that could be mitigated with cryptographic signatures being attached to the direct output from corporate models and either needing that signature to match or having the full prompt and random numbers for a reproducible output.