What does it actually mean for an AI system to be trustworthy?