A mechanism for distinguishing unintended harm from deliberate attacks is urgently needed.