VeriRouter: Towards Verifiable LLM Routing

Summary

VeriRouter is a verifiable framework for LLM routers, which select models and rewrite requests and can be compromised. It combines ZK proofs with a provider-issued serving certificate, under an endorsed public context binding a private semantic index and rewrite banks, to check integrity on both the control and data planes while keeping routing assets hidden from clients. On real-world workloads, model-selection and rewrite proofs average 21.92 s and 4.24 s, and verification adds 4.08 s per turn or 0.11 s with session-pinned selection.