How much verification is enough?