I remember that being the mindset from industrial robotics: you're not modeling the device, you're modeling a device you can prove is weaker than the actual device.