"I present a model where a regulator monitors compliance with a policy by a population of individuals, some of whom repeatedly prefer to violate the policy, while others only occasionally want to experiment. I show that the regulator can use sanctions, contingent on past violations of the...