Which boxes did he check, other than the introductory "technical" box (rather than legislative, etc), and arguably the brute force one? The whole point of the

Which boxes did he check, other than the introductory "technical" box (rather than legislative, etc), and arguably the brute force one? The whole point of the checklist was that people kept re-inventing the square wheel (white-lists, trust circles, black-lists, $0.0001 emails, and so on).