How do you verify this when AIs are not idempotent?