Transparency is a good start, but verification is the hard part. Prove