# R19: Private and Verifiable Outsourcing of Open-Weight LLM Inference

The abstract describes private and verifiable open-weight inference with two malicious, non-colluding servers and model-owner-published information. PLLM status: tracked.

[View canonical HTML](https://pllm.run/research/papers/r19-open-weight-verifiable/)

Document ID: `pllm.docs.research.papers.r19-open-weight-verifiable`  
Release: `0.1.0`

**Status:** `tracked`
**Year:** 2026
**Authors:** Kanav Gupta, Jonathan Katz, Ian Miers
**External source:** [Private and Verifiable Outsourcing of Open-Weight LLM Inference](https://eprint.iacr.org/2026/1849)

## Source contribution

The abstract describes private and verifiable open-weight inference with two malicious, non-colluding servers and model-owner-published information.

## PLLM perspective

Acquire the complete protocol and original artifact first. Create a faithful isolated adapter with a documented client, model-owner, server and proof boundary.

Only abstract-level comparison exists in the supplied work.

This paper remains tracked. Named modules below are implementation targets, not finished PLLM components; no reproduction, integration, assurance, or matched benchmark is claimed.

The source's boundary remains binding: Abstract claims alone do not specify a reproducible protocol or near-native sustained TPS. This remains source-acquisition-gated.

## PLLM modules and documentation

Target module identifiers: `protocol.open_weight_verified`, `verify.model_owner_setup`. These identifiers describe scoped work unless this page explicitly links an implementation source. Dependencies: None.

- [Research backlog](/research/backlog/)
- [Reimplementation backlog](/research/backlog/)
- [Clean-room workflow](/research/clean-room/)

## Backlog

This source is assigned to reimplementation priority 9, **Source-gated verifiable comparison**. Its source-registry order is 19. Follow current gates and unfinished work in the [research backlog](/research/backlog/).