Take a note of "Signatures of Correct Computation"

[osuketh]

Signatures of Correct Computation

In PVC, a “proof of correct computation” is tied to a specific challenge, and can only be verified by the client who has generated that challenge (or anyone who trusts this client).
By contrast, a signature of correct computation is not tied to any challenge, and can be verified by anyone in the world, in much the same way as a traditional signature on a message.

[osuketh]

• Efficient NIZK Arguments via Parallel Verification of Benes Networks
• Prover-Efficient Commit-And-Prove Zero-Knowledge SNARKs
• Efficient Modular NIZK Arguments from Shift and Product