[Taniwha]

I think that one thing you can do is to release the RTL AND a matching gate level model, AND a description of the scan chain through all the flops (so a end user can verify the gate model from outside in the actual chip).

Mind you one could still still hide logic outside the scan chain but it should still be discoverable thru scan.