If you can’t attribute an agent’s actions, you can’t secure it | Brew