A new research paper proposes Deontic Policies to constrain autonomous agents beyond simple access control. The system defines specific permissions, prohibitions, and obligations, such as mandatory CISO notifications after certain actions. This approach addresses the gap in current policy engines. It provides a formal structure for managing conflicting rules in enterprise agent deployments.