Proposing a method to achieve verifiable training by controlling hardware nondeterminism, ensuring correctness and guarding against attacks.