But then anyone else can do that and write a neat fortress generator trained to produce outputs that pass the neat fortress classifier.