Which aspect of the system limits the degree of confidence you can have in the origin of any given document if the implementation of all software is flawless?