This looks good to me at first consideration. All I want is zk verifiers and a secure trustless bridge, I think your proposal gets is there all the way.