Verifier
A verifier is the party that examines evidence from or about a prover and decides whether the prover's claim holds 1 2.
Under an international agreement the verifier may be another state, an international institution, a government body or a third party 1 3. In proof systems, soundness protects the verifier: if a statement is false, a verifier that follows the protocol will not be convinced 4. The Internet Engineering Task Force (IETF) remote-attestation architecture splits the role in two: a verifier appraises evidence and produces attestation results, and a separate relying party acts on them 2. In Shavit's compute-monitoring framework the verifier randomly samples and physically inspects accelerators, and re-runs selected training segments as in proof-of-learning 5. In low-trust settings the verifier is itself a potential adversary. Cankaya's system overview assumes it may try to exfiltrate the prover's secrets, so the prover distrusts the devices the verifier relies on 6.
Related
Used in
- Research demoConfidential multi-party verification
- ProposedMemory wiping and proofs of secure erasure
- ProposedNetwork taps and certifiers
- Research demoTraining-transcript verification (proof-of-learning)⚠
- Research demoSafeguard attestation
- Operational useSampled inference recomputation
- Research demoTamper evidence for verifier devices
- Operational useTEE remote attestation for AI workloads⚠
- Research demoTimed challenge-response and memory-occupation challenges
- Research demoZero-knowledge proofs of inference
- ProposedData-centre memory challenging Draft
- Research demoEZKL
- Research demoGPU contention probes Draft
- ProposedLow-trust AI compute verification system overview
- ProposedModel fingerprint attestation
- Research demoSAGE Draft
- Research demoVRAM-residency challenge Draft
- Research demozkLLM
Sources
- Tier B. B. Harack et al. (2025). Verification for International AI Governance. Oxford Martin AI Governance Initiative. Source recordSupports: Verifier defined as an institution, such as another state or an international institution, that assesses the Prover's compliance · fn. 20
- Tier B. H. Birkholz et al. (2023). Remote ATtestation procedureS (RATS) Architecture (RFC 9334). Internet Engineering Task Force (RATS Working Group). Source recordSupports: Verifier appraises evidence and produces attestation results; Relying Party acts on them · §4 Terminology
- Tier B. M. Baker et al. (2025). Verifying International Agreements on AI: Six Layers of Verification for Rules on Large-Scale AI Development and Deployment. RAND Corporation. Source recordSupports: Verifier may be a government body or a third party · §3.1
- Tier B. D. Benarroch et al. (2022). ZKProof Community Reference. ZKProof. Source recordSupports: soundness: if the statement is false, a verifier following the protocol will not be convinced · p. 1
- Tier B. Y. Shavit (2023). What does it take to catch a Chinchilla? Verifying Rules on Large-Scale Neural Network Training via Compute Monitoring. arXiv. Source recordSupports: Verifier randomly samples and inspects chips and re-runs selected training segments · §3.1–3.2; §5.1
- Tier B. N. Cankaya (2026). A System Overview for Near-Term, Low-Trust AI Compute Verification. Machine Intelligence Research Institute. Source recordSupports: a malicious verifier may try to exfiltrate confidential information; its devices are verifier-trusted and prover-distrusted · threat model section