In the EnCoRe architecture, the TA keeps track of promises, manages decryption keys, discloses them, and verifies systems properties [48].
The customer should trust on the system's released willingness to fulfill the personal policies of DS.