Is there a way to prove to a visitor of a web page that an open-source serverside application hosted on a Webserver is completly unmodified (without malicious code)? The app has to be server-side, client-side is not possible. Are there any hosting providers that confirm that only a unmodified script is running?

e.g. confirming that a random number generator does not store its calculated values.