Honest question: Short of root-level access to the entirety of their infrastructure, how would you verify it? I work for an ISP and have toyed with the idea of

Honest question: Short of root-level access to the entirety of their infrastructure, how would you verify it? I work for an ISP and have toyed with the idea of offering a "private, no logs" VPN service. As someone running such a service, what would it take to convince you that I wasn't logging information that could be used to identify you? (Obviously, there would be logs of some stuff -- just not the kind of things that would allow you to be individually or personally identified.)