Designing Bridges — Why this matters

Bridges are failure magnetsMost nine-figure exploits hit bridges: bad replay protection, weak signers, stale state, or missing domain separation.

Assume every message will be replayed unless you prove it can’t.

— Bridge audit mantra

Trust is configurationYour trust model is literally the code: who can attest, how many, on which chain, and how proofs expire. Make it explicit.