Many important rules cannot be checked on-chip

Malicious intent "is not a technical property observable on-chip", and misuse depends on what is done with a computation's results ¹. A guarantee processor cannot easily tell whether a network is the whole system or one expert in a mixture-of-experts system ¹. Part III judges that a fully local ruleset "may not be entirely feasible" for the same reason ⁴.