You could boot from a liveCD or some other read-only media. Your files could live on a server you trust, accessed only by encrypted means that you trust haven't been modified because your machine is read only.

You have to trust something.