It is one thing to promise security guarantees, quite another to ensure that future or current administrations actually follow them.