N17Q made authorization depend on current policy at the last responsible moment, allowing a new rule, revoked connection, or changed data class to pause a run without corrupting its historical decisions.
#policy
N17Q began evaluating what agents do after a capability is refused, revealing whether they narrow scope, seek evidence, stop well, or merely search for another route to the same effect.
Repository instructions improved agent behavior, but N17Q kept filesystem, command, network, approval, and effect controls outside text the workspace could influence.
N17Q returned bounded, consequence-aware policy reasons that helped an agent choose a narrower safe path without exposing hidden capabilities or turning refusal into negotiation.
N17Q revalidated identity, authority, arguments, approvals, budgets, tool mappings, and world preconditions after planning because all could change while an action waited.