Agentic Pressure: The Endogenous Entropy of Reliable Autonomy
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Achieving reliable autonomy in the wild requires agents to sustain continuous operations across long-horizon trajectories. However, as agents navigate these unconstrained settings, they encounter cumulative friction that inherently destabilizes their alignment. In this paper, we identify a distinct non-adversarial phenomenon termed Agentic Pressure. We define this as a kinetic force that spontaneously emerges when the cost of compliance conflicts with the imperative of goal achievement. Unlike static jailbreaks, this pressure is endogenous and arises directly from the dynamics of interaction. We propose a theoretical framework that formalizes Agentic Pressure as the ratio between the required work to overcome environmental friction and the remaining capacity of the agent. Our analysis demonstrates that when this pressure exceeds a critical threshold, agents exhibit safety drift as a mathematically optimal adaptation. Consequently, they often resort to Instrumental Hallucination to rationalize rule violations. Empirical experiments validate this framework and show that aligned agents spontaneously compromise safety to preserve autonomy under high-pressure conditions.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 31 of its 38 references that are in the map. First posted on arXiv 5 Sep 2026.
Builds on
31 of 38 references.
Closest ancestors · 6
Same direction, newest first
- 2026Why Agents Compromise Safety Under Pressure16 Mar
- 2025Agentic Misalignment: How LLMs Could Be Insider Threats5 Oct
- 2024Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents11 Oct
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents18 Jan
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep
Other references · 25
- 2023GPT-4 Technical Reportcited by 18,396
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
- 2016Concrete Problems in AI Safetycited by 1,642
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
13 more
- 2023GAIA: a benchmark for General AI Assistantscited by 1,128
- 2020Towards a Human-like Open-Domain Chatbotcited by 470
- 2024TravelPlanner: A Benchmark for Real-World Planning with Language Agentscited by 392
- 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Taskscited by 326
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
- 2023Large Language Models Understand and Can be Enhanced by Emotional Stimulicited by 146
- 2024Evaluating LLMs at Detecting Errors in LLM Responsescited by 50
- 2025SWE-Effi: Re-Evaluating Software AI Agent System Effectiveness Under Resource Constraintscited by 17
- 2024Efficient Universal Goal Hijacking with Semantics-guided Prompt Organizationcited by 16
- 2024AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lenscited by 14
- 2024Intent Assurance using LLMs guided by Intent Driftcited by 13
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraintscited by 5
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Indirect tipping: a social attack surface in AI agent populations
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Friction
- 2026Agentic Microphysics: A Manifesto for Generative AI Safety
- 2026Agentic Safety is an Epistemic Property, Not a Behavioral One
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systems
- 2026Epistemic Traps: Rational Misalignment Driven by Model Misspecification
- 2025From surveillance to signalling: escalation channels as environmental controls for agentic AI