N17Q separated consent from world-state eligibility after an exactly approved patch targeted a resource that changed before execution.
#approval
N17Q redesigned approval around consequence, uncertainty, reversibility, and recovery so a reviewer could consent to what might happen after failure—not merely to the happy path.
N17Q changed a target after review and treated the once-valid decision as historical evidence, not current authority for a well-formed but stale action.
N17Q bound human consent to normalized arguments, current policy, a precise run checkpoint, effect identity, expiry, and world preconditions that could still invalidate execution.