When conducting a security assessment of a system's 'Trusted Computing Base' (TCB), what is the most important attribute to verify?