This is the same in Internet governance. The “how might we?” are the RFCs. Then the implementers, of course, are commercial entities. They are sometimes corrupt, I guess, but if they don’t conform to the Internet standards, everybody discover in no time.