The general rule of thumb is that trust is easier to lose than to establish, and that punishment should far exceed the crime. Absent that, the "ask forgiveness" strategy tends to take hold, requiring relentless vigilance and generally wasting everyone's time.