I guess you could do some SNARK like proof. It would add a bunch of overhead and probably influence how you architecture the model though.