yeah, I was referring to iO. I'm not an expert at all, but the most promising avenue I see is to make iO decryptors of FHE programs, which would verify that the

yeah, I was referring to iO. I'm not an expert at all, but the most promising avenue I see is to make iO decryptors of FHE programs, which would verify that the output came from the end of the FHE program and then decrypt it. I'm not sure whether you could successfully hide the FHE decryption key with iO, though.