Prover
The party that makes a claim about its own AI hardware, models or workloads and supplies the evidence a verifier checks.
A prover is the party that asserts a claim, such as compliance with an agreement, and tries to convince a verifier that it is true 1 2.
In AI verification the prover may be a developer, another private institution or a state; under an international agreement it may be a government that constrains companies within its territory 3 4. The prover usually owns and physically controls the hardware being checked, and Shavit notes that unlimited physical access could undermine a chip's attestation and signed-firmware protections 3. He models the prover as a covert adversary that breaks the rules only if it expects to avoid detection 3. In remote attestation the corresponding role is the attester, a device whose evidence is appraised to judge how far it can be trusted 5.
What the prover supplies depends on the mechanism:
- In proof-of-learning, it reports checkpoints and data batches, so that the verifier can re-run segments of training 3.
- In zero-knowledge proofs of inference, it generates a proof that an output came from running its model, without revealing the weights 6.
- In TEE remote attestation, its hardware produces signed evidence about the software it runs 5.
Related
Used in
- R2Confidential multi-party verification
- R1Memory wiping and proofs of secure erasure
- R1Network taps and certifiers
- R2Proof-of-learning and training-transcript verification⚠
- R2Safeguard attestation
- R2Sampled inference recomputation
- R2TEE remote attestation for AI workloads⚠
- R1Timed challenge-response and memory-occupation challenges
- R2Zero-knowledge proofs of inference
- R1Low-trust AI compute verification system overview
- R2zkLLM
Sources
- BD. Benarroch et al. (2022). ZKProof Community Reference. ZKProof. Source recordSupports: a prover tries to convince a verifier that a statement is true · p. 1
- BB. Harack et al. (2025). Verification for International AI Governance. Oxford Martin AI Governance Initiative. Source recordSupports: Prover defined as a state claiming to demonstrate its compliance with an agreement · p. 18, fn. 20
- BY. Shavit (2023). What does it take to catch a Chinchilla? Verifying Rules on Large-Scale Neural Network Training via Compute Monitoring. arXiv. Source recordSupports: Prover as an ML developer or state, modelled as a covert adversary; unlimited physical access can undermine attestation and signed-firmware enforcement; verifier re-runs training segments from reported checkpoints and data batches · §2; §3.1; §5.1
- BM. Baker et al. (2025). Verifying International Agreements on AI: Six Layers of Verification for Rules on Large-Scale AI Development and Deployment. RAND Corporation. Source recordSupports: Prover may be a private institution or a government constraining companies in its territory · §3.1
- BH. Birkholz et al. (2023). Remote ATtestation procedureS (RATS) Architecture (RFC 9334). Internet Engineering Task Force (RATS Working Group). Source recordSupports: Attester role: a device whose evidence is appraised to infer how far it is trustworthy · §4 Terminology
- AH. Sun et al. (2024). zkLLM: Zero Knowledge Proofs for Large Language Models. 2024 ACM SIGSAC Conference on Computer and Communications Security (CCS 2024). Source recordSupports: proof that an output came from running the model, without revealing its parameters · abstract