Had a chat with chatgpt about this issue. Said:

"Don't trust the provider. Verify the workload.

And where cryptographic verification isn't possible, continuously test the provider anonymously and expose the resulting evidence rather than pretending the model identity is certain."

Said lots more, too, but let's not go longform.

Routstr def would enable this kind of verification protocol in a way proprietary models never would/could.