@alex 2. Take every possible permutation of outputs, create signature, perform the same on the server.
You won't actually prove it's running that code at all, but you'll prove that there's no practical difference.