'States can promise to defend one another. It is harder to define what that promise requires when the attacker is a heavily armed non-state actor operating from inside another country's civil war'