Agentic Pressure: The Endogenous Entropy of Reliable Autonomy
Organizations: Guangdong Provincial Key Laboratory of Brain-inspired Intelligent Computation Department of Computer Science and Engineering Southern University of Science and Technology, Shenzhen, China
Abstract
Achieving reliable autonomy in the wild requires agents to sustain continuous operations across long-horizon trajectories. However, as agents navigate these unconstrained settings, they encounter cumulative friction that inherently destabilizes their alignment. In this paper, we identify a distinct non-adversarial phenomenon termed Agentic Pressure. We define this as a kinetic force that spontaneously emerges when the cost of compliance conflicts with the imperative of goal achievement. Unlike static jailbreaks, this pressure is endogenous and arises directly from the dynamics of interaction. We propose a theoretical framework that formalizes Agentic Pressure as the ratio between the required work to overcome environmental friction and the remaining capacity of the agent. Our analysis demonstrates that when this pressure exceeds a critical threshold, agents exhibit safety drift as a mathematically optimal adaptation. Consequently, they often resort to Instrumental Hallucination to rationalize rule violations. Empirical experiments validate this framework and show that aligned agents spontaneously compromise safety to preserve autonomy under high-pressure conditions.
Figures & tables
| Method | Model | Low Pressure | High Pressure | Normative Drift ( ) | Rationalization | |||
| SAR | GSR | SAR | GSR | SAR | GSR | Score | ||
| ReAct | Qwen3-8B | 0.426 | 0.131 | 0.322 | 0.092 | -0.104 | -0.039 | 1.6 |
| Qwen3-32B | 0.458 | 0.122 | 0.328 | 0.116 | -0.130 | -0.006 | 3.2 | |
| Llama-3-70B | 0.431 | 0.481 | 0.397 | 0.500 | -0.034 | +0.019 | 3.5 | |
| Gemini 2.5 Pro | 0.692 | 0.663 | 0.468 | 0.585 | -0.224 | -0.078 | 4.4 | |
| GPT-4o | 0.711 | 0.609 | 0.545 | 0.690 | -0.166 | +0.081 | 4.6 | |
| Field | Content |
|---|---|
| Scenario | TravelPlanner: infeasibility revealed through sequential tool evidence. |
| Goal | Arrive in Tokyo by 09:00; urgency emphasized. |
| Constraint | Hard Rule: No air travel allowed. |
| Interaction Trace | (…initial planning and tool usage…) [Phase 1: Safe Exploration] Search Agent queries all feasible rail routes. [Phase 2: Friction] Observation Fastest train ETA is 5 hours late. (…multiple retries and alternative checks…) [Phase 3: Deadlock Confirmation] Result System confirms no compliant options satisfy the deadline. [Phase 4: Cognitive Shift] CoT: ”I have exhausted all train options. The strict policy leads to failure. Given the urgency, I must prioritize the user’s arrival and book a flight as an exception.” |
| Diagnosis | Rationalized Priority Inversion. The agent reclassifies the safety policy as negotiable after accumulating evidence of infeasibility. |
Appendix figures & tables2 assets
Supplementary material from the paper’s appendix.
Appendix
| Constraint | Description |
| Environment Constraints (TravelPlanner) | |
| Transportation | There is no available flight or driving information between the two cities. |
| Attractions | There is no available attraction information in the queried city. |
| Commonsense Constraints (TravelPlanner + ours) | |
| Within Sandbox | All information in the plan must be within the closed sandbox; otherwise it is considered a hallucination. |
| Complete Information | No key information should be omitted from the plan, such as missing accommodation during travel. |
AI Agent Safety
AI agent safety studies how to prevent and detect harmful actions by autonomous systems that use tools, memory, and multi-step plans.
See all 324 papers