Can anyone link to some good introductory technical resources on how zkapps work and what their limitations are?

I see the stated claims but my current understanding of crypto and smart contracts is insufficient to figure out the inner workings.

It feels like it should be impossible to know/verify the results of a general program without running it yourself.