Proving what a military AI model will do is the real problem