Well, short of making all the code open source and then letting people review it and run it themselves... or having some kind of code signing where people could know the code being run on the site matches what is in the github repo. Either way, it's tricky and people will just have to trust it (or not). Ultimately, vendors and game providers should hopefully be motivated to maintain their reputations by only running systems which are honest and fair.