Scaling up Trustless DNN Inference with Zero-Knowledge Proofs


ZENO: Type-based Optimization Framework for Zero-Knowledge NN Inference


ezDPS: An Efficient and Zero-Knowledge ML Inference Pipeline


zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training


Verifiable evaluations of machine learning models using zkSNARKs


Artemis: Efficient Commit-and-Prove SNARKs for zkML


Zero-Knowledge Proofs of Training for Deep Neural Networks


A Survey of Zero-Knowledge Proof Based Verifiable Machine Learning


Trust the Process: Zero-Knowledge ML to Enhance Trust in Generative AI


SZKP: A Scalable Accelerator Architecture for Zero-Knowledge Proofs


ZKP-based Verifiable Machine Learning: A Comprehensive Survey


A Survey on the Applications of Zero-Knowledge Proofs


ByzSFL: Byzantine-Robust Secure Federated Learning with Zero-Knowledge Proofs


Daniel Kang (UIUC; trustless DNN inference)


Teamwork Makes TEE Work: Open & Resilient Remote Attestation on Decentralized Trust


CCxTrust: Confidential Computing Platform Based on TEE and TPM Collaborative Trust


A Confidential Computing Transparency Framework for a Comprehensive Trust Chain


GuaranTEE: Control-Flow Attestation for Trusted Execution Environments


Transparent Attested DNS for Confidential Computing Services


RA-WEBs: Remote Attestation for WEB services


Attestation Mechanisms for Trusted Execution Environments Demystified


Formally-verified Security against Forgery of Remote Attestation using SSProve


SoK: A cloudy view on trust relationships of CVMs (Public Cloud)


Confidential Attestation: Efficient in-Enclave Verification of Privacy Policy Compliance


Evidence Tampering and Chain of Custody in Layered Attestations (Copland)


Confidential Computing Consortium (Linux Foundation)


Microsoft Research Confidential Computing


IETF RATS — Remote ATtestation procedureS (RFC 9334 architecture)


enarx/kernel (GitLab; Enarx confidential-computing WebAssembly runtime)


enarx/lab (GitLab; Enarx CC experiments)


Enarx (confidential computing, GitLab-hosted)


Antoine Delignat-Lavaud (MSR; attested DNS)


Pascal Felber (attestation demystified, UniNE)


NIST AI Risk Management Framework (AI RMF 1.0, NIST AI 100-1)


ISO/IEC 42001:2023 — AI Management System


ISO/IEC 23894:2023 — AI Risk Management guidance


NIST (US National Institute of Standards & Technology)


A Dual Approach to Scalable Verification of Deep Networks


An Abstraction-Based Framework for Neural Network Verification


Towards a Certified Proof Checker for DNN Verification (Imandra)


Taming Differentiable Logics with Coq Formalisation


Neuro-Symbolic Verification of Deep Neural Networks


A Convex Relaxation Barrier to Tight Robustness Verification of NNs


Efficient Neural Network Analysis with Sum-of-Infeasibilities


Verified Neural Compressed Sensing (DeepMind)


VNN: Verification-Friendly Neural Networks with Hard Robustness Guarantees


The 6th International Verification of Neural Networks Competition (VNN-COMP 2025)


VNN-COMP (Int'l NN Verification Competition)


Verified Intelligence (CMU/UCLA/UIUC verification group)


HUJI (Hebrew University) NN Verification group


jaymorgan/NeuralVerifier.jl (GitLab; Julia NN verification)


VNN-COMP 2025 benchmarks (ONNX + VNN-LIB)


VNN-LIB standard for NN verification specifications


Ekaterina Komendantskaya (certified checkers; Coq)


Establishing Provenance Before Coding: Traditional & Next-Gen Software Signing


SoK: Analysis of Software Supply Chain Security by Secure Design Properties


Analyzing Challenges in Deployment of the SLSA Framework


An Industry Interview Study of Software Signing for Supply Chain Security


SoK: A Defense-Oriented Evaluation of Software Supply Chain Security (AStRA)


What is Software Supply Chain Security? (Intel; goal-oriented taxonomy)


An Empirically Grounded Reference Architecture for SSC Metadata Management


SLSA (Supply-chain Levels for Software Artifacts / OpenSSF)


OpenSSF (Open Source Security Foundation)


in-toto attestation predicate spec (ITE)


James C. Davis (software signing; Purdue)


Marcela Melara (SSC security; Intel Labs)


testifysec/cicd-components (GitLab; Witness/in-toto CI attestation components)


TestifySec (Witness / in-toto attestation)


AMP: Authentication of Media via Provenance (Microsoft)


Interoperable Provenance Authentication of Broadcast Media (C2PA + watermarking)


On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark (vs C2PA)


InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance


Waterfall: Robust and Scalable Text Watermarking and Provenance for LLMs


Proof of Humanity: Certifying Human-Originated Content in an AI-Dominated Internet


SepMark: Deep Separable Watermarking for Source Tracing and Deepfake Detection


C2PA — Coalition for Content Provenance and Authenticity


Content Authenticity Initiative (Adobe-led)


IPTC Photo Metadata (digital source type)


IETF COSE signatures (RFC 9052) — underpins C2PA claims


Joseph Winograd (C2PA; broadcast provenance)


Neil Zhenqiang Gong (watermark attribution; Duke)


In-context Learning and Induction Heads (Anthropic)


Mechanistic Interpretability for AI Safety — A Review


A Practical Review of Mechanistic Interpretability for Transformer LMs


Mechanistic? (Saphra & Wiegreffe — taxonomy of the term)


Everything, Everywhere, All at Once: Is Mechanistic Interpretability Identifiable?


A Primer on the Inner Workings of Transformer-based Language Models


The Mythos of Model Interpretability (Lipton)


Mechanistically Interpreting a Transformer-based 2-SAT Solver: An Axiomatic Approach


Apollo Research (interpretability & safety)


Neel Nanda (mech interp; DeepMind; TransformerLens)


Naomi Saphra (interpretability critique)


A Survey on the Memory Mechanism of LLM-based Agents


A-MEM: Agentic Memory for LLM Agents (Zettelkasten)


Position: Episodic Memory is the Missing Piece for Long-Term LLM Agents


MemoryBank: Enhancing LLMs with Long-Term Memory


In Prospect and Retrospect: Reflective Memory Management for Dialogue Agents


Think-in-Memory: Recalling and Post-thinking Enable LLMs with Long-Term Memory


A Practical Memory Injection Attack against LLM Agents (MINJA)


HiAgent: Hierarchical Working Memory Management for Long-Horizon Agent Tasks


MemDaily / MemSim benchmark for LLM assistant memory


Agent Security Bench (ASB) — attacks/defenses incl. memory


Yongfeng Zhang (A-MEM; agentic memory; Rutgers)


Charles Packer (MemGPT/Letta; UC Berkeley)


Efficient Synchronous Byzantine Consensus (Abraham, Devadas, Dolev, Nayak, Ren)


Reaching Consensus in the Byzantine Empire: A Review of BFT Consensus Algorithms


Proof-of-Execution: Reaching Consensus through Fault-Tolerant Speculation


Bolt-Dumbo Transformer: Asynchronous Consensus As Fast As Pipelined BFT


Revisiting Optimal Resilience of Fast Byzantine Consensus


An Analysis of Avalanche Consensus (Cachin et al.)


Self-stabilizing Byzantine Multivalued Consensus (Raynal et al.)


Byzantine Fault Tolerant Protocols with Near-Constant Work without Signatures


Hyperledger Foundation (LF Decentralized Trust)


Ittai Abraham (BFT; HotStuff; sync consensus)


Christian Cachin (BFT; Avalanche analysis; UniBern)


Michel Raynal (distributed computing; consensus)