CARROTS'N'STICKS: A Framework for Adaptive Behavioral Governance of Autonomous AI Agents Using Dynamic Privilege Allocation
Authors/Creators
Description
Autonomous AI agents are being deployed into consequential real-world workflows, yet the governance infrastructure supporting these deployments remains critically underdeveloped. Current approaches, such as static prompt-level constraints, post-incident redeployment cycles, and monitoring-only observability frameworks, share a common structural weakness: none of them makes governance intelligible to the agent itself.
We introduce CARROTS'N'STICKS (Governance of autonomous agent behavior via dynamic privilege allocation and structured feedback injection), a runtime framework that treats the operational autonomy of an autonomous agent as a continuous function of its demonstrated behavioral compliance. CARROTS'N'STICKS continuously evaluates agent behavior against operator-defined policies, updates a recency-weighted trust score, and dynamically adjusts the agent's privilege state, the set of capabilities and access rights it is permitted to exercise, in response. Every privilege adjustment is accompanied by a structured feedback message injected directly into the agent's operational context, providing a causally-grounded, policy-cited learning signal upstream of the agent's next action decision. CARROTS'N'STICKS operates without stopping or restarting the governed agent, is framework-agnostic, and is applicable across language model-based agents, robotic systems, multi-agent networks, and hybrid human-AI workflows.
This paper presents the motivation, conceptual architecture, distinguishing properties, and applicability of CARROTS'N'STICKS, situating it within the broader landscape of AI safety, agent governance, and enterprise deployment practice. Empirical validation across deployment contexts is reserved for future work.
A provisional patent application covering the middleware described in this paper was filed with the USPTO on 31 May 2026.
Files
CarrotsnSticks_PQ_Palme_July2026.pdf
Files
(945.2 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:6927a64cf6ee72f9acca88cd9f238d9b
|
945.2 kB | Preview Download |
Additional details
References
- C. Stamford, "Gartner Predicts 40% of Enterprise Apps Will Feature Task-Specific AI Agents by 2026, Up from Less Than 5% in 2025," Gartner, Press Release, Aug. 2025. https://www.gartner.com/en/newsroom/press-releases/2025-08-26-gartner-predicts-40-percent-of-enterprise-apps-will-feature-task-specific-ai-agents-by-2026-up-from-less-than-5-percent-in-2025
- KPMG LLP, "AI at Scale: How 2025 Set the Stage for Agent-Driven Enterprise Reinvention in 2026," Q4 AI Pulse Survey, Jan. 2026. https://kpmg.com/us/en/media/news/q4-ai-pulse.html
- U.S. Department of the Treasury, "Treasury Releases Two New Resources to Guide AI Use in Financial Sector," Press Release, Feb. 2026. https://home.treasury.gov/news/press-releases/sb0401
- European Parliament and Council of the European Union, "Regulation (EU) 2024/1689 Laying Down Harmonised Rules on Artificial Intelligence (AI Act)," Official Journal of the European Union, Jul. 2024. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689
- M. Kaptein, V. Khan, A. Podstavnychy, et al., "Runtime Governance for AI Agents: Policies on Paths," Mar. 2026, arXiv:2603.16586. https://arxiv.org/abs/2603.16586
- R. Kandaswamy, "What the 2026 Hype Cycle for Agentic AI Reveals," Gartner Research, Apr. 2026. https://www.gartner.com/en/articles/hype-cycle-for-agentic-ai
- E. Sayegh, "The Governance Gap Emerging Beneath the AI Boom," Forbes, Jun. 2026. https://www.forbes.com/sites/emilsayegh/2026/06/01/the-governance-gap-emerging-beneath-the-ai-boom/
- S. Casper, X. Davies, C. Shi, et al., "Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback," Sep. 2023, arXiv:2307.15217. https://arxiv.org/abs/2307.15217
- Y. Bai, A. Jones, K. Ndousse, et al., "Constitutional AI: Harmlessness from AI Feedback," Dec. 2022, arXiv:2212.08073. https://arxiv.org/abs/2212.08073
- T. Rebedea, R. Dinu, M. Iorga, A. Lavin, and C. Lawrence, "NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails," Oct. 2023, arXiv:2310.10501. https://arxiv.org/abs/2310.10501
- V. P. Bhardwaj, "Agent Behavioral Contracts: Formal Specification and Runtime Enforcement for Reliable Autonomous AI Agents," Feb. 2026, arXiv:2602.22302. https://arxiv.org/abs/2602.22302
- R. Axelrod, The Evolution of Cooperation. New York, NY, USA: Basic Books, 1984.
- E. Ostrom, Governing the Commons: The Evolution of Institutions for Collective Action. Cambridge, U.K.: Cambridge Univ. Press, 1990.
- A. Kaul, Q. Lan, and P. Gupta, "Behavioral Governance for Autonomous AI Agents: The AgentBound Framework," Jul. 2026, arXiv:2606.30970. https://arxiv.org/abs/2606.30970
- N. Soares, B. Fallenstein, E. Yudkowsky, and S. Armstrong, "Corrigibility," in Proc. AAAI Workshop on AI and Ethics, 2015, pp. 74-82.
- S. R. Bowman, J. Hyun, E. Perez, et al., "Measuring Progress on Scalable Oversight for Large Language Models," Nov. 2022, arXiv:2211.03540. https://arxiv.org/abs/2211.03540
- H. Wang, C. M. Poskitt, and J. Sun, "AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents," in Proc. 48th IEEE/ACM Int. Conf. Software Engineering (ICSE), 2026, arXiv:2503.18666. https://arxiv.org/abs/2503.18666
- C. L. Wang, T. Singhal, A. Kelkar, and J. Tuo, "MI9: An Integrated Runtime Governance Framework for Agentic AI," Aug. 2025, arXiv:2508.03858. https://arxiv.org/abs/2508.03858
- A. M. Mazzocchetti, "Cryptographic Runtime Governance for Autonomous AI Systems: The Aegis Architecture for Verifiable Policy Enforcement," Mar. 2026, arXiv:2603.16938. https://arxiv.org/abs/2603.16938
- G. Marin and J. Chaudhary, "Governing What You Cannot Observe: Adaptive Runtime Governance for Autonomous AI Agents," Apr. 2026, arXiv:2604.24686. https://arxiv.org/abs/2604.24686
- U.S. Food and Drug Administration (FDA), "Artificial Intelligence-Enabled Device Software Functions: Lifecycle Management and Marketing Submission Recommendations," Draft Guidance, Docket No. FDA-2024-D-4488, Jan. 2025. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/artificial-intelligence-enabled-device-software-functions-lifecycle-management-and-marketing
- R. Greenblatt, B. Shlegeris, K. Sachan, and F. Roger, "AI Control: Improving Safety Despite Intentional Subversion," in Proc. 41st Int. Conf. Machine Learning (ICML), 2024, arXiv:2312.06942. https://arxiv.org/abs/2312.06942
- C. Wick, "Agentic AI Enterprise Adoption 2026: Why 72% Are in Production Without Governance," Agentic AI Institute, May 2026. https://agenticaiinstitute.org/agentic-ai-enterprise-adoption-2026-governance-gap/