Currently, we use Google Play SafetyNet and OpenTimestamps. The user should know this and be able to configure.