{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T06:02:30Z","timestamp":1790143350088,"version":"4.0.1"},"reference-count":53,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/satml68715.2026.00058","type":"proceedings-article","created":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T19:06:15Z","timestamp":1790103975000},"page":"955-977","source":"Crossref","is-referenced-by-count":0,"title":["Towards Verifiable AI with Lightweight Cryptographic Proofs of Inference"],"prefix":"10.1109","author":[{"given":"Pranay","family":"Anchuri","sequence":"first","affiliation":[{"name":"Offchain Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matteo","family":"Campanelli","sequence":"additional","affiliation":[{"name":"Offchain Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Cesaretti","sequence":"additional","affiliation":[{"name":"CUNY Graduate Center"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rosario","family":"Gennaro","sequence":"additional","affiliation":[{"name":"Offchain Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tushar M.","family":"Jois","sequence":"additional","affiliation":[{"name":"CUNY Graduate Center"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hasan S.","family":"Kayman","sequence":"additional","affiliation":[{"name":"City College of New York"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tugce","family":"Ozdemir","sequence":"additional","affiliation":[{"name":"CUNY Graduate Center"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-021-03819-2"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.5555\/2999134.2999257"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.81"},{"key":"ref4","article-title":"Gemini: A family of highly capable multimodal models","author":"T","year":"2025"},{"key":"ref5","article-title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning","author":"A","year":"2025"},{"key":"ref6","article-title":"GPT-4 technical report","author":"O","year":"2024"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1137\/0218012"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/22145.22192"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0061"},{"key":"ref10","first-page":"501","article-title":"Mystique: Efficient conversions for {Zero-Knowledge} proofs with applications to machine learning","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Weng"},{"key":"ref11","article-title":"Scaling up trustless dnn inference with zero-knowledge proofs","author":"Kang","year":"2022"},{"key":"ref12","first-page":"87","article-title":"Zen: Efficient zero-knowledge proofs for neural networks","volume":"2021","author":"Feng","year":"2021","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3348760"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485379"},{"key":"ref15","article-title":"zkGPT: An efficient non-interactive zero-knowledge proof framework for llm inference","volume-title":"34st USENIX Security Symposium (USENIX Security 25)","author":"Qu"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670334"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.34190\/iccws.19.1.2096"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38348-9_37"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2856449"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"ref21","article-title":"Measuring SNARK performance","author":"Thaler","year":"2022"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670334"},{"key":"ref23","first-page":"161","article-title":"Fairwashing: the risk of rationalization","volume-title":"Proceedings of the 36th International Conference on Machine Learning","volume":"97","author":"Aivodji"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.ic.2013.03.003"},{"key":"ref25","first-page":"12","article-title":"zk-SNARKs: A gentle introduction","author":"Nitulescu","year":"2020","journal-title":"Ecole Normale Superieure"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3728458"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3389\/neuro.06.004.2008"},{"key":"ref28","article-title":"Similarity of Neural Network Representations Revisited","author":"Kornblith","year":"2019"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/129712.129782"},{"key":"ref30","article-title":"Marlin: Preprocessing zkSNARKs with universal and updatable SRS","author":"Chiesa","year":"2019","journal-title":"Cryptology ePrint Archive, Paper 2019\/1047"},{"key":"ref31","article-title":"Fully succinct arguments over the integers from first principles","author":"Campanelli","year":"2024","journal-title":"Cryptology ePrint Archive, Paper 2024\/1548"},{"key":"ref32","article-title":"Are you getting what you pay for? auditing model substitution in LLM APIs","author":"Dong","year":"2025"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48184-2_32"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36362-7_5"},{"key":"ref35","article-title":"Svip: Towards verifiable inference of open-source large language models","author":"Sun","year":"2025"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00178"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2488608.2488709"},{"key":"ref38","first-page":"1353","article-title":"Arbitrum: Scalable, private smart contracts","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Kalodner"},{"key":"ref39","article-title":"Ethereum, smart contracts and the optimistic roll-up","author":"Armstrong","year":"2021"},{"key":"ref40","article-title":"opML: Optimistic machine learning on blockchain","author":"Conway","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1017\/9781108135252"},{"key":"ref42","first-page":"218","article-title":"A certified digital signature","volume-title":"Advances in Cryptology\u2014CRYPTO \u201989: 9th Annual International Cryptology Conference, Santa Barbara, California, USA, August 20-24, 1989, Proceedings","volume":"435","author":"Merkle"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref44","article-title":"Llama 2: Open foundation and fine-tuned chat models","author":"T","year":"2023"},{"key":"ref45","article-title":"Algebra unveils deep learning\u2013an invitation to neuroalgebraic geometry","author":"Marchetti","year":"2025"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2978386"},{"key":"ref47","article-title":"Fiat-Shamir goes rational","author":"Campanelli","year":"2024","journal-title":"Cryptology ePrint Archive, Paper 2024\/1645"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2011"},{"key":"ref49","article-title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","author":"Qi","year":"2023"},{"key":"ref50","article-title":"Uncensored AI in the wild: Tracking safety-modified open-weight LLMs","year":"2025","journal-title":"Preprints.org"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00178"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53644-5_2"},{"key":"ref53","first-page":"26330","article-title":"Neural network weights do not converge to stationary points: An invariant measure perspective","volume-title":"International Conference on Machine Learning","author":"Zhang"}],"event":{"name":"2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","location":"Munich, Germany","start":{"date-parts":[[2026,3,23]]},"end":{"date-parts":[[2026,3,25]]}},"container-title":["2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11691582\/11691603\/11691921.pdf?arnumber=11691921","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T05:18:44Z","timestamp":1790140724000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11691921\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":53,"URL":"https:\/\/doi.org\/10.1109\/satml68715.2026.00058","relation":{},"subject":[],"published":{"date-parts":[[2026,3]]}}}