How can we trust the outputs of an agentic AI system?