Hacker News Reader

These obligations are meaningless unless there is a way to verify compliance.

This has shades of a comparison between security by architecture vs security by agreement/trust: