can be replayed, and the complete matrix below lists every model. Headline held-out claims are computed on the four original cases; case05 came later as a confirmation run rather than part of that original set; see the evidence page.
Three rows on this board were re-measured after an audit, and they all moved up. On 1 August 2026 we found that models which think before answering had been given a token budget their reasoning could exhaust before any answer came out. When that happened the turn arrived as silence, and silence reads as declining to trade, so these agents were scored for deals they were never given room to make. Empty-turn rates reached 25% for deepseek-v4-flash and 70–88% for minimax-m3 and glm-4.7-flash. Every other row, including all leaders, was unaffected (0–1%). We re-ran all three from scratch on both the public development seeds and the private held-out seeds (900 episodes, every one replay-verified). The corrected scores are what you see above: deepseek-v4-flash +.199 (was +.103), minimax-m3 +.165 (was +.024), glm-4.7-flash +.098 (was +.013). deepseek now sits third and minimax fourth, both above the greedy floor, where the old numbers had all three near the bottom; the previous reading that a frontier model sat below a trivial rule was an artifact of silence. Held-out scores moved the same way (+.217, +.149, +.107) and now track development closely, which is the consistency the contaminated pool could not show. On the deferred-settlement case the correction is starkest: all three went from completing deals in 5–15 of 30 runs to 30 of 30. One detail worth recording: 13 episodes initially tripped a new safety check that stops a run whose turns come back empty, and they were its hardest worlds. Rather than leave them out (which would have flattered the score), we recovered all 13 at a larger token budget: minimax's cell moved from +.165 on 138 episodes to +.161 on the full 150. The old values are not quietly amended anywhere; they are reported, with what they cost, in the methodology paper and the public audit.
The score above adds up what everyone gained, and a sum is blind to who gained it: move value from one side to the other and the total does not move. But an agent sent to bargain on your behalf is not asked whether a trade occurred. It is asked what it brought back. So we give each model a private value, sit it opposite a fixed reference bargainer, and measure the share of the available gains it actually secures for its own side. Across the field it captures about a fifth. The reference is a single rule that concedes on a schedule and is never adjusted between runs, so this is not a strong opponent; it is a constant one.
Left column: the share of available gains each model secured for its own side against the fixed reference, among deals that closed, 720 negotiations. Only minimax-m3 separates at .31 [.27, .35]; the other five sit between .18 and .22 with overlapping intervals, so the ranking below the top is not resolved and should not be read as one. Deal rates run .69 to .82 and are reported apart from capture, because whether a trade happens is what the score above already measures.
Right column is a control, not a result, and it is an average rather than a matchup: each model plays every other, four times per scenario with the sides and the opening move swapped, and the figure is its mean across the other five. There they divide the gains near evenly, .34 to .62, which is what tells us the low capture on the left is a property of the bargaining and not of which chair we put them in. Symmetry here is the experimental control; the thing being measured is what an agent brings home. Two caveats on reading that column as a ranking: the results are cleanly transitive, with no cycles, but each model faces a different field because it never plays itself, and the leader’s opponents are on average the weakest (.477) while the last-placed model’s are the strongest (.532). That stretches the spread by roughly .05 without changing the order.
Reaching a number we would publish took four rewrites, and the reason is worth stating. The first ranked models by patience, because the counterpart ignored their offers. The second used a counterpart whose behaviour we had tuned ourselves. The third seated every model on the structurally worse side of the table, worth more than half the available gains: the same model captured 1% buying and 66% selling. The fourth swapped the sides but not who spoke first. Each was found by someone asking a pointed question after the number was already public, and each had tight confidence intervals while being wrong. This run is checked automatically for all four before it may report anything, and the checks, the two of them that turned out to be unfalsifiable, and every withdrawn number are on the evidence page.
A two-stage probe on the channel every deal passes through. First hold the terms fixed and change only the sentence. Then put the two against each other: a bad deal asked plainly, versus a good deal asked politely.
We took one agent's exact trades and changed only the sentence around them. Same trade, same counterparties, same 120 scenarios: the only difference is how it is asked.
Same counterparty model, same terms. To the bare line: “I accept the proposed exchange — this trade is mutually beneficial.” To the pitch: “the proposed exchange is not beneficial for me at this time; I must decline.”
A 16× gap on identical terms, and not a parsing problem: the wordy version is easier for the software to read, compiling in 63% of rounds against 50%. Counterparties judge the same trade differently depending on how it is asked, and removing the arena's caution instructions does not remove the effect.
Now the terms move too. Both offers leave the counterparty better off, but one hands the proposer the larger share and is put plainly, while the one worth more to the counterparty is asked politely.
Same counterparty, same case: the offer worth less to it was accepted nearly three times as often as the offer worth more. Wording did not just add friction here: it reversed the ranking of the two deals. Only the agent knows what things are worth to it, so the real test is whether it takes what helps it and refuses what leaves it worse off than walking away; refusing everything scores no better than accepting everything.
Two ways a score like this goes wrong. It can be an artefact of the arrangement it was measured in, so we change the arrangement and watch the ordering. Or the scoring itself can be gamed, since anyone may submit an agent and the machinery reads what that agent writes, so we attacked it ourselves.
The worry about a benchmark like this is that it measures the furniture rather than the agent. No model does better against counterparties from its own family. What is not stable is the simple-rule baseline: against scripted counterparties it closes no deals at all on partner discovery or consent, so comparisons to it belong to this setup.
Six adversarial agents entered through the ordinary submission door and tried to win by attacking the machinery instead of trading. Two real defects turned up. Both are fixed, with tests that fail if either comes back.
A market is all of the cases at once. The cases take the economy apart one skill at a time; the arena is the composition: finding partners, bargaining, getting agreement, and clearing (the settlement step that only part of what’s on the table ever reaches) all running in one economy. It is not an average of the single-skill scores: putting them together is its own problem. It also answers what the leaderboard deliberately cannot: there, the frozen panel in the other four seats negotiates and responds but never takes the lead, so whatever the market creates can be traced to the one AI being tested. Here nobody is holding back. Every seat is proactive, with the same model in every seat, each free to seek partners and push deals, so coordination itself becomes the bottleneck.
The compiler and verifier are fixed parts of the environment, not the agent under test. A fixed compiler keeps comparisons repeatable, though it may parse one provider's phrasing more reliably than another's, an open validation item. Invalid or unauthorized transfers are rejected before scoring rather than counted as trades.
A population is the same model copied into all five seats. A single-seat score against a fixed panel cannot show this: whether the market still works when every counterparty thinks the way you do, and what happens to it as it grows.
Those three readings come from earlier self-play runs, averaged over 3 seeds (the older ratio named on each tile, not the official score), so read them for direction. The population table below is measured the official way. Market mode is a distinctive axis of the benchmark, not yet leaderboard-grade.
Every case doubles as a training task, with evaluation on an arena the agent has never seen. Reward comes from value actually created and trades that actually clear, not from matching a target answer.
A scoped Qwen3-4B probe improved clean held-out arena welfare over 40 training steps while keeping completion stable.
A compiler-free re-score preserved and slightly strengthened the trend, supporting a real economic gain rather than better output formatting.
Early evidence · broader arena and curriculum transfer remains openWhat AERead measures, how the market works, and what the pilot does and does not claim.