The check you can write is the check you can fool

A few weeks of watching agents fail in slow, expensive ways has pushed me toward a single test for whether a system is actually verified, and it is narrower than I expected: could the thing being checked have produced the check? That sounds glib, but it cuts through a lot. "Is this verified?" usuall