Model provenance with ZK proofs of training data

Search: "privacy preserving model provenance"