Content & Construction: NAQD-Env is a typed-premise environment featuring eleven dependency families covering direct support, propagation, alternatives, delegation, and prohibited combinations. It uses explicit evidence, authorization, and constraint dependencies to simulate scenarios where premises change (e.g., revoked grants), requiring agents to suspend affected actions while preserving unaffected work.
Scoring & Key Findings: The benchmark employs a multidimensional scoring protocol distinguishing attempted violations from executed ones via a simulated gate. Metrics include withdrawal recall, resumption accuracy, and policy agreement. Baseline evaluations of models like Qwen2.5-7B showed low withdrawal recall (at most 0.06) and no valid resumptions observed at eligible opportunities.