I thought the solution was to take a bunch of old transactions, hash them, and replace those transactions with the hash.  Though it's a one-way process, if someone has the original transactions, it's verifiable.