If it's not deterministic you can never fully trust it. In a deterministic abstraction I don't need to audit the lower levels.