Who is the manufacturer in the case of an AI agent running in a secure enclave that nobody can trace or prove was responsible?