Usenix Security '23 - Patrol: Provable Defense Against Adversarial Policy In Two-Player Games