Deontic Policies for Runtime Governance of Agentic AI Systems
Quick Answer
The paper introduces AgenticRei, a deontic policy framework for governing agentic AI systems, addressing security and compliance challenges beyond current engines like XACML and Rego.
Quick Take
It enables obligation management, conflict resolution, and reasoning over policies using OWL, enhancing governance in sectors like healthcare and cybersecurity.
Key Points
- AgenticRei addresses governance issues in autonomous AI systems beyond permit/prohibit models.
- It incorporates obligation lifecycle management and meta-policy conflict resolution.
- The framework is evaluated at runtime by a high-performance logic engine.
- AgenticRei is compatible with industry-standard frameworks like A2AS.
- Deontic policies capture complex governance constraints not expressible in current engines.
Paper Resources
📖 Reader Mode
~2 min readAbstract:Autonomous agentic AI systems driven by Large Language Models (LLMs) introduce a new class of security, privacy, and compliance challenges: an agent that can invoke tools, manipulate data, install software, and coordinate with peer agents across organizational boundaries must be constrained not just by authentication and access control, but by the full structure of enterprise governance. This includes specifying what agents are permitted and prohibited from doing, what they areobliged to do after certain actions (e.g., notify the CISO), under what conditions a standing obligation may be waived, and which rules take precedence when policies conflict. This governance problem exceeds what current policy engines provide. Systems such as XACML, Rego, and Cedar address only the permit/prohibit subset of this governance structure. They do not provide obligation lifecycle management, meta-policy conflict resolution, dispensations that waive obligations in specific circumstances, and ontological reasoning over domain class hierarchies commonly found in applications such as healthcare, cybersecurity, or data privacy. We propose AgenticRei, which realizes key governance requirements such as obligations, dispensations, policy conflict resolutions, and reasoning over policies, as well as the basic permit/prohibit constraints. We use a deontic policy language built on the Rei framework, expressed as OWL (Web Ontology Language) and evaluated at runtime by a high-performance logic engine entirely outside the LLM. The same pipeline governs both tool invocations by the agent and agent-to-agent messages. We show through examples that deontic policies capture governance constraints around security and privacy that mostly cannot be expressed in current production engines. Our approach composes naturally with industry-standard frameworks like A2AS.
| Comments: | 10 pages, 1 figure. To be published in the 2026 IEEE Symposium on Agentic Services which is part of the IEEE Conference on Web Services |
| Subjects: | Artificial Intelligence (cs.AI); Multiagent Systems (cs.MA) |
| Cite as: | arXiv:2606.19464 [cs.AI] |
| (or arXiv:2606.19464v1 [cs.AI] for this version) | |
| https://doi.org/10.48550/arXiv.2606.19464 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Tim Finin [view email]
[v1]
Wed, 17 Jun 2026 18:02:07 UTC (3,450 KB)
— Originally published at arxiv.org
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from arXiv cs.AI
See more →HOBA: Hierarchical On-Policy Bidding Agents for Adaptive Online Advertising
HOBA (Hierarchical On-policy Bidding Agents) is a novel hierarchical reinforcement learning framework that enhances online advertising bidding systems by improving adaptability and reducing hyperparameter tuning costs. It utilizes a for hyperparameter inference, a SARSA agent for expert model selection, and a dynamic expert pool for bid execution, achieving a +3.6% increase in target cost during large-scale deployment and outperforming state-of-the-art baselines on AuctionNet.