How is the DAG enforced, if not by executing “make” ? Then you’re just relying on the LLM to infer intent, which invalidates the claim, right?