Yes! We're exploring a TLS based verification system so that the clients can verify that the model and the responses were not tampered with. https://github.com/tlsnotary/tlsn/
I'm currently exploring this. Unlike those solutions, we don't need an attestor at all. Because its a different usecase the client is the attestor and the verifier.
