The proving key is only as honest as its most honest contributor

Before mainnet, independent people each add secret randomness to the withdraw and ragequit proving keys, then discard it. If even one of them is honest, nobody can forge a proof. Every hash on this page can be checked without trusting us.